Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: cU8LqLcSvGmPAsIE/EYAqeUAoF0b70UChfjKfY691os=
Subject key identifier: 36:92:37:2E:E2:7D:A6:42:C3:7D:FA:45:66:85:29:1F:B8:58:E5:CB
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 01A13C00A74CA02FCFFC3B2D9E8D469DB988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 20:00:37 +0000
Manifest this update: Wed 14 Oct 2026 20:00:37 +0000
Manifest next update: Thu 15 Oct 2026 20:00:37 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: 588Bp5Vdw/qEteuFxPhgu9yGFl22pg5PIjIUzJ3ZXP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:00:a7:4c:a0:2f:cf:fc:3b:2d:9e:8d:46:9d:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Oct 14 20:00:37 2026 GMT
Not After : Oct 15 20:00:37 2026 GMT
Subject: CN=3692372ee27da642c37dfa456685291fb858e5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:10:c9:b4:99:4c:f4:1d:95:5b:5c:60:aa:
c5:cc:68:07:9e:1e:87:84:9b:96:f3:ef:8b:1a:7e:
65:d0:66:ec:e0:96:28:2a:79:97:a3:cd:5e:ca:db:
57:04:90:c2:7b:16:ac:ff:38:5f:6a:54:3c:af:fa:
89:2c:92:7b:16:ab:85:17:09:23:0d:64:45:86:0f:
d4:e6:bc:42:d4:ea:9d:17:15:6f:75:2b:16:23:39:
d6:6e:f7:59:71:1c:7c:93:3a:d0:11:95:c7:ea:c5:
5c:f7:30:ec:a8:ae:de:57:67:3e:6c:8c:27:28:11:
11:48:f2:48:f8:ee:93:36:de:ff:7b:1e:30:96:d1:
bb:c5:a7:40:c2:66:8b:e7:a5:e7:8b:b1:08:12:6a:
f5:45:55:23:a5:5d:29:61:bf:4f:e1:8c:d5:a3:e7:
6a:6f:9e:f1:99:27:2d:a5:64:37:84:61:ee:73:59:
e1:68:ee:b5:e4:b8:8f:6c:41:2c:c8:30:c9:ad:16:
de:10:9a:bb:67:50:e2:df:4e:11:e8:17:c7:37:83:
01:0c:cd:9f:21:a3:7f:af:cc:85:b4:69:04:c6:56:
70:65:93:24:07:21:a7:a2:8b:78:0b:82:04:4f:24:
73:4d:c9:6e:e6:c2:06:c9:c6:87:5d:cf:9b:bf:dc:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:37:2E:E2:7D:A6:42:C3:7D:FA:45:66:85:29:1F:B8:58:E5:CB
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3f:10:e5:93:cb:dd:7b:bc:5f:97:21:ae:05:d1:da:fc:80:
2d:57:01:7d:40:70:18:13:36:93:23:8b:fd:bd:69:a2:94:57:
ab:d2:85:2d:cc:2a:a4:ed:f5:25:05:19:a1:ab:00:41:25:a3:
aa:63:98:f4:ae:cc:a6:1e:38:df:b4:45:26:49:81:65:38:0c:
73:11:2c:03:3c:e4:fa:c2:fb:47:a3:af:bd:fc:51:5d:57:08:
50:c3:39:9b:59:cd:fc:8b:57:81:98:fe:be:99:ab:aa:3d:d6:
7b:dd:01:2d:ca:dc:53:fc:bf:2a:d2:df:8a:ad:8b:06:64:4b:
19:2d:f4:35:06:7c:21:ea:02:9e:50:aa:ec:f2:ee:c2:8b:5a:
27:f9:00:c1:65:57:4d:1b:72:9f:ab:c9:33:07:22:ac:6b:f3:
50:ff:33:d4:79:34:ef:18:91:fe:82:23:dd:4c:24:8d:97:7b:
c8:89:8e:ca:42:1d:b1:0d:b8:92:0e:bb:a9:c4:64:a9:c0:c9:
6f:8e:6a:9a:d2:55:48:ce:10:74:b0:d5:f7:3d:4c:d2:e7:84:
1b:b7:b3:c9:0a:2b:22:02:b0:5b:37:f3:29:86:de:14:5f:da:
48:05:15:2f:9a:14:5d:41:e4:22:b9:22:ac:d2:90:07:dc:7a:
d1:b9:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:32:24 2026 by rpki-client