Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: FpBafHH6cSsrstJGyVoYJekQqJDXCur1CeX0eRg+C+Q=
Subject key identifier: 76:29:0E:C2:61:7C:AC:8A:C7:47:CF:9B:1F:4B:E7:2E:BE:20:E1:1F
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01A1875167BEABF9287F80BF19233F144401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0D6B
Signing time: Thu 29 Oct 2026 11:00:21 +0000
Manifest this update: Thu 29 Oct 2026 11:00:21 +0000
Manifest next update: Fri 30 Oct 2026 11:00:21 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: qmUACv5AAYFLhYsLF74EFfvjCBvZ8SYcGJ4LO1gSnIA=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:67:be:ab:f9:28:7f:80:bf:19:23:3f:14:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Oct 29 11:00:21 2026 GMT
Not After : Oct 30 11:00:21 2026 GMT
Subject: CN=76290ec2617cac8ac747cf9b1f4be72ebe20e11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:48:4c:af:9e:c3:5f:70:4c:24:ba:4d:5b:
ce:d5:a7:54:ff:7c:e0:ba:47:5f:e5:23:ab:04:54:
8f:2f:53:0e:a9:48:50:cc:3e:e7:1b:8c:8f:d2:60:
98:db:29:50:13:78:e0:31:aa:cb:b3:c2:04:27:f7:
7e:e5:8d:4e:55:9d:a0:a5:45:29:c5:b7:b2:58:35:
7b:6f:51:dd:ad:dd:0a:2f:aa:9b:f5:90:3e:f9:32:
9a:67:2c:44:8b:2e:f7:b1:2b:8c:80:b7:d6:49:fc:
6e:68:6c:df:92:eb:78:00:ab:cb:8c:90:b2:b1:5e:
a8:26:ea:78:b2:6e:c9:6b:bf:cd:56:e2:3a:7f:84:
51:24:9d:63:5a:af:8f:a4:c3:a0:5e:2c:11:23:67:
42:21:70:91:82:4a:1a:ab:80:f0:fb:81:29:ab:c6:
b4:6f:92:da:6c:41:5f:f7:83:dc:17:c2:83:0c:f8:
f3:30:97:e9:90:0b:e4:df:13:d9:28:5a:20:0d:34:
15:93:35:20:f0:88:3e:9b:19:c9:1d:71:31:b1:9c:
3e:3a:81:b1:08:c6:19:bd:19:d0:8a:97:4c:50:a2:
2a:5e:5a:8b:fd:b3:7a:49:af:15:99:d1:6b:79:43:
32:58:75:d1:b0:8f:1e:32:ba:1a:a3:84:a5:ea:d1:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:0E:C2:61:7C:AC:8A:C7:47:CF:9B:1F:4B:E7:2E:BE:20:E1:1F
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:eb:91:81:fd:6d:45:67:97:10:32:57:77:ef:61:7f:f9:ec:
2f:d0:34:20:77:63:a1:68:e2:48:a4:24:02:b8:21:07:d6:d8:
1a:1e:e5:d6:39:31:17:8c:29:c8:4d:ad:de:50:99:d2:7a:24:
e4:13:6a:fa:b6:e3:ce:bc:82:af:59:6d:ec:91:c1:ed:49:c3:
c7:1f:2f:9b:cf:7f:f5:96:ad:70:1d:73:85:4f:f3:b4:61:d7:
0d:2d:2f:0c:c2:8d:fa:77:45:42:8d:19:bf:a5:ab:3c:e8:26:
d3:c0:a2:6a:0c:b6:8a:f0:ca:fe:37:d9:07:60:78:09:b0:55:
34:37:7a:30:d8:55:d7:ba:cd:eb:aa:ed:7d:65:24:18:09:ee:
d6:7b:98:fd:94:4b:b2:b9:af:ec:61:13:f8:ef:52:6f:d9:7c:
f2:47:be:6c:bd:26:39:6b:f3:1b:67:7b:d7:3c:85:76:70:f1:
f3:34:4e:a4:72:2e:20:af:ad:f0:51:5f:b2:d6:b6:11:0e:99:
80:61:39:55:dd:f8:5e:04:b6:3e:e7:23:ff:70:2e:db:27:85:
e9:23:3a:73:ed:41:05:64:26:e5:e7:69:89:c2:ac:9f:cb:94:
fd:b9:50:08:a6:de:24:07:e5:12:c9:70:12:ce:98:e6:5f:6a:
da:52:32:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHUWe+q/kof4C/GSM/FEQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy
MTVhZTcwHhcNMjYxMDI5MTEwMDIxWhcNMjYxMDMwMTEwMDIxWjAzMTEwLwYDVQQD
Eyg3NjI5MGVjMjYxN2NhYzhhYzc0N2NmOWIxZjRiZTcyZWJlMjBlMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5hITK+ew19wTCS6TVvO1adU/3zg
ukdf5SOrBFSPL1MOqUhQzD7nG4yP0mCY2ylQE3jgMarLs8IEJ/d+5Y1OVZ2gpUUp
xbeyWDV7b1Hdrd0KL6qb9ZA++TKaZyxEiy73sSuMgLfWSfxuaGzfkut4AKvLjJCy
sV6oJup4sm7Ja7/NVuI6f4RRJJ1jWq+PpMOgXiwRI2dCIXCRgkoaq4Dw+4Epq8a0
b5LabEFf94PcF8KDDPjzMJfpkAvk3xPZKFogDTQVkzUg8Ig+mxnJHXExsZw+OoGx
CMYZvRnQipdMUKIqXlqL/bN6Sa8VmdFreUMyWHXRsI8eMroao4Sl6tEDbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYpDsJhfKyKx0fPmx9L5y6+IOEfMB8GA1UdIwQY
MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt
MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh
LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuuRgf1t
RWeXEDJXd+9hf/nsL9A0IHdjoWjiSKQkArghB9bYGh7l1jkxF4wpyE2t3lCZ0nok
5BNq+rbjzryCr1lt7JHB7UnDxx8vm89/9ZatcB1zhU/ztGHXDS0vDMKN+ndFQo0Z
v6WrPOgm08Ciagy2ivDK/jfZB2B4CbBVNDd6MNhV17rN66rtfWUkGAnu1nuY/ZRL
srmv7GET+O9Sb9l88ke+bL0mOWvzG2d71zyFdnDx8zROpHIuIK+t8FFfsta2EQ6Z
gGE5Vd34XgS2Pucj/3Au2yeF6SM6c+1BBWQm5edpicKsn8uU/blQCKbeJAflEslw
Es6Y5l9q2lIy5w==
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:06 2026 by rpki-client