Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: u7wg7maDvglVbeXqdFwyjfIOwArLDnpG4s4TLhLOg/4=
Subject key identifier: 0F:E6:57:D3:91:4E:3F:58:FE:C1:B9:19:AF:87:44:72:32:A1:98:66
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019F94A4A1BCA602E1837E439AB41AED3A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 15:00:44 +0000
Manifest this update: Fri 24 Jul 2026 15:00:44 +0000
Manifest next update: Sat 25 Jul 2026 15:00:44 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: 122Jq0WVis0ewfcuP6LxHXHrLfdLjXDTFXqUpYyJFmw=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:a1:bc:a6:02:e1:83:7e:43:9a:b4:1a:ed:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jul 24 15:00:44 2026 GMT
Not After : Jul 25 15:00:44 2026 GMT
Subject: CN=0fe657d3914e3f58fec1b919af87447232a19866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:14:05:d9:2d:dc:20:08:55:93:19:e3:40:
7e:dd:7e:a8:41:ef:bd:86:8a:4f:36:3b:25:82:8a:
3f:16:13:1b:a4:26:3a:98:5a:15:28:dc:1c:bb:3a:
61:3b:8e:da:5a:f6:b2:4a:37:44:4d:18:2e:e6:9f:
f0:c5:e2:7b:87:dc:30:20:df:e0:7f:60:4f:34:38:
98:d6:4f:6d:1e:68:69:3b:fe:b0:37:0f:7c:a9:51:
7a:62:20:16:4a:ff:51:b4:03:86:2a:dc:b5:82:79:
e5:35:9e:9e:01:9c:7f:b2:78:a8:fd:68:b7:35:5b:
d3:8d:a2:b9:92:a8:e4:a4:73:57:bc:72:4f:49:cc:
66:7d:32:7e:3e:a3:43:a9:67:68:d1:60:13:09:a7:
d5:03:75:6e:0e:3b:d1:1a:b4:b3:a3:fb:00:48:f7:
4a:b2:6c:fe:71:70:a0:6e:71:4b:d0:41:56:d6:7f:
d6:9d:19:18:ad:3f:49:6b:0b:94:f8:6e:98:65:d9:
d1:fb:ba:4d:89:56:0f:2d:f4:53:0b:ff:35:07:a5:
7d:b0:53:92:47:e2:0f:e8:ed:08:30:e1:6a:0a:bc:
a1:96:04:10:7e:c8:ab:49:87:24:84:12:2c:94:15:
bf:30:88:f1:6b:32:66:ff:b9:25:49:68:15:c0:a2:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E6:57:D3:91:4E:3F:58:FE:C1:B9:19:AF:87:44:72:32:A1:98:66
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:74:e8:8a:44:af:3a:c8:48:50:f2:1c:af:28:f9:eb:39:be:
40:04:8b:2c:e2:5c:50:87:3d:7b:34:e5:e3:c1:83:35:7e:0d:
fa:aa:c0:b7:71:09:4d:44:41:84:84:c1:61:2f:90:c0:cc:d4:
7a:e6:e4:a5:09:b5:7f:45:25:4b:db:ec:a5:98:bb:0d:83:91:
84:d3:23:98:31:f9:6c:0c:26:60:d4:f2:88:b9:6c:ea:25:a2:
fc:fc:34:88:5a:7d:d6:29:dd:69:76:1b:a4:e5:f8:71:44:39:
1a:56:64:ce:e5:f4:8c:d6:eb:23:23:2c:10:41:17:28:5d:df:
7e:e1:f8:d7:97:4f:bc:01:d1:f1:41:65:bc:a1:9b:5e:27:4b:
a0:47:cb:f6:03:22:e6:dc:47:4f:c4:cf:6e:fc:93:18:cd:91:
09:5f:6a:0b:07:10:90:2f:e4:01:d0:c2:1a:6d:18:97:46:4e:
f0:d7:e5:8f:79:1e:f2:fc:b6:27:9a:45:4e:70:8d:ed:0a:be:
50:50:b7:e2:10:90:59:90:d3:9d:91:c3:28:b7:d6:03:86:f9:
53:00:d1:9d:0d:9d:55:bc:ea:6c:0c:bb:f7:ba:c7:f8:f9:38:
cb:0b:ce:af:88:e0:f1:68:d8:0c:2d:57:53:ea:f0:66:a4:53:
49:47:20:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpKG8pgLhg35DmrQa7TqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjYwNzI0MTUwMDQ0WhcNMjYwNzI1MTUwMDQ0WjAzMTEwLwYDVQQD
EygwZmU2NTdkMzkxNGUzZjU4ZmVjMWI5MTlhZjg3NDQ3MjMyYTE5ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzQUBdkt3CAIVZMZ40B+3X6oQe+9
hopPNjslgoo/FhMbpCY6mFoVKNwcuzphO47aWvaySjdETRgu5p/wxeJ7h9wwIN/g
f2BPNDiY1k9tHmhpO/6wNw98qVF6YiAWSv9RtAOGKty1gnnlNZ6eAZx/snio/Wi3
NVvTjaK5kqjkpHNXvHJPScxmfTJ+PqNDqWdo0WATCafVA3VuDjvRGrSzo/sASPdK
smz+cXCgbnFL0EFW1n/WnRkYrT9JawuU+G6YZdnR+7pNiVYPLfRTC/81B6V9sFOS
R+IP6O0IMOFqCryhlgQQfsirSYckhBIslBW/MIjxazJm/7klSWgVwKIIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/mV9ORTj9Y/sG5Ga+HRHIyoZhmMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3ToikSv
OshIUPIcryj56zm+QASLLOJcUIc9ezTl48GDNX4N+qrAt3EJTURBhITBYS+QwMzU
eubkpQm1f0UlS9vspZi7DYORhNMjmDH5bAwmYNTyiLls6iWi/Pw0iFp91indaXYb
pOX4cUQ5GlZkzuX0jNbrIyMsEEEXKF3ffuH415dPvAHR8UFlvKGbXidLoEfL9gMi
5txHT8TPbvyTGM2RCV9qCwcQkC/kAdDCGm0Yl0ZO8Nflj3ke8vy2J5pFTnCN7Qq+
UFC34hCQWZDTnZHDKLfWA4b5UwDRnQ2dVbzqbAy797rH+Pk4ywvOr4jg8WjYDC1X
U+rwZqRTSUcgGQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:03 2026 by rpki-client