Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: WDwKmSCys1WcJtWOmngA0L6AkNebNuKV5fqQj5vH16E=
Subject key identifier: 51:E4:13:88:B8:2D:AB:FF:AF:CD:C4:E1:8B:83:74:59:7B:F0:32:E9
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 01A1186269B3F72D80C4973D32A6E1C8F9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 1A95
Signing time: Wed 07 Oct 2026 22:01:05 +0000
Manifest this update: Wed 07 Oct 2026 22:01:05 +0000
Manifest next update: Thu 08 Oct 2026 22:01:05 +0000
Files and hashes: 1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: XUH3nn0RUnI3/3oH5PAsDwRh26VyOygJEMqOc9bLK/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:62:69:b3:f7:2d:80:c4:97:3d:32:a6:e1:c8:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Oct 7 22:01:05 2026 GMT
Not After : Oct 8 22:01:05 2026 GMT
Subject: CN=51e41388b82dabffafcdc4e18b8374597bf032e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:65:22:ee:5e:77:68:47:4e:56:98:d2:f8:
8c:a2:2a:15:35:28:6e:c1:ae:4f:4d:0c:7e:b2:70:
f2:12:4c:2c:1e:a8:91:28:c7:56:bd:b7:70:f5:11:
f7:20:c4:5d:d7:8b:80:70:f5:5e:b5:4e:fd:c8:ef:
73:0f:ac:d8:4f:5b:03:80:23:08:96:c3:1b:13:3c:
9f:b6:a7:85:44:b6:ce:d8:f1:67:f8:ab:9f:6c:cb:
81:3f:f9:22:53:57:e1:bd:a0:da:4e:21:c3:23:66:
d7:ad:2f:21:10:f0:ec:e4:13:1d:2f:87:84:f0:c0:
98:19:6b:e8:b6:47:33:cb:a7:e3:08:b3:ff:b7:90:
b8:c3:97:9c:cf:64:5d:f3:89:b6:c0:48:58:68:66:
99:a7:a5:2f:89:09:2c:bc:2d:39:52:9a:07:e9:70:
1e:d3:f7:43:eb:7c:cb:d8:3a:5c:37:2f:34:83:bb:
7f:e0:cf:f6:9a:2c:91:20:a2:b7:80:48:d7:32:12:
a0:6a:cd:14:33:48:06:bd:9d:d8:2d:7f:de:16:d3:
3d:3e:a0:5b:cc:17:63:d7:7e:3e:ae:3c:4c:0c:7d:
f8:c0:4b:bb:8a:db:13:a0:ed:62:0f:08:18:71:d1:
ed:b5:18:95:8b:af:48:45:a4:3a:2a:19:a8:77:e4:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:13:88:B8:2D:AB:FF:AF:CD:C4:E1:8B:83:74:59:7B:F0:32:E9
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:72:af:92:cb:f4:43:78:48:ec:e5:60:f6:82:fb:27:a6:c1:
1b:5e:f5:a2:f4:de:17:ac:fc:30:89:50:1b:ec:7c:aa:5b:0a:
4c:18:99:a7:2b:9f:2c:8a:b2:5e:d3:f2:0f:69:88:07:eb:87:
d7:5a:e4:a5:f0:7c:d3:5d:5a:bc:e7:c7:b6:6f:48:4b:d2:a8:
da:7b:e8:3c:f1:b6:af:74:14:61:43:23:19:46:a9:38:41:57:
10:88:5e:2f:cf:33:7d:02:c1:9e:f3:b3:46:e0:f7:db:ad:47:
b6:42:df:52:58:03:9a:91:19:0e:70:f0:ed:a1:4b:97:20:f5:
01:59:f3:f2:65:8a:2d:f3:10:92:9f:94:69:ad:46:d9:aa:4d:
d0:b7:a8:d6:ce:d0:82:93:ba:26:08:42:c8:45:d8:c1:78:bc:
54:87:34:e5:53:4d:86:2d:1d:72:45:23:49:db:42:84:6c:78:
f3:d8:de:35:aa:09:89:a3:f0:73:9d:1b:ca:ec:54:63:b4:fe:
e7:7d:f8:3d:f0:ad:20:33:2d:4e:65:10:88:9c:a1:95:69:b4:
ad:44:62:cc:cf:d9:2d:c9:ea:24:1d:d9:5d:f7:56:fe:4c:a5:
1d:2d:0a:c0:cb:60:ba:94:26:11:34:44:25:57:67:ca:41:06:
49:c7:0c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYYmmz9y2AxJc9MqbhyPnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk
NjA0NjgwHhcNMjYxMDA3MjIwMTA1WhcNMjYxMDA4MjIwMTA1WjAzMTEwLwYDVQQD
Eyg1MWU0MTM4OGI4MmRhYmZmYWZjZGM0ZTE4YjgzNzQ1OTdiZjAzMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LFlIu5ed2hHTlaY0viMoioVNShu
wa5PTQx+snDyEkwsHqiRKMdWvbdw9RH3IMRd14uAcPVetU79yO9zD6zYT1sDgCMI
lsMbEzyftqeFRLbO2PFn+KufbMuBP/kiU1fhvaDaTiHDI2bXrS8hEPDs5BMdL4eE
8MCYGWvotkczy6fjCLP/t5C4w5ecz2Rd84m2wEhYaGaZp6UviQksvC05UpoH6XAe
0/dD63zL2DpcNy80g7t/4M/2miyRIKK3gEjXMhKgas0UM0gGvZ3YLX/eFtM9PqBb
zBdj134+rjxMDH34wEu7itsToO1iDwgYcdHttRiVi69IRaQ6Khmod+RAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHkE4i4Lav/r83E4YuDdFl78DLpMB8GA1UdIwQY
MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt
ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw
LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHKvksv0
Q3hI7OVg9oL7J6bBG171ovTeF6z8MIlQG+x8qlsKTBiZpyufLIqyXtPyD2mIB+uH
11rkpfB8011avOfHtm9IS9Ko2nvoPPG2r3QUYUMjGUapOEFXEIheL88zfQLBnvOz
RuD3261HtkLfUlgDmpEZDnDw7aFLlyD1AVnz8mWKLfMQkp+Uaa1G2apN0Leo1s7Q
gpO6JghCyEXYwXi8VIc05VNNhi0dckUjSdtChGx489jeNaoJiaPwc50byuxUY7T+
5334PfCtIDMtTmUQiJyhlWm0rURizM/ZLcnqJB3ZXfdW/kylHS0KwMtgupQmETRE
JVdnykEGSccMlA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:09:19 2026 by rpki-client