Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: OaDFYpp9MA6V7JZ56cGlOI1mXoxA5XE83cA/cjny44E=
Subject key identifier: F4:6A:FE:D7:F3:AC:4C:77:A2:79:92:BB:70:85:47:2B:F3:28:4A:99
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01A17F986DAFD53C1B5B79C924AA84C13E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0D67
Signing time: Tue 27 Oct 2026 23:00:58 +0000
Manifest this update: Tue 27 Oct 2026 23:00:58 +0000
Manifest next update: Wed 28 Oct 2026 23:00:58 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 1n2ehon6ie1F0sPGvJmn5TOfpm+TTKlcJWYsDSHR7Nk=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:6d:af:d5:3c:1b:5b:79:c9:24:aa:84:c1:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Oct 27 23:00:58 2026 GMT
Not After : Oct 28 23:00:58 2026 GMT
Subject: CN=f46afed7f3ac4c77a27992bb7085472bf3284a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:dc:2b:57:3d:62:0b:ce:1b:81:f6:3c:78:
9e:8d:0e:6e:60:69:15:38:ed:2d:f0:a8:76:3a:5f:
37:c3:3e:48:16:65:6b:6b:8b:39:42:75:44:42:b3:
ae:97:ba:ac:ae:a3:85:e9:9c:0e:28:d1:c6:db:c6:
28:2b:02:fe:46:62:0c:8e:af:b0:03:b6:30:08:40:
7b:e1:9b:4e:74:04:71:f7:55:81:e7:e4:7f:b5:22:
dd:55:99:87:57:49:03:3a:8c:b8:69:a4:f6:f4:45:
34:6e:5b:17:94:75:89:c1:a8:ab:7c:32:99:f7:c3:
be:5e:c8:0b:9c:19:d3:0c:19:f8:50:d0:d1:cb:2a:
de:2c:37:15:d1:16:99:e4:50:bb:b0:b9:88:90:8e:
3b:1d:b1:6a:42:b1:04:d8:a0:7a:24:27:1c:e3:d9:
b7:2e:7b:81:f5:16:ec:f6:ee:47:80:51:4c:91:80:
e4:62:f6:61:11:55:8e:44:49:45:5d:2e:b7:e4:99:
38:e0:01:27:31:21:a6:f9:cb:21:75:b3:15:33:17:
d2:e7:5a:f3:97:c6:86:17:c6:5f:f9:3e:77:43:47:
a5:62:a3:67:b5:38:fc:02:b1:e5:38:20:1b:6e:c4:
6c:39:51:97:1b:98:74:1a:29:da:3a:a1:27:a0:fe:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:FE:D7:F3:AC:4C:77:A2:79:92:BB:70:85:47:2B:F3:28:4A:99
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9e:b8:ee:0e:c1:53:0d:5c:99:f0:01:84:25:44:f2:6b:be:
f0:88:1d:4d:76:d1:24:d1:ea:05:e9:a5:6f:e8:10:15:20:98:
f2:70:98:30:83:89:da:59:dc:8c:c3:59:85:46:c1:fe:76:9c:
41:df:1f:35:ee:52:3b:37:af:d9:39:26:af:40:b1:7a:9f:62:
f7:1a:f6:87:47:18:7c:78:df:a9:a7:a5:53:f5:df:ec:94:c8:
87:65:33:60:31:13:e2:13:6b:c0:fb:dd:66:34:f2:7d:2b:fd:
6a:32:ad:32:41:24:22:7b:0f:8d:d0:75:a5:4a:2c:64:2a:aa:
ff:65:2a:ff:1d:0c:0a:9e:0f:23:fc:f1:3a:d9:5f:5a:42:e5:
7f:ac:23:4e:de:9c:9f:0e:ae:11:4c:ec:4c:e2:11:74:37:75:
1d:7e:3f:ff:27:3e:9d:b1:f8:15:30:e9:1c:b4:28:f1:9e:3d:
52:4a:30:c4:0e:38:c6:4b:66:3a:25:ab:14:a3:1b:46:8a:86:
53:2e:07:68:3e:36:1f:de:47:22:76:a0:a4:cb:78:9c:05:63:
a1:6f:4c:0b:84:d8:74:dc:55:9d:17:f2:6a:fa:b4:e7:0d:3c:
fc:31:75:45:00:05:7e:da:ff:3b:91:1b:6c:28:18:ce:a2:f2:
3f:61:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:04 2026 by rpki-client