Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: JgorbruJ186YD+wUEi8zDpZMlkne+SSWAxwP2I0C9Q0=
Subject key identifier: FD:70:FF:68:E2:56:96:23:A0:05:42:A7:E7:A2:21:1B:14:64:C4:7C
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019E1FED118E6E820D3D10A4EBAAA5966C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 06:01:30 +0000
Manifest this update: Wed 13 May 2026 06:01:30 +0000
Manifest next update: Thu 14 May 2026 06:01:30 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: y6vqamax0DZAVLZLSCafu60gIZjl9pe83wZEFGA7CmM=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:11:8e:6e:82:0d:3d:10:a4:eb:aa:a5:96:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: May 13 06:01:30 2026 GMT
Not After : May 14 06:01:30 2026 GMT
Subject: CN=fd70ff68e2569623a00542a7e7a2211b1464c47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:60:f4:83:c0:e1:15:e2:b3:75:b4:45:ec:
6c:5b:59:c6:45:99:08:55:cb:e2:af:93:d8:fa:f0:
67:c4:aa:0f:bc:39:bc:b1:0d:97:d0:1b:90:ac:14:
c7:05:26:14:89:cd:ca:2f:d5:86:f6:33:f4:22:46:
30:3b:b4:5a:b6:fe:75:2a:5c:d8:e2:8a:d3:60:cc:
74:a8:b2:5e:f0:01:41:72:2b:ad:5b:d4:34:e2:c8:
39:a3:13:05:20:64:39:e1:bb:54:2a:7e:9e:89:27:
b9:b8:30:e0:df:fb:24:ff:63:61:98:f7:7b:00:eb:
0b:8b:15:3c:7d:f3:39:04:c6:98:f1:1f:0d:b2:e5:
f0:de:4f:4e:c0:73:69:86:00:42:e8:55:8b:55:74:
4c:f3:38:26:99:4e:b0:cb:f4:64:85:51:ac:1a:67:
ef:5c:dc:63:21:f9:55:59:75:31:c0:8b:78:ba:ef:
da:da:83:7f:a1:46:a6:a6:09:91:bc:b1:47:c5:fa:
ff:16:62:59:24:08:9e:6a:55:5c:7e:cb:ca:cf:d2:
a7:d6:8b:39:02:57:75:f8:d3:35:db:b1:d0:28:30:
91:de:4e:35:f4:8e:fb:b3:14:df:59:9a:b1:b8:14:
8e:1e:58:bc:bb:f8:02:e1:9e:21:7c:e6:57:39:3a:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:FF:68:E2:56:96:23:A0:05:42:A7:E7:A2:21:1B:14:64:C4:7C
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:58:51:78:be:50:67:54:96:12:35:ae:c8:93:b8:6f:48:21:
fd:da:5e:10:61:93:85:c7:4a:d2:e4:5a:79:03:ce:3d:b2:3e:
4d:9b:f2:a4:73:8d:2a:fc:5b:ed:10:8c:01:ce:fa:3c:35:b2:
f2:4b:3a:e8:9f:21:4e:ea:ad:ee:a6:31:68:74:29:e2:db:8d:
d4:99:88:76:4c:47:1e:71:fc:f9:3f:36:e1:44:2d:41:20:9b:
78:aa:60:08:f3:6a:4a:d9:57:91:ec:c5:b3:9c:e8:db:1f:18:
29:99:9a:7e:65:de:ac:46:dd:4e:17:78:e1:89:7e:0b:a4:e8:
23:3a:5e:1b:0b:a2:11:a9:ae:cc:af:6b:70:15:90:55:e9:9d:
77:f1:22:41:a7:cd:b2:13:4f:41:f4:50:7b:ba:d9:c9:69:b6:
77:b2:c8:c3:6c:2d:e6:0f:d9:b9:1e:1b:ef:d6:4c:0b:98:f0:
d8:96:51:66:ba:64:e2:b9:23:8f:0a:25:c9:2d:02:1d:b1:ff:
8d:4b:c5:06:8b:b7:42:e5:f2:cf:72:7b:74:3e:81:01:5a:bb:
aa:c2:08:88:04:d1:a0:db:33:82:a0:ff:e4:02:f6:73:92:5e:
69:57:3c:ba:9f:ad:95:2f:db:ee:f3:55:e5:e1:be:87:c8:a5:
db:63:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:01 2026 by rpki-client