Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: i93PU9j/yKEl2oBtQswQlgdGtLwFc48IPsyKWSIsmhI=
Subject key identifier: FC:88:63:49:A2:EE:7B:DC:BC:07:BB:41:F1:3F:AC:DF:92:BA:BB:FD
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 019D29299A8F4401233260EA9E80C79BF685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: OvyNXd3u3vxu4E6f/Yof+uUGsSe0PmkZpAM/R4pmMv4=)
2: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (hash: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9a:8f:44:01:23:32:60:ea:9e:80:c7:9b:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=fc886349a2ee7bdcbc07bb41f13facdf92babbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:3a:20:af:2a:03:5a:65:68:4b:90:16:26:
de:8f:e2:ed:02:1b:93:a8:d2:b9:2e:06:f6:b7:1b:
60:01:2d:81:cf:c8:e6:d0:ae:3a:47:a2:76:a7:03:
fc:36:80:42:ce:42:bb:6d:c1:d1:c2:e6:ea:c5:e0:
33:e1:46:2b:01:fa:64:85:ff:8f:b7:17:54:ff:4e:
04:66:59:40:e7:4b:1a:98:4a:51:61:c4:bb:b7:ce:
fa:48:9b:70:ed:79:ab:f9:75:21:87:16:88:82:80:
c4:65:66:04:dc:57:ad:b8:ee:52:11:29:75:1d:1a:
aa:3d:d4:1c:13:e4:af:92:7e:dd:5d:5c:02:ec:19:
c1:52:80:06:b7:66:f1:ac:82:2e:65:8c:c0:61:72:
4d:38:37:10:60:8a:58:0a:da:f5:9a:cd:14:a3:71:
38:ad:56:1a:20:21:9b:5a:87:b9:d0:49:47:66:50:
1d:d4:04:59:11:5c:f8:aa:7b:22:c0:9c:71:67:7b:
ca:b7:ca:59:db:da:23:87:9e:b5:21:13:a9:cc:50:
55:09:71:ba:61:75:c2:dc:9c:46:a7:23:9e:61:0c:
e1:e7:00:ce:28:31:63:c2:3c:d7:2a:7b:11:75:7b:
fd:4b:23:5a:1a:ab:a6:af:7b:f7:73:6d:b0:58:49:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:88:63:49:A2:EE:7B:DC:BC:07:BB:41:F1:3F:AC:DF:92:BA:BB:FD
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0c:e6:5b:92:c1:65:50:70:f2:fe:90:dc:c7:c4:45:b0:d7:
f0:09:67:83:d5:79:5d:77:d6:b6:05:a3:3f:39:ee:34:16:d1:
32:05:3c:4e:dd:20:f5:1b:fa:4f:2f:24:4b:b8:a9:10:36:28:
62:64:83:5a:ef:9d:e6:cc:4a:49:dc:a2:80:c0:8e:d7:9b:07:
7d:30:8a:a0:13:b0:63:92:1e:77:a5:d1:d7:7f:d4:b1:22:73:
85:d2:ab:af:86:5a:17:67:14:21:8d:28:9f:db:8e:e6:11:c9:
47:8e:c4:d8:59:c6:40:95:8e:b4:35:1a:b5:6e:84:30:77:04:
06:a7:f5:24:9a:b4:7a:62:bd:31:f4:8b:de:d1:6f:94:f9:0d:
f1:81:1c:b0:fc:f9:aa:25:85:d4:df:2a:4f:39:ab:55:1e:1e:
56:7e:de:c4:2d:8a:58:c9:b0:88:ab:53:15:fa:dd:4d:14:7a:
34:03:7d:b6:7a:ca:ca:cc:94:cd:15:e3:cb:72:f1:b6:45:3f:
cf:43:1f:4e:38:bb:92:94:67:23:5f:bb:8d:87:d8:55:5e:d3:
65:39:6e:48:95:94:6a:36:c4:75:dd:4d:fb:9e:7d:9a:f9:66:
09:db:48:cb:a6:1b:06:b3:e2:d1:12:e1:58:1b:6f:46:f2:46:
24:71:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:07 2026 by rpki-client