Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: 7PVyVWCmk34fCRhdE2qWSPTeNKronOafn6r+lDq+XI0=
Subject key identifier: 5D:D9:2A:1E:63:A4:23:4D:64:CA:93:1A:62:E9:8E:A9:C8:D7:15:F2
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019FA004285669758F5A8DEDACF78400BD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 118A
Signing time: Sun 26 Jul 2026 20:00:54 +0000
Manifest this update: Sun 26 Jul 2026 20:00:54 +0000
Manifest next update: Mon 27 Jul 2026 20:00:54 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: tulAjkBwnqG52ZfCT26xfT+8+KwP6iMNUpha5BUxwmY=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:28:56:69:75:8f:5a:8d:ed:ac:f7:84:00:bd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jul 26 20:00:54 2026 GMT
Not After : Jul 27 20:00:54 2026 GMT
Subject: CN=5dd92a1e63a4234d64ca931a62e98ea9c8d715f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:98:92:b9:df:0a:cc:82:4c:90:63:78:51:
72:dc:06:a9:90:4a:ff:f8:c3:4f:6c:7d:70:1c:b5:
24:ff:65:f1:50:bb:0a:fa:3b:24:62:a6:c5:7d:5a:
72:3a:b7:60:42:9f:83:c2:d7:57:f5:07:f3:9a:1b:
93:df:27:26:b4:e4:27:ab:23:9f:ee:0c:fa:f4:02:
a0:fe:7f:5a:a3:15:c5:9a:e3:6a:f6:81:18:cc:ad:
4f:ef:98:cb:cb:c4:92:0c:91:cf:a0:3a:1a:64:a4:
30:66:b8:71:81:e5:8f:cb:19:e7:f3:35:5f:13:ed:
e7:10:ab:39:19:e7:85:0f:a7:88:97:61:5e:10:f2:
67:0b:41:eb:e0:b5:18:9c:8e:6f:de:71:b4:19:30:
4f:65:37:d1:fd:55:0e:55:ca:5b:88:37:95:32:a1:
f0:3d:58:5d:6d:b8:e2:38:f1:fd:42:8d:f8:e7:d3:
5c:4c:f4:4e:39:b1:d1:83:19:1e:c5:80:c9:6d:74:
83:7f:72:be:b8:27:e7:20:a8:30:24:80:ae:a9:a2:
02:21:94:a9:4e:d7:0e:92:c2:2b:dd:84:95:7c:bb:
cb:9e:aa:91:45:cf:9b:0a:ea:59:00:b8:3d:98:1b:
33:63:43:84:e1:36:84:45:1b:fa:1f:15:ac:9c:91:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:2A:1E:63:A4:23:4D:64:CA:93:1A:62:E9:8E:A9:C8:D7:15:F2
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:ef:50:4b:6c:e2:ff:6a:66:f3:5a:b8:eb:27:7b:7d:5b:
e6:75:c9:36:9f:be:26:ec:9a:9f:1b:f1:07:57:06:4a:a1:68:
fe:25:2b:e8:55:a6:ba:c4:cc:cd:35:2f:6c:d1:9f:e1:a9:75:
44:00:08:a0:d9:9b:28:6e:33:73:9e:d2:3a:a0:85:8f:00:90:
c3:46:77:7f:8a:c8:be:eb:78:b6:cb:1b:83:96:04:09:16:83:
a6:f5:28:56:e6:94:3f:5d:65:41:79:8a:c5:15:94:64:bb:3f:
1b:00:e0:40:9e:64:e0:b0:1d:47:a4:4d:4f:f6:c5:fb:ff:05:
92:f6:eb:77:f9:6c:13:ac:9e:74:81:07:08:c5:b7:6d:da:60:
a7:61:51:28:c0:95:cf:1d:8e:e8:da:8b:8b:33:20:50:46:5c:
de:06:2a:93:28:37:75:dc:44:5f:55:f6:91:43:99:b1:80:4f:
61:0b:1d:67:06:99:38:94:c7:cd:58:ce:17:05:de:fc:20:af:
83:97:1f:15:0b:ab:65:c1:86:8a:ef:8f:16:e1:82:65:88:e1:
ff:d5:67:40:60:17:fb:43:3d:36:fc:ae:34:00:61:6c:19:95:
0b:bf:61:19:f6:78:2f:f0:6d:dc:54:dc:f8:89:25:17:34:48:
f5:5e:03:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gBChWaXWPWo3trPeEAL0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl
NzVhYjMwHhcNMjYwNzI2MjAwMDU0WhcNMjYwNzI3MjAwMDU0WjAzMTEwLwYDVQQD
Eyg1ZGQ5MmExZTYzYTQyMzRkNjRjYTkzMWE2MmU5OGVhOWM4ZDcxNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/OYkrnfCsyCTJBjeFFy3AapkEr/
+MNPbH1wHLUk/2XxULsK+jskYqbFfVpyOrdgQp+DwtdX9QfzmhuT3ycmtOQnqyOf
7gz69AKg/n9aoxXFmuNq9oEYzK1P75jLy8SSDJHPoDoaZKQwZrhxgeWPyxnn8zVf
E+3nEKs5GeeFD6eIl2FeEPJnC0Hr4LUYnI5v3nG0GTBPZTfR/VUOVcpbiDeVMqHw
PVhdbbjiOPH9Qo3459NcTPROObHRgxkexYDJbXSDf3K+uCfnIKgwJICuqaICIZSp
TtcOksIr3YSVfLvLnqqRRc+bCupZALg9mBszY0OE4TaERRv6HxWsnJEqmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3ZKh5jpCNNZMqTGmLpjqnI1xXyMB8GA1UdIwQY
MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt
Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz
LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2DvUEts
4v9qZvNauOsne31b5nXJNp++JuyanxvxB1cGSqFo/iUr6FWmusTMzTUvbNGf4al1
RAAIoNmbKG4zc57SOqCFjwCQw0Z3f4rIvut4tssbg5YECRaDpvUoVuaUP11lQXmK
xRWUZLs/GwDgQJ5k4LAdR6RNT/bF+/8Fkvbrd/lsE6yedIEHCMW3bdpgp2FRKMCV
zx2O6NqLizMgUEZc3gYqkyg3ddxEX1X2kUOZsYBPYQsdZwaZOJTHzVjOFwXe/CCv
g5cfFQurZcGGiu+PFuGCZYjh/9VnQGAX+0M9NvyuNABhbBmVC79hGfZ4L/Bt3FTc
+IklFzRI9V4D8Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:01:48 2026 by rpki-client