Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
File: sM7BwXmc5hUD-QithJCSD7iYlCo.mft (raw, json)
Hash identifier: rbkx1db9fRswW9R5dWn7oyQxKEm2FJ4wrOGEI6rvlGg=
Subject key identifier: CF:1E:01:2A:A5:7F:0A:F1:55:0E:35:54:01:FC:64:DE:1E:AA:89:42
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Certificate issuer: /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial: 019F8F10EAC90F4F5239AC8891C67F44FD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
Manifest number: 0149
Signing time: Thu 23 Jul 2026 13:01:18 +0000
Manifest this update: Thu 23 Jul 2026 13:01:18 +0000
Manifest next update: Fri 24 Jul 2026 13:01:18 +0000
Files and hashes: 1: SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa (hash: Hy6zUn6CPOdPhp0PUaBkdSVPrH4LoH2MpjhK4spZ01E=)
2: sM7BwXmc5hUD-QithJCSD7iYlCo.crl (hash: 4XUAW+Uzv6p+X+1Q2uyneudv7AW1/stFBXfWJYlokoU=)
3: sf9Z2ePpKun38jGY3djkfjvGjpg.roa (hash: syFz830qmJzC/1pywYFwYVAGBqkNlU+FJmKYctYWrpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:ea:c9:0f:4f:52:39:ac:88:91:c6:7f:44:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Validity
Not Before: Jul 23 13:01:18 2026 GMT
Not After : Jul 24 13:01:18 2026 GMT
Subject: CN=cf1e012aa57f0af1550e355401fc64de1eaa8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:0c:b3:24:fb:90:db:ed:92:00:aa:b1:68:
ea:56:cb:e0:52:ab:11:9e:e2:06:43:06:19:61:85:
83:16:ff:d4:f4:21:06:a1:4f:3f:e5:6d:37:f7:43:
df:d3:42:c7:b7:67:71:75:51:5e:d4:33:29:ac:ba:
fb:69:2a:f7:b6:db:22:ce:72:2d:f1:ee:60:d9:6d:
13:64:62:03:05:76:4c:b4:2e:c4:5e:b4:84:2a:f4:
7b:6c:04:d6:be:4a:0c:84:01:2a:b1:ae:9b:0f:19:
33:98:73:36:dd:f0:19:14:22:a6:ce:c7:44:fe:5c:
0c:f5:14:1e:59:da:eb:7c:b8:cf:8e:1b:23:f0:6b:
3c:57:fb:3f:53:9a:cd:5d:db:ca:1f:4e:ab:e8:ec:
ad:dd:ea:e8:9e:63:9e:90:30:d2:c5:5c:3c:38:3b:
99:64:36:c4:21:3b:11:bd:fe:92:8a:3a:3b:4e:56:
2b:23:2c:02:01:9f:fc:58:91:73:b2:a9:00:34:ab:
3f:fc:47:51:9f:5f:95:05:3d:5d:98:91:6b:bb:b9:
e6:b9:13:6c:dc:28:03:66:e1:f5:ef:44:01:79:fc:
00:1a:1f:2f:94:6b:c2:54:af:78:62:a9:4f:26:af:
01:b9:ca:5f:be:e1:cb:eb:25:91:a4:1b:2e:60:90:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:01:2A:A5:7F:0A:F1:55:0E:35:54:01:FC:64:DE:1E:AA:89:42
X509v3 Authority Key Identifier:
keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:80:8a:83:45:4f:7f:e3:5e:c4:2e:14:fc:f7:94:64:20:
dd:83:78:86:41:b5:4c:80:86:4b:5f:07:5c:28:d9:6b:96:74:
fe:ff:0b:de:2a:de:88:dc:40:fc:49:b5:0f:24:e2:66:a1:dc:
70:1a:33:40:de:37:a7:7c:c0:d7:4c:9c:0b:53:0d:40:b3:53:
5a:aa:ba:84:97:9b:2d:0b:cf:4b:53:d7:86:fa:5b:29:15:cf:
ff:ef:51:6d:66:25:38:c5:9f:3e:b1:ba:a8:fa:aa:eb:7f:c9:
c1:6f:fa:e3:36:d3:2a:09:eb:99:b1:7b:f2:e3:f7:45:c4:64:
c0:be:b7:dc:c9:e3:83:34:ef:7a:30:0a:98:ec:8b:3a:b1:87:
b7:49:5d:78:d8:d3:0f:1f:40:ad:15:ae:96:7d:84:7e:52:8a:
00:cb:4e:67:f9:ba:20:d4:b5:19:7a:ec:65:3a:b6:a2:15:ed:
1f:fc:2b:90:75:21:11:52:47:6d:43:e9:3c:4e:fa:5e:80:e5:
0e:70:57:65:d1:1d:7b:43:6d:6b:56:2c:32:48:7b:3e:48:51:
14:33:2a:db:35:7c:2e:55:fe:13:e9:f1:9b:ee:36:2d:35:e6:
b3:bd:4a:2b:39:3b:c0:a2:6d:58:d2:10:03:b1:3a:10:2f:5d:
fa:7e:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:35 2026 by rpki-client