Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: R2MqJ58CoU9L1+1brbrceX9tlG96QBcdOrXKQHPblbQ=
Subject key identifier: 4A:F6:FF:B5:B0:5E:7D:3D:2D:20:10:D9:42:FB:E0:83:30:DA:0D:0B
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 019D284E2EE3802385F99B1C2533B7EDAC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: PtfzodCSdNnR1E/DPMsTx3RJbL0LB8nZHFoxtXrb174=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2e:e3:80:23:85:f9:9b:1c:25:33:b7:ed:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=4af6ffb5b05e7d3d2d2010d942fbe08330da0d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:75:ea:98:c7:a0:b1:cb:b3:39:65:5d:f7:
33:14:af:db:d7:cc:52:8b:8b:60:7f:fd:a4:ef:70:
2c:b5:dd:34:65:e9:c4:16:88:67:85:35:06:f8:8e:
2a:0b:44:f7:eb:7b:1f:20:87:cb:62:09:35:5d:2f:
a7:1f:98:2d:7b:79:1d:fc:62:5e:f1:10:36:de:0d:
dd:84:64:df:6a:66:1b:0f:0c:68:53:b9:af:98:93:
53:30:63:74:9f:40:a9:aa:80:12:e6:23:c2:8b:dc:
7e:17:cd:9c:22:31:a6:b9:d3:f5:1c:71:7a:f1:76:
d4:59:51:de:d2:66:a1:21:da:6c:33:c3:79:d1:e6:
b7:1f:54:33:6e:1b:91:ac:bb:74:2a:87:7c:ab:77:
1f:71:4a:e2:f6:ca:23:ba:62:c4:5f:77:a7:de:98:
99:b9:d2:4e:7c:6e:47:5c:5c:26:fe:48:fc:b1:a6:
c6:d1:7f:71:1b:a2:33:c2:6d:6b:2b:ed:50:00:54:
7c:ee:4e:78:73:88:e3:14:1a:72:f0:c6:87:b0:69:
2f:a6:89:9c:a9:1f:09:b4:b5:e6:3b:d0:94:2f:a7:
1f:b9:d0:b5:66:b4:71:df:43:fc:bd:38:19:c1:ff:
12:09:3f:27:52:78:1c:a0:2c:ec:ce:9a:cd:26:42:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:FF:B5:B0:5E:7D:3D:2D:20:10:D9:42:FB:E0:83:30:DA:0D:0B
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:08:c4:22:8e:01:9a:7a:2c:12:47:d8:60:ac:52:a4:68:b9:
9a:a7:eb:24:25:02:b0:1b:82:ca:0a:98:e6:26:9f:3d:47:9c:
d4:76:ea:dd:a2:65:af:0c:95:9c:f8:2d:74:01:e8:64:a1:68:
61:0c:58:dc:c8:88:1d:8a:5d:8f:f7:d8:e5:8c:c0:4c:cd:7a:
56:6c:24:ca:b6:ef:77:6f:b4:fc:2e:fb:26:99:61:ae:24:37:
c9:0b:7a:39:9e:f6:a2:6f:41:19:60:43:e3:d4:0c:eb:c5:63:
8f:80:dc:fb:e4:fc:4d:f3:ae:ce:11:e7:8e:70:40:4f:0e:de:
c3:8f:2b:f7:0b:9b:44:9f:d1:1f:a6:fb:e6:9e:d2:6a:b5:a6:
56:53:44:71:d4:f8:69:cd:fd:64:68:ea:2d:56:86:73:7f:e6:
8d:18:cb:d9:2f:11:4b:e8:e5:3f:7d:7f:aa:77:fe:b5:41:3e:
3f:39:e1:68:15:c9:66:57:70:c5:b2:8a:66:65:c6:7d:20:33:
03:74:59:b9:b8:09:b7:c2:79:c9:c4:06:ac:4f:0f:5c:f6:90:
0d:e1:10:a0:2a:c4:79:02:3e:1f:99:6f:aa:ef:de:4b:43:7d:
17:b6:e0:52:c3:61:24:2d:89:77:5a:b6:9a:12:7a:28:56:61:
97:2c:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:25 2026 by rpki-client