Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: HiY1oVXcxK/YGaO46OrQZAHLdOiPd9UrJVCilvA01W0=
Subject key identifier: CC:10:DD:2C:93:8B:1E:9E:A9:E0:37:82:19:0C:6A:0F:20:19:4E:73
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 01A089B064F1B0BDF1E8AFF6A0899F77DD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1203
Signing time: Thu 10 Sep 2026 05:00:33 +0000
Manifest this update: Thu 10 Sep 2026 05:00:33 +0000
Manifest next update: Fri 11 Sep 2026 05:00:33 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: 87Vy6TMEfNLdSxfx51tA7A1xFpwdH8KhyerZjySGat8=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:64:f1:b0:bd:f1:e8:af:f6:a0:89:9f:77:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Sep 10 05:00:33 2026 GMT
Not After : Sep 11 05:00:33 2026 GMT
Subject: CN=cc10dd2c938b1e9ea9e03782190c6a0f20194e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:0e:94:ba:85:0c:9c:b6:da:91:47:71:bf:
d0:33:5a:35:cb:03:8b:dd:6b:9c:4d:24:8f:d6:19:
f5:83:13:65:17:bc:f3:17:69:45:e7:fc:cb:6d:e3:
d2:9d:bb:d7:f7:c6:39:ca:65:18:dc:05:8b:c5:9a:
c1:47:2a:4c:e7:60:95:f8:28:9a:03:ee:65:1e:fd:
cd:cd:b5:84:61:ce:55:ad:85:c3:b3:bd:ac:2c:e8:
86:15:00:fc:40:49:6f:d4:0f:04:ea:49:3a:aa:59:
75:9a:23:c8:69:bf:47:b6:15:08:37:8e:8e:e1:ad:
67:3a:2e:91:4e:a7:d7:24:10:1b:9a:d7:61:6f:59:
77:1e:23:c2:65:f4:65:f6:bd:ec:e7:31:ea:74:4f:
02:a5:e7:e9:ad:8e:31:1b:1c:3b:cf:c8:fa:0d:49:
0a:a8:06:c1:26:a4:f5:f5:3f:a2:fb:4d:60:12:91:
66:82:3e:02:61:96:88:ce:7b:4e:f7:5e:20:c3:8c:
00:d7:f7:cc:d2:74:44:37:92:74:9c:b8:15:47:1f:
11:08:91:ed:db:76:e1:85:04:13:c2:25:61:e0:f7:
c2:e9:91:06:71:6d:7d:f9:4b:2f:23:51:7a:52:45:
69:cb:68:33:e1:1d:95:25:0a:2b:2a:91:26:42:a1:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:DD:2C:93:8B:1E:9E:A9:E0:37:82:19:0C:6A:0F:20:19:4E:73
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:ec:ee:65:ff:96:1d:b9:83:83:cd:6d:bb:d2:b6:4a:af:
48:9b:d8:87:9b:9c:43:d7:46:78:20:e3:3e:22:cb:75:f4:ad:
0c:2c:b8:a4:55:08:6b:cc:13:30:5a:e4:b9:85:b8:ea:1e:e0:
41:0f:c2:a1:69:e0:a2:11:24:b2:4d:31:8f:a5:01:d3:a1:f4:
58:a5:9b:9a:33:58:a6:1d:92:09:5e:4f:b0:a7:c9:22:ad:8e:
2f:1f:71:df:9a:39:77:3f:94:f2:1a:db:c9:63:a9:61:3c:62:
f4:e8:1a:1a:c5:e7:f9:81:c3:9c:04:9c:24:9a:39:5c:66:d4:
3b:e3:3c:b0:aa:7a:e6:46:50:a0:70:49:bb:07:2a:ce:ef:ef:
16:ce:b0:31:31:26:63:dd:45:bb:53:eb:72:08:3c:81:97:d6:
60:f1:74:2a:4d:2c:5c:35:7d:13:65:46:f7:b7:cd:17:6a:46:
b3:a8:9d:73:f5:6e:d0:9f:e0:b5:21:d0:e9:61:f2:4c:22:91:
9f:96:84:22:b9:89:79:6e:f1:6f:29:23:0f:14:e0:08:1f:2e:
e2:9d:df:81:28:ee:07:94:10:e8:07:1b:12:e9:8c:35:07:e4:
31:78:29:0b:0e:1a:60:96:41:a3:8c:14:c1:3e:b0:34:db:83:
8e:09:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:46:58 2026 by rpki-client