Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: bw9VtfIAUQNK43RIow9RGq+NZDnaStJ/6Yf76Ruz9vA=
Subject key identifier: A3:40:1D:F0:F9:B1:8D:42:A4:99:AE:E9:BA:BB:B5:8C:2B:04:66:19
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019FA1F2C8334C974F7071AE64189E17EB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 118B
Signing time: Mon 27 Jul 2026 05:01:10 +0000
Manifest this update: Mon 27 Jul 2026 05:01:10 +0000
Manifest next update: Tue 28 Jul 2026 05:01:10 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: hJFTUpTYz9V+SGFz4TDyOy+w8VBMYFcjX3N7sfdGGXc=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:c8:33:4c:97:4f:70:71:ae:64:18:9e:17:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jul 27 05:01:10 2026 GMT
Not After : Jul 28 05:01:10 2026 GMT
Subject: CN=a3401df0f9b18d42a499aee9babbb58c2b046619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:5a:1d:87:e9:06:94:dd:37:b0:5e:00:69:
d3:72:4f:d1:41:10:91:dd:e8:12:5a:92:c7:6c:82:
3b:87:b6:cf:a7:1f:5c:8b:fc:c1:c9:77:7d:36:65:
e9:52:e8:22:a4:0e:24:9e:18:b5:e0:e0:1e:7e:47:
ed:24:f6:6a:15:3a:9d:0a:5d:bf:ac:a3:19:35:c4:
cd:ff:80:19:6a:38:9f:7c:bf:d1:42:ba:ae:98:2b:
f5:af:c0:46:38:25:d6:49:4c:62:01:d4:e1:39:e9:
d3:ba:52:2a:af:20:c1:af:b0:18:fc:2a:ec:10:14:
d4:68:28:1b:5d:f7:af:09:4a:a7:e2:8d:d0:3a:28:
b0:e7:d2:9a:9c:f8:08:9b:c3:48:b8:4c:51:58:6e:
d9:be:2f:e0:9a:45:3c:11:56:09:10:55:51:ce:53:
f7:10:a9:00:97:67:a2:5e:e0:30:46:b9:11:fd:4c:
6c:a5:f6:e1:6b:09:5e:c2:d1:a1:b7:95:af:48:d2:
a6:77:df:ad:a6:9b:3a:a2:6c:37:05:a9:3e:20:d8:
d3:59:30:17:88:98:67:66:29:f9:15:ba:41:ae:8f:
2a:3c:c0:89:66:fa:46:ab:a0:e6:69:13:34:d9:e2:
7e:79:2d:11:03:f3:61:27:26:52:3a:dc:4a:4a:67:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:1D:F0:F9:B1:8D:42:A4:99:AE:E9:BA:BB:B5:8C:2B:04:66:19
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:fd:85:19:37:c5:5d:2e:d7:ee:f5:34:b1:f8:38:66:e2:
32:9e:15:4d:89:56:dc:8b:a4:77:c3:38:62:b1:de:ce:71:bc:
31:d7:d7:16:06:30:73:71:39:0e:7e:04:4e:46:8c:b7:db:15:
92:24:5c:f7:29:f4:4f:01:50:53:8d:08:e2:32:25:e2:09:3c:
24:c1:76:30:fc:06:c8:ea:80:2f:00:d7:c9:54:7a:0c:ad:d0:
3a:35:ef:d1:a8:4a:55:ca:9f:14:00:9a:37:18:04:59:5d:ca:
57:c1:2e:bf:5f:fd:a8:8d:09:e3:63:91:6c:bd:0f:be:c0:b7:
9d:38:0f:43:b0:4e:5c:a7:8c:a0:4b:4a:b8:3f:d1:7b:3b:63:
ac:e9:b5:4c:d8:90:db:5e:2e:fe:11:76:46:b8:bf:97:c2:ea:
f0:b9:f0:7b:f6:01:a3:f1:e5:0a:29:b9:eb:34:96:e0:fc:8e:
08:72:27:c9:76:55:e6:b2:30:62:a0:f6:e7:47:34:64:f3:f0:
02:6a:e1:65:d3:60:42:38:3c:1b:0a:0e:f9:d8:16:5a:58:92:
bc:a3:2c:84:52:82:9e:ba:d2:54:01:37:95:11:64:41:1a:23:
e2:21:e7:db:dd:a8:f4:05:ee:df:02:c3:49:42:65:f3:55:2c:
ce:70:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:25:43 2026 by rpki-client