Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
File: M5rxdTy1gnt7QzdTtXxHjUqtbus.mft (raw, json)
Hash identifier: WR2d/TN9a4bR6nkW3myCBR0l1QCl3u0co5X/0VJD+sc=
Subject key identifier: E7:3B:78:4B:25:50:E9:FD:6D:97:6B:7D:A9:D3:7F:EB:62:D0:E2:61
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F84557C9CB59A690D5CD7BCF25D963734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 11:00:22 +0000
Manifest this update: Tue 21 Jul 2026 11:00:22 +0000
Manifest next update: Wed 22 Jul 2026 11:00:22 +0000
Files and hashes: 1: 1Tl9UIhCqeKOtou3xYXepXYcMhg.roa (hash: 5AkZht3+a78cap99bgI8nP4neP9y8A6GlDJrz6Dteng=)
2: B48qkRdOfa6_cPOlPzDgOqUlWSg.roa (hash: wSI7kbco2gmflRi9epKlQvIQAAUD21wLcZHQLK7txNA=)
3: DQBKGiZGDTDf_MhJYHXFm05lwLY.roa (hash: n5gQOXIBUlgRM18cV4srzrmBIxmZMJi0pTGhNSWt7ec=)
4: M5rxdTy1gnt7QzdTtXxHjUqtbus.crl (hash: nrd9j84ny7myu+lrH1JsFi44RvPQhx2LMX5+N0z9rl8=)
5: QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa (hash: R4X1zIr5apakhLTxXprIGVOA1Cqy//r8dlHgHlvik2c=)
6: Srwm0O5XziVvTMCAUPAPHDtyOL4.roa (hash: Xqk8aLHxkijmEc5CYN4gn6Fq5GjplNDxfZlZrnMA9sY=)
7: XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa (hash: vt5PHv7coIM1JmNeX6jiBcQ3MwSimt+j/3Pge4DDNa4=)
8: ZNzJPMt2B1SyImQTB05Yvsvkd14.roa (hash: leKWlyfh6OtsxG9LVgSYbJDdSIf0o1TbZ02gUSkJ9+8=)
9: pr-1xePD4ZCkXz1RmxaUJla7Wk0.roa (hash: /UkrVYY41cQP/8A3LMNbtpf3fvfzlt7M2OaVy/IHrJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:55:7c:9c:b5:9a:69:0d:5c:d7:bc:f2:5d:96:37:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 21 11:00:22 2026 GMT
Not After : Jul 22 11:00:22 2026 GMT
Subject: CN=e73b784b2550e9fd6d976b7da9d37feb62d0e261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:e1:34:76:22:43:e9:9a:12:83:e1:71:e9:
57:37:78:d4:ed:10:1b:fc:60:5f:76:b8:56:02:34:
ff:43:b6:51:54:2f:ad:c5:6e:1d:8e:40:26:4e:70:
d2:bd:83:09:bf:9e:d4:81:c1:f7:60:7a:9b:bd:12:
22:8e:a5:1c:9b:70:8e:8b:6a:06:d9:6a:f2:45:0c:
19:19:77:e3:95:1f:52:00:a3:c0:33:9e:a6:ac:3d:
77:97:ab:58:61:5e:04:cb:1b:05:25:df:74:b9:b8:
66:d0:0e:2d:56:f2:c1:1c:49:22:f4:be:ea:8e:db:
e6:db:41:67:b6:49:df:d1:e9:f0:58:71:e8:be:75:
7c:7f:fa:61:2d:05:a8:4b:6e:f2:91:44:79:96:a7:
c0:b0:0f:b2:2b:5f:45:f6:c6:35:65:c0:1d:01:73:
76:12:95:61:2f:2a:94:d5:9c:f9:b2:1d:76:6e:f0:
0b:95:3e:67:df:dd:ff:1a:af:cd:72:f2:0c:02:29:
55:63:bc:c5:b2:97:94:61:8b:f6:c9:fb:ed:4a:d7:
aa:78:d5:b1:6c:e1:2f:84:72:6a:11:58:ac:29:97:
52:bb:64:ab:57:a9:bd:0e:79:12:82:18:c6:1b:35:
52:c9:23:2c:48:4a:94:8d:92:90:86:d5:ca:e0:45:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:78:4B:25:50:E9:FD:6D:97:6B:7D:A9:D3:7F:EB:62:D0:E2:61
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fd:e4:a5:29:16:33:c4:8f:cb:a7:d6:00:e1:45:45:dc:f2:
f6:d5:6d:51:f7:d0:66:91:1b:05:b2:be:65:31:30:9f:9d:fa:
85:c1:ab:55:36:bd:3e:c6:36:03:c8:59:60:4d:6e:5d:e6:37:
7b:89:ac:43:6d:f6:c6:c7:a3:f5:f9:03:10:de:5e:b2:22:10:
24:25:23:e4:d9:79:8c:9d:9a:46:08:7f:22:2c:1e:f9:71:51:
9a:6d:1a:6d:2d:b6:d6:4e:48:75:e6:8e:27:8f:12:87:18:f1:
3b:a7:4b:89:1f:c3:a8:41:b2:ff:07:cc:35:55:25:5f:a9:37:
48:63:a5:87:a1:d4:b3:ab:cd:18:97:4d:98:2c:65:eb:2c:1b:
5e:5c:ab:88:af:0a:ec:b4:e9:ef:5a:d5:f2:0d:f1:46:9c:1e:
bc:48:cb:eb:a3:bf:f2:65:02:61:f9:02:38:e4:e2:c5:d7:26:
36:eb:8d:51:5c:13:fd:0d:48:f7:6c:28:47:31:74:df:60:9d:
82:cc:3e:7e:3c:fe:30:b0:1e:f6:13:32:73:f2:e3:ff:58:34:
af:82:14:64:95:2e:a6:d3:11:22:3f:2c:73:9a:f2:58:24:d3:
c4:f5:54:ca:54:6d:e6:3b:d4:e6:73:b6:cf:bb:f4:99:c6:f4:
cd:11:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:01 2026 by rpki-client