Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: 2UX7VxDe0svwDdf/pxiAdV3WOjlQgizHZjTPkgqLDck=
Subject key identifier: 2F:16:48:C3:F4:1F:76:E8:70:00:B1:58:60:5E:30:4B:A7:BE:83:B0
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019F92ED05FC56A87B439C3271DDF5465317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0DED
Signing time: Fri 24 Jul 2026 07:00:34 +0000
Manifest this update: Fri 24 Jul 2026 07:00:34 +0000
Manifest next update: Sat 25 Jul 2026 07:00:34 +0000
Files and hashes: 1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: jHnok1bahkyHLl4V6HfYe2l8KEXhW0+BB87a7m/KYqw=)
2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:05:fc:56:a8:7b:43:9c:32:71:dd:f5:46:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jul 24 07:00:34 2026 GMT
Not After : Jul 25 07:00:34 2026 GMT
Subject: CN=2f1648c3f41f76e87000b158605e304ba7be83b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:41:ee:d5:a8:70:b2:bb:43:a5:cd:a8:48:
4f:c7:2f:aa:b8:b7:1e:43:3c:f1:96:62:e8:6f:61:
e2:d0:fb:77:15:72:de:b9:c0:ae:46:a1:73:e1:e9:
9c:09:93:c9:94:4e:3d:81:34:34:3e:90:7c:69:7b:
f3:f1:10:71:84:e2:21:68:e7:3b:e2:a5:a1:45:b3:
0d:f2:de:02:cf:28:a8:3f:17:48:55:11:01:ca:88:
f8:a3:62:33:48:77:40:69:b0:a2:eb:48:73:67:bf:
a8:ef:de:f0:14:8b:df:0d:34:61:90:22:6c:dd:bc:
02:eb:c3:a7:e9:36:87:7b:b1:fc:55:e3:8e:7a:b8:
f2:03:f0:72:c2:9b:92:4a:1b:82:be:7b:01:9b:8c:
2e:81:36:db:eb:7d:bf:2f:f8:e2:a1:45:62:43:82:
07:bc:74:93:fa:62:12:17:a3:41:6a:41:49:38:21:
32:99:8d:1c:bd:5c:1d:88:3f:19:38:5c:80:b8:a2:
8f:09:97:79:aa:e8:02:55:53:8e:a7:f3:a2:29:ee:
d4:ff:8a:ef:0d:e9:d9:0b:c2:b3:c3:d6:fe:70:b1:
0a:3e:35:5f:df:54:75:20:06:5e:d7:1b:a7:ad:21:
6b:24:e2:05:91:09:b7:91:b3:79:19:21:95:17:01:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:48:C3:F4:1F:76:E8:70:00:B1:58:60:5E:30:4B:A7:BE:83:B0
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6b:10:b3:cd:b2:16:80:d4:c3:6b:9c:10:64:a2:f5:d6:81:
b9:4b:71:ee:d3:e1:8d:e9:03:ca:08:e7:ac:8e:d5:fc:65:4b:
77:1c:37:58:85:44:82:f9:58:86:4d:cc:42:19:df:d5:00:26:
f6:70:df:70:0e:4a:04:bd:82:fd:6f:39:3f:dd:df:b8:3c:2d:
78:56:bc:ca:ea:1b:f4:9b:fd:d5:ec:99:4c:fb:aa:92:66:7b:
b7:3f:6b:a4:7d:82:1b:c5:f9:95:72:32:d2:9a:a3:b0:57:e0:
fb:79:17:bd:92:e8:63:72:d7:ac:ba:64:da:74:e2:ac:d1:f1:
17:72:30:82:26:0f:d9:e8:58:57:eb:28:be:5f:63:b5:22:9c:
ea:5f:35:7c:ac:15:13:58:82:57:42:c3:a7:67:4f:42:ec:43:
b3:38:55:52:02:54:65:31:61:df:90:3e:d7:83:45:7c:29:e2:
3d:a6:95:6b:ab:00:39:10:88:5d:38:5d:98:8b:c5:59:27:8c:
1b:db:36:1c:5b:32:a9:09:5c:f8:50:e4:27:26:55:63:3e:2c:
b5:ee:4f:92:a0:e9:24:26:17:43:bd:ff:4e:3d:cd:bf:9c:e9:
b5:a0:15:76:4a:05:ae:31:5a:f3:28:6f:da:51:4f:e8:00:48:
4f:e1:0a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7QX8Vqh7Q5wycd31RlMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjYwNzI0MDcwMDM0WhcNMjYwNzI1MDcwMDM0WjAzMTEwLwYDVQQD
EygyZjE2NDhjM2Y0MWY3NmU4NzAwMGIxNTg2MDVlMzA0YmE3YmU4M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiJB7tWocLK7Q6XNqEhPxy+quLce
QzzxlmLob2Hi0Pt3FXLeucCuRqFz4emcCZPJlE49gTQ0PpB8aXvz8RBxhOIhaOc7
4qWhRbMN8t4CzyioPxdIVREByoj4o2IzSHdAabCi60hzZ7+o797wFIvfDTRhkCJs
3bwC68On6TaHe7H8VeOOerjyA/BywpuSShuCvnsBm4wugTbb632/L/jioUViQ4IH
vHST+mISF6NBakFJOCEymY0cvVwdiD8ZOFyAuKKPCZd5qugCVVOOp/OiKe7U/4rv
DenZC8Kzw9b+cLEKPjVf31R1IAZe1xunrSFrJOIFkQm3kbN5GSGVFwGGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8WSMP0H3bocACxWGBeMEunvoOwMB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWsQs82y
FoDUw2ucEGSi9daBuUtx7tPhjekDygjnrI7V/GVLdxw3WIVEgvlYhk3MQhnf1QAm
9nDfcA5KBL2C/W85P93fuDwteFa8yuob9Jv91eyZTPuqkmZ7tz9rpH2CG8X5lXIy
0pqjsFfg+3kXvZLoY3LXrLpk2nTirNHxF3IwgiYP2ehYV+sovl9jtSKc6l81fKwV
E1iCV0LDp2dPQuxDszhVUgJUZTFh35A+14NFfCniPaaVa6sAORCIXThdmIvFWSeM
G9s2HFsyqQlc+FDkJyZVYz4ste5PkqDpJCYXQ73/Tj3Nv5zptaAVdkoFrjFa8yhv
2lFP6ABIT+EKcQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:27 2026 by rpki-client