Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: vED9BZpCAbvsD/oMdrp10zZtFINjo8jtN64UZP8IRIM=
Subject key identifier: 72:82:E4:E8:E4:73:87:7F:3F:B0:3B:CE:0A:E7:DE:3D:A3:65:AA:60
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A16CB620660700FC5F3106CB4BAF0D7E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 06DF
Signing time: Sat 24 Oct 2026 07:00:37 +0000
Manifest this update: Sat 24 Oct 2026 07:00:37 +0000
Manifest next update: Sun 25 Oct 2026 07:00:37 +0000
Files and hashes: 1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
2: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (hash: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=)
3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: uiivMmo+rk3OekzSn97LEQlGlvdtAoTdVdgX9MGXKe4=)
4: NzGOwWDQOPETxj9EvmXudQeuwLI.roa (hash: Kknhz18DNtR1usJp51T3b1nw1Fkr9AIsd/KE8XOKe1s=)
5: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
6: bBE_lk3N6KS_zZoKS2wxF-vk23U.roa (hash: ehTdcQEnQLxX102cc7+OSyJZuGfqAICJZm2W6zJrmvg=)
7: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
8: ycv1jzLgd7j5nnAigjja5UrdTAk.asa (hash: 4B7WxTo6YNGN8EM+eQ/ebz9io459CdwWh5W2A+u4G1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:b6:20:66:07:00:fc:5f:31:06:cb:4b:af:0d:7e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Oct 24 07:00:37 2026 GMT
Not After : Oct 25 07:00:37 2026 GMT
Subject: CN=7282e4e8e473877f3fb03bce0ae7de3da365aa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:33:84:91:1c:05:8c:a4:b1:6b:90:1f:fb:
6b:01:4c:fd:04:2d:06:dc:a4:46:ed:79:de:7a:27:
b2:d2:2a:80:69:72:e0:34:12:8b:71:56:b6:8e:7e:
fb:d7:02:d7:d9:20:cd:76:bc:8b:cf:94:e9:09:8b:
63:a1:df:88:ca:0a:2c:9c:37:e2:42:d3:61:4b:ed:
cd:a6:3a:ed:2b:5c:8f:40:a6:2a:15:98:dd:62:3e:
21:80:4a:05:4e:5b:ba:e7:96:76:6c:2a:f4:28:b5:
c7:38:f3:c4:5c:14:92:2e:f7:4b:62:4b:41:c0:57:
ef:0d:32:bd:08:20:12:d8:c6:61:95:f8:64:23:ed:
69:54:13:a5:af:3b:ac:81:91:da:a6:a6:6c:25:3c:
c7:32:b5:87:7c:11:39:01:c2:88:81:6e:d5:06:0f:
e4:ae:77:67:c1:5a:c5:9b:e3:ea:6e:47:9d:b9:f2:
dd:07:e7:f5:0f:7c:76:bf:39:8f:cb:84:d8:43:e0:
ce:f3:a0:67:1b:65:5d:cb:9e:8a:16:9a:ac:f5:ea:
69:1c:84:30:26:d0:bc:52:93:79:12:cd:d9:fe:ef:
aa:d7:79:17:28:ea:3c:8e:a7:4b:5d:7e:98:ba:04:
cb:f7:f6:7c:3c:c9:89:ec:fe:60:ae:71:34:b6:78:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:E4:E8:E4:73:87:7F:3F:B0:3B:CE:0A:E7:DE:3D:A3:65:AA:60
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:50:9d:99:0f:ce:fa:10:bc:4d:fe:ba:dd:b7:f9:b4:10:5c:
e1:29:15:bc:5d:83:85:ad:9a:61:8d:ba:4b:a9:5a:f0:bf:0e:
83:eb:68:00:4c:05:46:1b:dc:7a:ac:6e:e8:94:8c:cb:cd:17:
0f:85:4e:38:eb:81:f7:8c:b9:a9:2a:09:6b:86:2e:f6:68:f5:
4f:ca:54:b2:3e:ae:7d:a9:23:bd:76:60:d3:59:69:6d:12:2c:
13:3b:87:c5:83:a5:f1:52:b0:f3:d5:ff:7b:c9:fb:42:97:5e:
09:69:e1:39:6a:bb:83:89:2b:bc:68:f4:50:a4:34:50:ee:4f:
18:0e:8e:e1:ab:7c:3a:91:cf:7c:3e:21:c4:98:3c:44:cb:1b:
80:80:1e:3f:31:48:08:b5:fd:2f:14:81:b5:cc:17:1b:90:cc:
85:16:4f:31:89:96:ad:1e:4c:fd:b9:15:04:7d:ab:d1:e0:e3:
5a:9a:41:dc:51:bb:b2:97:57:0f:f3:3d:77:cd:50:c1:dc:b9:
b2:c8:f3:a2:6a:dc:1e:49:87:b9:fa:e1:7d:75:25:5f:53:76:
13:85:e6:0c:79:88:d4:8a:3b:d9:1b:f0:ee:77:cc:fb:eb:d2:
36:ae:4e:53:f9:77:3e:1b:58:17:a6:5e:fd:32:6e:79:72:14:
a7:8a:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:45:44 2026 by rpki-client