Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: RpbjNQt4VtJ8nz8336r7Nzi+CqRmluADPsLAbM4TaqE=
Subject key identifier: B3:3E:5F:6A:B5:E4:49:24:78:65:92:05:D1:95:07:76:28:55:1D:7C
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 019F935C02ADCAB38C5ED7BED153C7D2E3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:48 +0000
Manifest this update: Fri 24 Jul 2026 09:01:48 +0000
Manifest next update: Sat 25 Jul 2026 09:01:48 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: RdTy7q+fNhPCJHBo78BLQFFNrl0515KU8BH4SGpWpVo=)
2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:02:ad:ca:b3:8c:5e:d7:be:d1:53:c7:d2:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Jul 24 09:01:48 2026 GMT
Not After : Jul 25 09:01:48 2026 GMT
Subject: CN=b33e5f6ab5e4492478659205d195077628551d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:fc:f7:8e:7a:b0:fd:f2:ce:81:4c:b5:2c:
5f:f9:06:1b:24:4a:6e:fc:99:1b:ee:57:77:37:e3:
24:90:a3:f1:f0:19:e3:ba:64:04:6f:75:a1:d5:a3:
bc:df:1e:07:02:39:e0:02:c2:40:2e:7c:a6:7f:c3:
6a:b4:0d:bb:f0:78:0a:e4:a8:d7:68:07:44:4d:99:
05:ee:64:40:da:17:5c:e2:bb:26:dc:89:4c:02:c6:
b4:96:75:59:5a:b4:f2:2e:e9:88:94:9a:49:90:9b:
0b:5c:2f:aa:39:df:68:a9:15:1a:33:d9:de:06:1e:
59:41:ca:b4:6f:a9:95:f2:d8:26:ce:87:82:f7:4c:
17:cf:06:48:35:57:d6:83:7f:1a:d9:25:1d:eb:9d:
ad:d7:4c:1b:f0:db:e5:d4:cf:13:16:6a:95:5f:be:
22:10:2c:5d:a2:99:69:a0:e9:11:2f:26:24:ce:71:
54:34:48:20:34:41:e5:81:a5:1c:47:8a:91:f6:a1:
02:92:91:f0:8d:93:70:04:ec:36:d9:74:9d:68:b5:
53:51:59:e7:59:6b:45:19:36:4d:75:81:b8:8d:41:
3e:a4:07:13:54:ba:e9:9f:cc:22:d7:58:8e:92:3a:
85:a4:6b:5f:56:2e:50:91:4b:f3:46:a3:57:e4:c9:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:5F:6A:B5:E4:49:24:78:65:92:05:D1:95:07:76:28:55:1D:7C
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:13:84:9b:b5:0e:3e:b6:6e:0c:5e:36:d8:a3:84:aa:c0:
f1:61:e8:47:b8:94:7b:ae:d4:16:11:93:82:97:d2:19:52:71:
aa:5f:61:9c:0f:de:96:bd:cd:94:ec:7c:7e:12:1f:6a:34:21:
b7:4c:9a:88:33:35:24:e8:8f:76:df:0a:bd:10:6a:de:d4:97:
12:b0:34:b4:d6:6f:d2:de:56:8e:e7:96:eb:0b:72:0a:28:16:
65:90:06:d0:29:3c:27:bb:03:cd:8b:11:bb:32:0c:e4:e4:7e:
8c:56:27:97:5b:6d:bb:a8:63:54:4b:aa:b3:a7:af:3c:e3:36:
d2:98:89:9d:47:68:50:b8:50:ea:0d:2a:17:38:e0:9a:9f:f0:
d4:23:7a:5d:e1:39:f8:f5:e4:30:ea:06:61:19:db:ed:30:61:
17:e0:25:86:6f:1d:00:52:5a:47:15:39:03:1c:e7:f7:74:e9:
59:bd:4c:a0:e8:71:5c:13:1f:06:5a:cf:dc:94:d9:2b:7d:31:
c0:29:69:1e:9f:fd:ad:4f:eb:5b:42:84:b5:eb:71:6c:9c:14:
52:14:75:4f:77:28:b3:b2:f4:7c:d0:12:16:a7:0b:31:b1:9f:
70:f0:fc:4b:3d:a5:7f:1a:30:4b:f5:9a:0f:d1:f9:38:d6:52:
cd:ff:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:55 2026 by rpki-client