Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: obkZVj3+t9dmCO75ppurvBIKIii9j0g+ynCtWYulIw8=
Subject key identifier: 9A:5A:7A:BC:33:E3:18:9C:AC:D5:DB:F0:41:26:2C:C1:8D:59:8F:5C
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019CE78063B22BD69B1A5B9E8C2E7DF9020E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0B06
Signing time: Fri 13 Mar 2026 14:01:16 +0000
Manifest this update: Fri 13 Mar 2026 14:01:16 +0000
Manifest next update: Sat 14 Mar 2026 14:01:16 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 2IwWzjlyaQ3N0uIhKkaQisrw5TTsl/oGwjMwMwLh24g=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:80:63:b2:2b:d6:9b:1a:5b:9e:8c:2e:7d:f9:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Mar 13 14:01:16 2026 GMT
Not After : Mar 14 14:01:16 2026 GMT
Subject: CN=9a5a7abc33e3189cacd5dbf041262cc18d598f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:1f:3b:ef:f8:bc:d3:c5:01:af:6c:b0:b7:
7c:6c:d0:a5:fc:df:d7:39:c5:b8:d7:6a:48:48:05:
f8:15:a3:0a:f0:d6:ec:21:d6:5f:5f:1d:af:03:61:
b5:1c:d9:8a:7c:b5:fa:25:f0:6b:7c:ae:b5:ec:6e:
42:07:c9:38:43:b6:df:92:c9:d6:f3:f8:a7:73:e6:
19:a4:9e:22:8a:53:cd:27:2c:28:66:10:56:a2:c9:
09:06:20:04:01:f1:83:93:23:7c:61:55:e1:41:bd:
12:34:11:ab:15:0b:0a:5b:53:84:5b:7e:2d:99:e0:
e4:fb:e3:54:69:6f:3d:7f:ce:7e:12:cf:75:f0:4d:
e1:d4:35:8a:ec:61:42:78:60:11:c6:9a:5c:9b:11:
de:38:2f:86:17:e9:3e:a4:15:23:c7:fb:e8:c9:b4:
e7:ed:09:16:e9:8b:33:fe:1f:09:52:35:3e:c9:2c:
0e:2e:a1:ff:aa:0b:e2:b9:a9:ec:ae:3f:b5:7c:79:
e8:6a:9a:84:4f:a7:43:4e:bb:9c:70:a7:b0:07:71:
c1:01:61:62:00:bd:4e:07:e3:65:c1:a6:c7:65:b7:
d6:db:30:3e:82:35:28:6a:6c:86:de:3e:c1:bf:95:
a6:f3:4b:55:eb:8d:0f:7a:43:48:31:4e:e6:33:bb:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:7A:BC:33:E3:18:9C:AC:D5:DB:F0:41:26:2C:C1:8D:59:8F:5C
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:25:76:51:a0:44:94:e3:34:ec:35:26:33:6c:ac:f3:5e:8b:
49:e6:04:62:84:c0:ca:57:8b:85:8f:24:ff:0c:7e:35:b6:73:
2d:72:0f:a4:7c:71:86:31:71:41:3d:a8:02:80:1b:47:02:e2:
52:9d:db:4e:a0:c5:9f:a2:33:89:8f:41:1c:a0:c2:dd:1f:a0:
61:e4:0e:42:9f:9d:3c:39:5a:e6:02:0b:9c:34:70:24:37:63:
46:2e:7c:e9:68:7a:8b:1c:41:7d:49:85:cd:a2:51:f0:b1:e2:
a5:f9:af:13:0c:b5:57:a1:3b:b7:3b:f8:80:3e:50:9a:1e:c4:
44:c9:f6:fd:98:23:52:b0:e7:e2:cf:3b:68:5b:71:68:4d:32:
24:3f:67:39:46:b4:d1:99:b2:68:fb:36:c6:09:17:57:0e:71:
71:43:9c:97:6c:69:57:90:ee:3f:55:66:0a:c8:76:ff:ed:83:
b6:ee:d0:43:ec:9e:40:61:87:8d:aa:cb:70:8d:c1:1f:60:8e:
f4:41:b9:b7:4a:7a:c6:2b:d6:63:4d:16:b8:e7:75:da:8d:17:
70:40:04:c5:93:36:24:af:48:aa:c1:00:e4:40:77:4d:47:f5:
97:7a:1e:44:78:9b:fe:77:92:6a:a0:35:af:49:5b:3b:05:c1:
cf:1a:84:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzngGOyK9abGluejC59+QIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy
MTVhZTcwHhcNMjYwMzEzMTQwMTE2WhcNMjYwMzE0MTQwMTE2WjAzMTEwLwYDVQQD
Eyg5YTVhN2FiYzMzZTMxODljYWNkNWRiZjA0MTI2MmNjMThkNTk4ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw00fO+/4vNPFAa9ssLd8bNCl/N/X
OcW412pISAX4FaMK8NbsIdZfXx2vA2G1HNmKfLX6JfBrfK617G5CB8k4Q7bfksnW
8/inc+YZpJ4iilPNJywoZhBWoskJBiAEAfGDkyN8YVXhQb0SNBGrFQsKW1OEW34t
meDk++NUaW89f85+Es918E3h1DWK7GFCeGARxppcmxHeOC+GF+k+pBUjx/voybTn
7QkW6Ysz/h8JUjU+ySwOLqH/qgviuansrj+1fHnoapqET6dDTruccKewB3HBAWFi
AL1OB+NlwabHZbfW2zA+gjUoamyG3j7Bv5Wm80tV640PekNIMU7mM7sa8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpaerwz4xicrNXb8EEmLMGNWY9cMB8GA1UdIwQY
MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt
MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh
LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyV2UaBE
lOM07DUmM2ys816LSeYEYoTAyleLhY8k/wx+NbZzLXIPpHxxhjFxQT2oAoAbRwLi
Up3bTqDFn6IziY9BHKDC3R+gYeQOQp+dPDla5gILnDRwJDdjRi586Wh6ixxBfUmF
zaJR8LHipfmvEwy1V6E7tzv4gD5Qmh7ERMn2/ZgjUrDn4s87aFtxaE0yJD9nOUa0
0ZmyaPs2xgkXVw5xcUOcl2xpV5DuP1VmCsh2/+2Dtu7QQ+yeQGGHjarLcI3BH2CO
9EG5t0p6xivWY00WuOd12o0XcEAExZM2JK9IqsEA5EB3TUf1l3oeRHib/neSaqA1
r0lbOwXBzxqE8A==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:59:42 2026 by rpki-client