Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: RLh9mglyGeHGAnc6ICAaZoQvTO9Dwttdad+g+LuVvOs=
Subject key identifier: CB:8F:EC:49:BB:EF:4F:D9:67:7A:85:47:B2:C8:AB:04:25:25:E9:AE
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01A08E3273865918B34E0AF1558E752DE6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0CEA
Signing time: Fri 11 Sep 2026 02:01:06 +0000
Manifest this update: Fri 11 Sep 2026 02:01:06 +0000
Manifest next update: Sat 12 Sep 2026 02:01:06 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 7jzjibLR6pYnmp1nZvQ2gh93hzrfHJL1U4WdqS5xxY0=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:73:86:59:18:b3:4e:0a:f1:55:8e:75:2d:e6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Sep 11 02:01:06 2026 GMT
Not After : Sep 12 02:01:06 2026 GMT
Subject: CN=cb8fec49bbef4fd9677a8547b2c8ab042525e9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:29:d0:67:48:01:25:68:0c:72:a6:8d:a2:
13:5e:ea:9d:f3:a5:73:e4:f5:91:89:72:7a:d6:7d:
5d:52:4a:42:e0:57:09:7d:e6:d1:69:b7:c2:81:73:
a6:65:d8:65:ed:78:c8:fb:a4:2c:04:cf:92:3c:d3:
93:c8:52:2c:73:2c:b2:bf:9b:31:d7:1b:46:33:c5:
3d:8f:3a:18:7f:9b:1c:2d:91:f5:08:37:43:aa:d8:
ad:ca:f3:08:62:4c:b3:2c:ce:38:38:f2:7b:d2:5c:
36:cf:6e:d1:1f:85:9a:0b:31:76:b9:56:cd:be:52:
c9:b2:c7:4b:5d:3e:6c:df:5b:50:da:df:bb:fb:88:
a4:10:f5:0b:e6:19:d5:8d:f2:61:71:0a:5e:3a:c8:
8f:5e:39:ad:61:83:84:e3:d0:98:01:72:5e:15:38:
96:9d:c7:1c:67:90:b6:64:d5:1e:94:35:c6:ae:09:
08:bc:3a:b9:f5:c1:9d:7a:87:23:0a:f9:a8:ff:6f:
2f:3f:6a:b5:c4:63:9d:33:77:33:b9:82:fe:99:b0:
3d:cc:00:0d:31:07:41:6d:4c:2b:47:df:1a:f5:2a:
ba:b9:b6:a1:90:e1:5b:33:cb:46:a2:08:47:14:3e:
6c:f1:d0:27:4c:c1:29:99:8b:50:b8:b3:d5:b2:1e:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8F:EC:49:BB:EF:4F:D9:67:7A:85:47:B2:C8:AB:04:25:25:E9:AE
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f5:29:0c:d7:0b:6a:9f:ca:7c:30:bf:84:7f:52:ce:ea:96:
9a:91:df:29:5e:62:9d:6c:af:eb:78:66:19:7f:32:13:29:be:
80:3c:8c:36:95:16:24:3d:54:fc:62:82:06:da:32:bb:84:83:
20:e6:09:5e:1a:7b:b1:07:67:6d:17:70:a6:9f:48:d7:6c:91:
54:85:31:fa:24:0b:d2:b4:15:a7:ec:f3:e5:ce:4f:2d:bb:bc:
ca:25:99:be:9c:69:ed:ad:90:b8:73:09:41:c1:10:b3:92:77:
e9:99:fa:ed:a8:4c:fa:2d:a3:71:3b:25:06:8a:b3:5c:7c:78:
69:11:fd:8d:4a:c7:ed:58:38:b7:54:d2:66:e1:4a:a8:63:a9:
e1:f6:02:19:70:d9:d0:f7:eb:16:58:94:fa:f7:7c:b1:02:13:
48:e6:60:39:eb:ad:58:22:f5:18:d8:fc:58:38:cb:c2:89:ea:
7a:12:66:88:e0:0f:b9:1f:a5:c6:60:bd:25:23:24:d0:d1:10:
1c:93:cf:97:b5:e7:3b:c6:cf:d1:98:46:e7:19:7c:68:30:d1:
63:17:b8:3e:56:a5:b4:53:15:7b:92:27:9e:10:74:cd:eb:7d:
cc:67:ed:92:b6:45:84:d0:df:0f:4d:c8:2a:ef:46:65:c5:6f:
7e:fb:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:06:57 2026 by rpki-client