Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: aFW3U03Nu0YZuQ0MJNrbWVKCDwAX9OX5AR0hlHm2h5A=
Subject key identifier: EC:EC:DF:D6:05:62:2C:CB:D5:14:DE:E8:0A:1D:91:5D:6F:6B:66:7F
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019F916CAB89E212C942C12588440F71F1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:00:45 +0000
Manifest this update: Fri 24 Jul 2026 00:00:45 +0000
Manifest next update: Sat 25 Jul 2026 00:00:45 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: JuArCnD0C34mxphm9ja09HX0fk52k5WI3Z4V/qeHuc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ab:89:e2:12:c9:42:c1:25:88:44:0f:71:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Jul 24 00:00:45 2026 GMT
Not After : Jul 25 00:00:45 2026 GMT
Subject: CN=ececdfd605622ccbd514dee80a1d915d6f6b667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:16:06:76:0b:09:8f:af:b3:18:f1:e2:81:
4f:25:fe:44:22:fb:3e:b1:d9:b4:09:f3:5b:62:0c:
8a:18:0b:7f:91:1e:18:a4:bb:9b:b3:73:b5:57:fc:
8e:26:80:b3:48:93:c6:10:da:62:f4:98:51:6d:35:
81:4b:b6:49:9f:a0:84:fa:1c:61:45:75:55:b1:93:
73:07:58:86:66:d0:40:09:4a:57:f6:8b:1f:e4:d8:
d4:73:fa:e5:8f:a0:5b:ca:28:9e:ef:a2:eb:ac:d0:
10:b9:a6:9e:67:07:78:eb:dd:ff:51:90:70:70:fd:
ff:7c:db:51:1f:56:e3:fb:83:45:1a:1e:84:ad:07:
2c:e7:eb:08:70:53:65:ed:40:88:d7:03:53:9f:65:
90:f5:35:6a:e0:23:f6:36:fd:cc:12:0d:94:b2:ff:
06:8b:bd:9a:de:f0:bf:98:b4:ab:28:c0:52:82:9f:
e4:84:f4:40:fa:c1:5d:0a:6b:e3:85:95:68:1b:bf:
5f:99:6c:3b:9b:d7:a6:98:e1:44:e7:a2:08:1f:9a:
0c:2f:4c:65:3a:b5:32:e3:11:25:79:0c:d9:25:26:
c2:2f:97:e2:92:01:82:a5:0e:93:ea:d7:84:ab:1d:
70:d9:42:36:64:ac:89:bf:a3:60:e1:dd:9f:67:78:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EC:DF:D6:05:62:2C:CB:D5:14:DE:E8:0A:1D:91:5D:6F:6B:66:7F
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:07:e8:91:40:c4:d8:79:85:3a:fb:9e:61:63:f1:08:61:79:
70:da:fe:c5:47:a8:c8:f4:9f:06:84:94:b6:3f:2e:44:c7:ce:
0a:eb:93:36:43:98:07:26:73:3d:55:9a:1d:a2:b9:41:70:21:
c4:42:aa:9d:78:c5:20:26:d6:22:ed:f2:f9:5b:b0:f7:cf:3f:
af:38:ec:53:dc:dc:d1:24:a2:0a:24:6d:3e:e2:03:3c:d6:be:
e4:e1:d3:dc:90:c7:70:cc:46:65:8d:8c:c1:76:52:6e:be:72:
47:e4:d7:22:be:e9:0f:ca:1c:3a:27:85:5b:72:9f:31:c1:ca:
f3:ca:f3:cd:42:2c:d1:46:0a:b7:f0:a1:e6:22:49:68:03:49:
37:16:ec:98:94:90:23:de:f7:7e:7d:e6:1d:bc:d6:b0:d5:9e:
82:7f:48:22:93:55:98:9b:79:cf:d1:83:13:c5:65:bb:e9:e2:
d8:3d:6e:54:ad:f3:35:3b:ce:d7:55:6e:d9:29:d0:b4:54:c1:
93:04:50:63:87:47:2d:c0:11:c5:20:05:4b:ce:a9:65:e4:61:
66:a3:6e:8d:52:4c:b0:26:6f:80:8a:ff:b3:bd:d5:bb:69:ca:
a8:0c:f2:85:cc:69:1b:43:a4:64:c6:02:97:63:fc:f5:f5:93:
e9:fc:83:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:24 2026 by rpki-client