Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: 6Jw6SbjODBKozO2Mpux4jN8BK0328T14zOljn9hzR04=
Subject key identifier: FE:15:B9:22:95:2B:BB:30:9A:DC:87:DB:EA:57:E5:79:92:4B:8F:0B
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 01A10B4B3FC1EC7AD1250F2A6B55362B937F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 09:00:43 +0000
Manifest this update: Mon 05 Oct 2026 09:00:43 +0000
Manifest next update: Tue 06 Oct 2026 09:00:43 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: mSz4qLoF1TqsTAtH2jkb8pFGHS4wT5YBySeOLKEk3YY=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4b:3f:c1:ec:7a:d1:25:0f:2a:6b:55:36:2b:93:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Oct 5 09:00:43 2026 GMT
Not After : Oct 6 09:00:43 2026 GMT
Subject: CN=fe15b922952bbb309adc87dbea57e579924b8f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:90:d7:38:ff:2b:eb:ea:bb:8b:b3:61:a1:
aa:a4:ee:7a:74:9d:26:8d:57:81:a9:7b:3a:e0:17:
8a:41:48:a3:24:8a:d9:cd:9d:d1:2d:96:90:9c:69:
dc:ed:70:36:c8:24:8a:7a:7f:92:00:92:23:c0:91:
2e:ca:58:48:02:f4:38:7c:ea:b2:c4:bc:ff:bd:de:
bf:d4:95:b7:af:04:80:96:d3:2b:8e:f9:92:b8:fc:
c8:ca:e5:63:25:13:29:7e:c5:e2:62:9a:54:f7:8c:
ed:60:7c:a9:ea:49:36:12:64:56:7c:70:c2:9a:8e:
2f:81:a2:3f:63:0a:62:23:ce:71:e7:59:8f:61:7b:
e2:c5:fa:23:d9:a7:7d:24:da:9b:eb:f3:12:3d:47:
70:ae:9a:72:16:68:90:f6:f9:25:36:83:d1:c0:b1:
34:6a:53:6c:ad:c0:e7:5b:99:21:72:b6:6c:19:6e:
f7:69:a7:49:de:f3:8b:88:e7:3c:3a:2b:eb:81:77:
2b:94:0e:00:dc:ea:f2:7b:b9:f0:f2:41:61:99:27:
4a:fb:80:39:72:d1:b0:17:03:82:1b:89:91:27:9d:
6c:af:02:63:95:0e:20:ae:36:6b:7e:ed:0c:ba:ed:
78:40:50:97:31:e5:96:ad:5f:1b:6f:fc:04:37:3d:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:B9:22:95:2B:BB:30:9A:DC:87:DB:EA:57:E5:79:92:4B:8F:0B
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:34:1e:06:34:c7:79:45:c1:6a:cc:12:15:65:64:ba:7a:d7:
77:0d:d6:06:f7:04:e9:6d:e3:6e:19:fc:c8:cc:59:ac:2d:c3:
05:89:ea:4d:60:58:08:4d:42:8f:e8:19:c7:0e:92:87:05:f5:
b3:65:a3:7c:03:b0:7d:92:b0:b7:d2:5c:fa:92:8e:ad:2f:dd:
7b:e6:4e:e9:03:7b:3c:53:b0:3d:c9:0d:98:2c:af:fd:f5:26:
fd:93:48:81:74:e5:4c:ed:de:8e:db:ba:08:a4:6f:d0:69:1d:
20:1a:ac:e4:bd:cf:49:9f:b9:eb:f9:15:52:20:4e:85:a1:32:
a0:64:13:2a:46:6b:24:03:ce:52:0f:a9:4c:ee:ef:33:c8:ea:
72:95:43:9b:2d:50:44:6c:91:54:f4:c2:4d:5d:38:93:d4:40:
66:88:39:99:40:aa:7d:ad:50:ef:17:c7:4e:6c:6a:65:7c:27:
b8:0a:ce:39:5a:32:52:5e:c5:4d:ff:c4:bf:f5:43:ff:c3:69:
41:cd:81:4a:23:d1:a6:f9:b2:26:40:cc:e7:af:21:b5:a6:46:
6c:14:d7:e5:0e:72:4e:cd:4a:91:17:9f:37:de:41:be:1a:6f:
70:ea:9f:5d:03:ed:63:b1:1e:5c:bb:8a:c0:ea:6b:01:ad:4e:
37:f8:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:23:57 2026 by rpki-client