Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: mB7RaSfYTuz/o6SeHqjFE06tAvyI1yfpasYDQrPE6kM=
Subject key identifier: 88:42:AB:31:2F:A4:19:25:D9:59:33:ED:D2:DE:27:BA:5E:54:39:1C
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 019D265EE67118AF34BC4661C9A68B528E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0FE3
Signing time: Wed 25 Mar 2026 19:00:46 +0000
Manifest this update: Wed 25 Mar 2026 19:00:46 +0000
Manifest next update: Thu 26 Mar 2026 19:00:46 +0000
Files and hashes: 1: 8upv_qHHIISzToSAMP0-RhfYGtI.roa (hash: C7Jy+UEAqPDF0X+eyhzxq1LGOJLzx5Nt6AKDkKZbA9E=)
2: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: ovdvLiWGj146F9/om3Rs/pj4sKNmtIyx+BxcBoyH3y8=)
3: lOM9YI5AfClQ38kpLZQR1_F2EUg.roa (hash: +CFanZb7ldtygEZGWlBOOK8kO36urGbI3MSk/pZ6T4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e6:71:18:af:34:bc:46:61:c9:a6:8b:52:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Mar 25 19:00:46 2026 GMT
Not After : Mar 26 19:00:46 2026 GMT
Subject: CN=8842ab312fa41925d95933edd2de27ba5e54391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:8b:ab:fc:28:76:10:e0:fe:55:3f:aa:ec:
52:43:19:46:f3:03:26:f7:f2:6d:bf:0d:ae:f8:64:
f0:d8:c6:e2:ee:72:b9:ae:71:b9:15:c0:d5:52:95:
4a:1a:8a:0c:8a:2c:e8:99:73:7e:42:ef:e4:6b:b9:
7b:3e:d4:cc:84:2e:db:39:ed:2c:0e:56:22:4c:91:
64:86:16:f9:fa:74:27:dc:09:15:6f:89:c5:2a:d4:
10:60:c8:85:58:b1:ca:21:c1:7d:39:1a:dd:91:95:
5a:60:72:76:21:1b:38:c3:fd:dc:fa:7b:2e:1c:e5:
d9:53:7f:ea:86:d4:fd:a9:4e:19:24:a9:60:6b:30:
11:48:15:27:36:98:2e:d6:c6:4b:b5:ff:e4:44:be:
17:63:a2:9b:8c:f8:cf:3a:b0:79:14:42:00:7a:d7:
10:61:a0:ca:1a:95:14:99:cf:fa:c9:11:85:f3:1a:
c2:9c:22:be:3b:d2:eb:62:f0:43:fd:e2:ad:62:65:
bc:61:ab:f1:12:11:a1:94:53:56:67:dc:0f:73:1a:
dc:b8:d5:3e:6d:37:a9:97:32:5f:33:5b:f4:42:69:
70:4f:8c:e5:3e:b3:27:40:b5:40:3e:d2:ba:bd:f5:
ce:92:da:37:4a:a5:6e:5b:06:85:65:d9:e2:81:72:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:AB:31:2F:A4:19:25:D9:59:33:ED:D2:DE:27:BA:5E:54:39:1C
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:14:48:12:50:85:b9:25:a6:e7:f8:9d:5f:04:17:b9:a5:43:
9f:ca:9f:2d:58:0f:97:ab:14:03:8e:11:4f:06:71:77:fa:bc:
fc:0a:7b:e6:cd:c6:69:83:e6:ce:86:f2:b5:66:42:e6:dc:23:
0b:5e:07:87:38:55:5a:46:69:3e:19:68:64:2a:7b:13:0f:da:
da:9e:1b:ac:cd:33:cc:26:3c:e5:32:80:c9:4f:98:8a:5d:76:
f6:b2:c8:56:ea:4e:ec:97:a2:19:30:ab:f5:6c:d5:83:c6:56:
58:48:ee:8e:ca:81:7e:ca:a1:c8:ed:74:54:f5:eb:d7:f7:9f:
27:ea:36:58:59:7e:ae:42:13:53:e4:c9:17:aa:db:df:a7:a3:
e7:25:fe:bb:90:e4:a3:d2:69:81:df:23:99:22:33:48:2a:03:
68:38:93:cc:91:55:09:a8:77:6c:e0:f8:21:e3:6c:d0:e4:a0:
c9:e5:df:5d:f0:dc:31:97:c0:58:a9:67:c4:76:b7:e2:df:1c:
5f:a0:d7:7d:d6:7b:aa:08:c0:01:3d:6b:9e:30:48:17:4c:e3:
75:62:79:49:86:34:b7:b1:d7:2c:2b:14:0a:c0:ae:0f:4b:3b:
02:85:00:e3:2a:29:9a:8a:48:58:46:08:3b:6a:df:24:9e:b9:
8d:b3:cf:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXuZxGK80vEZhyaaLUo6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmE2YzBiY2NhMTZjNjg1ZGM3YjliMjdmMTk5YjQyYjRi
ZWVlZTkwHhcNMjYwMzI1MTkwMDQ2WhcNMjYwMzI2MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg4ODQyYWIzMTJmYTQxOTI1ZDk1OTMzZWRkMmRlMjdiYTVlNTQzOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QeLq/wodhDg/lU/quxSQxlG8wMm
9/Jtvw2u+GTw2Mbi7nK5rnG5FcDVUpVKGooMiizomXN+Qu/ka7l7PtTMhC7bOe0s
DlYiTJFkhhb5+nQn3AkVb4nFKtQQYMiFWLHKIcF9ORrdkZVaYHJ2IRs4w/3c+nsu
HOXZU3/qhtT9qU4ZJKlgazARSBUnNpgu1sZLtf/kRL4XY6KbjPjPOrB5FEIAetcQ
YaDKGpUUmc/6yRGF8xrCnCK+O9LrYvBD/eKtYmW8YavxEhGhlFNWZ9wPcxrcuNU+
bTeplzJfM1v0QmlwT4zlPrMnQLVAPtK6vfXOkto3SqVuWwaFZdnigXIvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhCqzEvpBkl2Vkz7dLeJ7peVDkcMB8GA1UdIwQY
MBaAFDO6bAvMoWxoXce5sn8Zm0K0vu7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYt
Y2M3NTc5NzUxOGEwLzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYtY2M3NTc5NzUxOGEw
LzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxRIElCF
uSWm5/idXwQXuaVDn8qfLVgPl6sUA44RTwZxd/q8/Ap75s3GaYPmzobytWZC5twj
C14HhzhVWkZpPhloZCp7Ew/a2p4brM0zzCY85TKAyU+Yil129rLIVupO7JeiGTCr
9WzVg8ZWWEjujsqBfsqhyO10VPXr1/efJ+o2WFl+rkITU+TJF6rb36ej5yX+u5Dk
o9Jpgd8jmSIzSCoDaDiTzJFVCah3bOD4IeNs0OSgyeXfXfDcMZfAWKlnxHa34t8c
X6DXfdZ7qgjAAT1rnjBIF0zjdWJ5SYY0t7HXLCsUCsCuD0s7AoUA4yopmopIWEYI
O2rfJJ65jbPPWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client