Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: 29AFFBqp22+1crbf8WeHufEcrJjTFDP6btu4UbXHHMo=
Subject key identifier: 89:61:11:8B:F7:86:A8:14:09:3E:2B:3C:97:11:57:88:12:58:F6:58
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019D28BBB80B38CC75B525483AEDA4685B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: q7lClGixgNyGxqw51VyCFU1WcrbiIjgWeY4XChUAPGo=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b8:0b:38:cc:75:b5:25:48:3a:ed:a4:68:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=8961118bf786a814093e2b3c971157881258f658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:7b:1b:c1:67:99:28:24:06:d3:72:69:56:
0f:09:2a:b6:5a:d8:f1:5b:17:7a:58:21:f2:9a:5e:
73:0f:c3:7a:fb:7f:fe:31:8d:2f:db:bf:c9:88:14:
42:4c:9d:00:8a:4f:05:07:63:b5:76:1c:a4:ed:58:
b1:9f:c0:2e:79:26:72:33:93:84:f1:36:ab:8d:31:
66:1a:1f:b7:1c:6d:03:18:b5:ef:a5:9e:00:01:62:
5e:c8:2f:67:b7:2f:29:c6:1a:22:a3:e6:6f:74:14:
0e:e3:54:17:a7:87:be:1a:49:45:70:27:71:a0:83:
18:2c:90:b0:2b:4f:c4:68:43:3c:fa:ee:8f:43:8f:
5d:3b:e7:6b:66:e5:cc:ef:15:92:3e:0a:9f:ac:19:
a0:19:3b:fa:ac:80:a8:cf:a1:27:0e:10:1d:a0:3a:
9d:29:b0:d8:e9:62:77:1c:4f:34:6d:12:61:db:35:
ca:7a:04:89:62:91:b6:60:29:aa:f2:52:4e:7e:a5:
55:a0:90:fe:cd:cb:c6:5c:78:4d:60:4d:ba:c6:75:
2e:b1:91:94:f0:38:a1:40:54:cd:40:99:a7:38:6f:
c3:45:98:f8:28:4e:5f:5f:ec:e4:e7:b8:a6:a6:e4:
f3:00:b6:f2:5a:3e:26:08:03:13:7c:a8:db:16:c0:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:11:8B:F7:86:A8:14:09:3E:2B:3C:97:11:57:88:12:58:F6:58
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7a:a7:9e:9f:4b:aa:dc:bf:6d:6d:d2:ea:0b:47:e2:c6:16:
38:10:97:29:f9:17:b5:be:9c:1c:31:e4:66:3b:54:4a:c8:92:
0c:2e:16:38:7b:c3:dd:3c:1f:9e:ca:cc:92:d1:0b:56:72:61:
07:6b:fe:e5:1e:a9:11:56:9a:ee:cd:8e:ac:1e:d7:b2:56:99:
08:6d:ac:f4:ff:db:35:05:77:b0:8e:80:5b:c1:1f:d4:36:52:
61:eb:36:f6:c3:8f:7d:00:ff:e4:02:02:21:f2:3c:bf:3a:78:
89:31:e7:a9:9a:7a:ab:4e:48:21:41:b4:12:d2:fa:41:c9:b0:
11:ac:fa:e6:64:1c:7b:6d:00:16:4c:66:5c:a2:4e:5a:79:b5:
c8:eb:21:e2:c2:fb:cb:b7:d0:25:63:3d:8c:5a:6c:f5:e8:e0:
23:fb:69:46:bb:fb:0b:9c:3a:dd:ab:3a:38:d1:71:1e:d9:f8:
b0:a9:2e:51:b7:45:01:ea:53:5a:6b:ba:09:ab:fc:be:38:1d:
ff:31:86:f2:e0:2d:cd:e8:56:29:88:65:47:65:d5:26:52:31:
11:89:89:d2:2c:d9:42:20:5c:fd:7a:e6:46:40:e1:da:ab:06:
51:ae:ec:74:50:47:0b:9e:8a:b7:73:d2:36:36:7b:d2:3c:01:
8e:e7:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:27 2026 by rpki-client