Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: H1bMk9zCQ+PyNZCXuNFCqMtquD80siiiUlOR1431e2c=
Subject key identifier: 27:2A:2C:E0:AB:CE:BA:2C:34:14:D8:58:42:96:8E:4E:30:C8:E5:47
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019DD12C590330D6BA1D1D8EDD8BDC9E2508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0B7F
Signing time: Mon 27 Apr 2026 23:00:37 +0000
Manifest this update: Mon 27 Apr 2026 23:00:37 +0000
Manifest next update: Tue 28 Apr 2026 23:00:37 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 6LSeSTCKkYI/b/C73iqN1DJN8YNG0TVp4idY9et4NkU=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:59:03:30:d6:ba:1d:1d:8e:dd:8b:dc:9e:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Apr 27 23:00:37 2026 GMT
Not After : Apr 28 23:00:37 2026 GMT
Subject: CN=272a2ce0abceba2c3414d85842968e4e30c8e547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ad:97:2b:9a:c3:fd:f1:97:a9:56:2c:d5:de:
da:67:c5:37:4c:af:b1:ec:db:da:6d:93:8f:e7:83:
66:29:f2:0a:4b:d5:7d:30:6f:aa:49:e5:3f:a8:34:
c8:19:9c:b8:4f:9e:21:69:36:45:6f:1f:22:5b:67:
48:ec:1a:a2:0d:7a:07:b1:88:79:55:34:8c:aa:8b:
78:a7:ec:fe:5e:01:32:5b:62:79:1e:e2:e5:8f:f3:
ad:e1:e2:ec:ea:24:d4:fb:91:c5:65:f9:6e:ce:7d:
cb:d1:6a:26:67:c8:56:45:ec:28:34:ec:fc:e8:46:
e7:68:00:ff:68:09:3f:fa:0c:d9:29:ea:0a:fa:cb:
60:53:96:17:17:03:c9:24:34:f1:f9:53:13:24:b1:
55:84:f3:f8:c6:f5:12:20:22:a0:79:be:6f:eb:b5:
2a:dd:96:ce:ed:d4:d3:16:fa:99:a6:cd:9a:97:e4:
5f:d1:a9:77:d3:d2:f2:6f:81:b3:c5:09:07:00:d7:
78:bb:d4:3e:76:ba:6f:f2:39:8a:08:55:87:5d:d8:
71:d0:85:90:4f:eb:4e:27:53:7e:c4:b4:45:6d:84:
64:24:7d:c1:7d:20:7a:10:e8:79:e8:40:42:a0:22:
d1:1f:e0:2d:51:54:1e:79:49:e7:1d:05:d4:02:b7:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:2C:E0:AB:CE:BA:2C:34:14:D8:58:42:96:8E:4E:30:C8:E5:47
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:15:f8:a3:84:02:8d:81:5f:c7:d4:08:df:65:08:08:4d:b2:
7e:aa:dc:53:86:a2:50:18:a6:82:70:44:dd:a4:cd:7e:cb:e9:
96:3f:3e:b2:2b:f4:e3:8a:10:99:86:ba:a7:4c:41:2a:e9:45:
d2:3f:74:28:62:94:bb:4d:7d:95:7a:0a:f9:7d:2c:88:65:41:
ba:8d:10:f3:15:0d:ce:8b:e5:71:85:5e:0f:d0:ae:0e:11:ca:
79:e1:ad:ba:f8:ae:2e:76:61:d7:2d:02:1e:d8:7d:ff:d0:33:
8d:f9:2b:cb:16:49:ab:2c:6d:55:77:a2:38:95:5f:fd:e9:b9:
b9:c8:33:87:2d:37:0e:d1:ee:35:23:91:d1:d5:2f:88:ae:9e:
ba:ae:3c:28:6f:20:e7:ce:49:78:44:12:88:47:0d:15:44:58:
a4:37:04:aa:06:b4:a1:29:a5:a7:ae:e3:20:d1:be:d9:53:6c:
80:4e:c9:9b:2a:aa:ef:d1:cf:d5:96:d2:f5:a4:05:9d:b6:43:
e4:76:38:bf:a7:79:37:3b:e6:52:11:9b:ca:48:b3:2d:7d:e9:
a4:e3:23:59:00:4c:96:35:6a:7c:17:4b:d3:29:fa:d2:d1:48:
0d:64:f5:95:03:4b:ef:65:3f:1f:35:84:1b:63:17:53:7a:a6:
0e:36:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:28 2026 by rpki-client