Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: CWSgC7AmlP1W+v3dQiv3DmVArphM5dqpCh+uKDYxlXo=
Subject key identifier: 38:59:F1:B4:E4:02:6B:6C:CC:4B:80:A2:C7:CC:98:08:A3:CC:85:69
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A0D2DF07A9747D310FEDC2C507FF1D4495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 068B
Signing time: Thu 24 Sep 2026 10:03:46 +0000
Manifest this update: Thu 24 Sep 2026 10:03:46 +0000
Manifest next update: Fri 25 Sep 2026 10:03:46 +0000
Files and hashes: 1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
2: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (hash: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=)
3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: znxQUWYup1I9tsP6lcK8nb0yRMrf65vAtMnkFH/gL4M=)
4: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
5: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
6: xR7LKB9cMx20WjaSYnBDWdIRF-g.roa (hash: vumkR84YsHI2dcyHQIVTL0w8JKyaUvc5rnjqJHi4+6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:df:07:a9:74:7d:31:0f:ed:c2:c5:07:ff:1d:44:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Sep 24 10:03:46 2026 GMT
Not After : Sep 25 10:03:46 2026 GMT
Subject: CN=3859f1b4e4026b6ccc4b80a2c7cc9808a3cc8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:28:97:4f:d6:8c:10:39:ba:f1:ce:69:2b:
7d:71:bd:3a:87:80:7f:f3:8b:7e:69:eb:17:c4:a5:
ef:ed:91:3c:63:06:da:09:3f:2c:b2:8d:e0:d6:0f:
a3:5c:b2:2b:18:8d:65:42:a7:50:ad:09:14:69:cd:
e7:92:8e:80:5c:17:db:ad:ca:cd:ad:aa:2a:dd:d1:
ad:29:ef:87:3b:01:e2:25:a2:a1:2f:4d:74:19:37:
7b:cb:54:3b:06:67:7a:b5:22:ce:bf:f2:c1:8a:23:
b3:2a:ee:a7:60:63:0f:63:b1:2a:bc:7b:54:7c:74:
bc:b6:39:15:73:c2:c9:66:b8:ee:72:4e:5e:a8:cc:
dd:bb:ec:19:d4:25:60:d8:ba:89:f8:44:f8:ba:f7:
a5:46:df:ad:c8:7a:5e:de:c6:60:10:80:44:f9:d2:
0c:0f:dc:00:4d:cd:5a:f4:de:24:ef:47:69:ec:3c:
af:90:a6:16:f7:cb:a9:19:05:f6:c0:fa:4d:8d:58:
e7:32:9b:9e:ad:6e:7b:1b:bc:b5:45:88:25:34:40:
c9:8b:64:52:11:4b:fa:c1:2a:d5:7e:f2:2c:44:51:
b2:93:1f:89:bd:de:2a:a5:e8:87:f0:38:4e:e6:21:
47:0e:bc:77:03:e2:a3:a2:ac:1f:7f:61:91:40:9e:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:F1:B4:E4:02:6B:6C:CC:4B:80:A2:C7:CC:98:08:A3:CC:85:69
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:ec:d0:ce:f5:21:cd:ea:11:ef:7d:6c:bd:e1:d2:fe:13:
48:33:03:04:ff:3c:8b:85:98:fb:1e:c5:c3:be:b5:91:a4:94:
50:a1:75:99:c3:2a:cb:bc:ad:7a:b7:57:fc:4d:1b:83:a7:26:
d7:93:74:ed:ed:31:45:08:4b:7c:69:54:77:df:d2:1d:0f:32:
82:bd:c3:c5:d9:32:d4:2f:aa:9f:1f:79:8e:65:1b:93:4a:ce:
88:c4:43:76:48:2d:6d:25:e1:30:80:cd:87:3f:55:bb:2e:b0:
bc:da:d7:59:0b:10:7f:ff:e1:46:32:51:b2:6b:ee:f3:c1:90:
a0:9a:40:77:03:ba:f8:be:9c:67:3f:1b:fa:ea:35:27:d6:63:
d6:95:19:49:0f:26:23:b4:75:bb:14:4e:da:c5:2f:78:72:7b:
c8:55:d1:cf:3e:d2:42:d6:f7:4d:d6:84:8a:19:56:ea:09:4f:
a0:f0:91:a7:9b:21:54:54:a1:72:99:25:b1:7d:85:a7:3b:cb:
ca:b8:17:4b:b0:3d:e7:a4:61:16:df:54:da:44:1d:67:e0:80:
f8:10:bb:30:33:26:72:99:1e:06:96:85:42:9b:3a:48:9b:e4:
17:8f:a1:f2:12:8d:24:1d:3f:8a:90:ba:9e:25:96:d9:26:09:
98:dd:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:26:44 2026 by rpki-client