Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: 6k8ztEfK/H090B3JCYnTH+z7PCQg29iEmHR4sY3yWRY=
Subject key identifier: 2A:97:99:D3:F8:B9:FB:F4:3B:C0:55:D3:2C:85:44:29:49:4A:55:C2
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 019F96259059BBC883A3C2E535FC87D57D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 22:01:11 +0000
Manifest this update: Fri 24 Jul 2026 22:01:11 +0000
Manifest next update: Sat 25 Jul 2026 22:01:11 +0000
Files and hashes: 1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: dD8HaYNlzE477XgRHyw44CSFdBTbQONkSW410sf///0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:90:59:bb:c8:83:a3:c2:e5:35:fc:87:d5:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Jul 24 22:01:11 2026 GMT
Not After : Jul 25 22:01:11 2026 GMT
Subject: CN=2a9799d3f8b9fbf43bc055d32c854429494a55c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:65:03:5c:0a:f3:58:16:5a:32:94:0b:11:
78:bd:06:89:b1:06:6f:55:f8:8e:b0:54:9f:34:e2:
22:c9:79:23:6e:be:e9:70:6d:f9:3e:27:25:1a:24:
fa:32:d9:5f:58:d3:6c:23:f7:30:e4:84:3f:70:8b:
94:8c:0e:4b:1f:ac:3f:dc:b0:79:02:18:aa:ef:11:
ff:ef:8e:7c:b6:54:ea:ac:59:7a:d0:ad:66:8b:ac:
58:12:9f:dd:24:3b:55:03:5d:3e:79:dd:5b:64:bf:
ad:47:a7:63:59:2c:0c:dd:18:2b:54:76:18:af:19:
01:13:ae:c5:c5:da:1b:37:ac:28:10:9a:d0:80:37:
dd:2b:40:52:65:1c:69:21:62:38:bc:4e:11:81:65:
1b:42:bc:44:21:ec:d4:c3:d0:c5:05:1a:94:c8:c2:
64:c5:27:81:4b:79:e3:8c:8f:83:13:4c:fe:59:d4:
d3:b0:e3:fc:c6:63:c5:24:a6:5a:5b:ef:b1:ad:08:
f5:3d:01:ca:4d:28:1b:03:d0:e9:0d:cd:cd:5f:ff:
3f:cd:b1:e9:e7:3f:43:94:cc:34:a0:a8:2d:29:95:
01:e6:c1:db:1b:ba:67:f4:fc:ee:77:0a:03:6c:f2:
73:45:0a:52:64:82:01:ff:9f:92:0e:a1:6f:05:7a:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:99:D3:F8:B9:FB:F4:3B:C0:55:D3:2C:85:44:29:49:4A:55:C2
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:35:c9:a5:bf:1d:21:70:e7:65:15:90:98:2e:17:c2:c9:
7d:78:3f:e5:f0:ae:28:c1:ba:80:14:4d:89:fe:98:ce:df:e9:
f1:f7:47:42:9b:6d:8f:04:49:3a:1d:d0:b0:97:53:18:01:f9:
35:82:fe:21:5c:3d:47:a3:be:79:9b:da:68:53:57:5b:83:d8:
fd:0e:ce:5c:24:0a:05:f4:cc:dd:1d:d8:48:8c:ca:64:b6:da:
44:32:5b:c9:f3:e4:52:20:e2:af:2f:43:47:75:18:db:de:c8:
2f:c4:e1:15:c5:fb:3b:3b:6c:0a:9d:4f:96:cf:87:da:fe:ec:
e3:08:64:94:30:c9:93:e2:7b:64:bd:73:af:d5:8d:81:41:37:
4f:b3:c1:67:2a:fa:4a:b7:94:b8:e6:3d:fb:e1:55:75:8e:77:
8a:6a:c8:80:3c:f6:7d:14:67:42:3a:a4:10:30:65:77:42:e8:
29:d5:7a:3b:60:b0:d3:a8:5e:84:22:18:c8:11:c5:e3:29:03:
31:a1:81:7e:04:9f:b4:60:1d:3b:38:be:f4:72:11:5f:f3:4b:
c9:0a:a4:24:4b:79:b0:3c:4f:c6:e2:f3:d8:60:80:a5:29:b3:
d4:c6:c1:33:38:65:6d:4e:c1:f0:27:db:f5:d5:9b:ce:4a:3d:
9f:de:3d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJZBZu8iDo8LlNfyH1X0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk
NjA0NjgwHhcNMjYwNzI0MjIwMTExWhcNMjYwNzI1MjIwMTExWjAzMTEwLwYDVQQD
EygyYTk3OTlkM2Y4YjlmYmY0M2JjMDU1ZDMyYzg1NDQyOTQ5NGE1NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxlA1wK81gWWjKUCxF4vQaJsQZv
VfiOsFSfNOIiyXkjbr7pcG35PiclGiT6MtlfWNNsI/cw5IQ/cIuUjA5LH6w/3LB5
Ahiq7xH/7458tlTqrFl60K1mi6xYEp/dJDtVA10+ed1bZL+tR6djWSwM3RgrVHYY
rxkBE67FxdobN6woEJrQgDfdK0BSZRxpIWI4vE4RgWUbQrxEIezUw9DFBRqUyMJk
xSeBS3njjI+DE0z+WdTTsOP8xmPFJKZaW++xrQj1PQHKTSgbA9DpDc3NX/8/zbHp
5z9DlMw0oKgtKZUB5sHbG7pn9PzudwoDbPJzRQpSZIIB/5+SDqFvBXpD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqXmdP4ufv0O8BV0yyFRClJSlXCMB8GA1UdIwQY
MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt
ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw
LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv81yaW/
HSFw52UVkJguF8LJfXg/5fCuKMG6gBRNif6Yzt/p8fdHQpttjwRJOh3QsJdTGAH5
NYL+IVw9R6O+eZvaaFNXW4PY/Q7OXCQKBfTM3R3YSIzKZLbaRDJbyfPkUiDiry9D
R3UY297IL8ThFcX7OztsCp1Pls+H2v7s4whklDDJk+J7ZL1zr9WNgUE3T7PBZyr6
SreUuOY9++FVdY53imrIgDz2fRRnQjqkEDBld0LoKdV6O2Cw06hehCIYyBHF4ykD
MaGBfgSftGAdOzi+9HIRX/NLyQqkJEt5sDxPxuLz2GCApSmz1MbBMzhlbU7B8Cfb
9dWbzko9n949Gg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:45 2026 by rpki-client