Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: YoGRabnZYMxvEm2DZCh7yVmnGnA9gFIdn1rZ/WwJ0u0=
Subject key identifier: 29:72:35:D8:6E:E7:32:1F:37:F0:B5:A3:1F:2C:4D:9D:58:22:A7:F5
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019F93246E6064C20C74C0C8B4EA14CF4DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0C68
Signing time: Fri 24 Jul 2026 08:01:06 +0000
Manifest this update: Fri 24 Jul 2026 08:01:06 +0000
Manifest next update: Sat 25 Jul 2026 08:01:06 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: l3BVW2dvBsM2bsYg+Pq0VE+cdS9UaHVYxM5+AvBbPWM=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:6e:60:64:c2:0c:74:c0:c8:b4:ea:14:cf:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jul 24 08:01:06 2026 GMT
Not After : Jul 25 08:01:06 2026 GMT
Subject: CN=297235d86ee7321f37f0b5a31f2c4d9d5822a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:e4:c0:dd:6c:46:26:87:37:c8:81:4a:0f:
78:96:9f:f6:48:61:e6:67:52:a0:03:f8:ee:10:3a:
59:fb:45:25:56:28:b0:dd:dd:76:8f:ce:cd:6e:d4:
84:83:c0:9f:8f:34:d6:b5:1b:83:2a:df:2c:98:44:
c1:b9:65:88:38:5e:e3:71:c6:42:c1:55:e8:f8:bf:
88:e9:7c:aa:b5:3e:f3:d2:1d:fe:32:22:75:7a:9f:
61:08:ab:77:51:73:b2:9d:21:db:ac:95:1d:20:5d:
7f:57:65:b8:5b:88:f2:55:91:b2:5f:55:cb:e7:6e:
73:13:84:4d:f7:3b:2f:06:cf:b5:30:ce:1b:26:b6:
cc:93:d8:f1:7e:0a:73:ed:68:3b:5e:e7:09:58:6b:
05:b7:82:0e:72:fc:60:a1:96:59:ca:0d:44:14:82:
17:ce:b9:4c:83:68:ae:51:04:77:85:4d:ad:36:63:
9e:17:36:06:16:81:58:ac:0a:43:fb:6f:1a:ac:26:
97:cf:a3:ad:01:ff:00:11:d1:80:e8:9f:0b:52:f2:
2c:bc:e8:74:c9:3d:9d:73:20:b8:a6:d4:0e:71:91:
3c:45:1b:13:2f:66:63:3b:a9:df:23:91:af:a1:ee:
8a:63:7a:38:1c:ae:69:db:0f:c8:60:71:26:86:a3:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:35:D8:6E:E7:32:1F:37:F0:B5:A3:1F:2C:4D:9D:58:22:A7:F5
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:6e:8d:b7:fe:98:a9:7b:7a:06:7c:ca:b3:4f:cb:5b:87:
ee:76:a8:4e:87:00:9b:5f:e7:60:3f:94:53:88:05:20:38:fa:
c3:76:0b:92:c7:2e:e0:e6:d2:ce:fb:d0:d3:5e:bf:cf:bb:37:
2a:19:25:d1:bb:19:2d:36:67:cf:2f:bc:31:be:d4:7e:6d:da:
8b:48:77:da:8b:dd:6c:ec:2a:50:c0:77:80:5b:e2:6c:45:04:
d2:de:93:7c:5e:c7:f9:54:3d:49:a1:86:d9:6a:a6:d9:eb:64:
58:b7:22:60:86:6e:e0:8d:e8:80:8a:a4:e1:37:3b:c9:40:a6:
42:64:dd:e3:96:f3:95:fb:61:41:f3:00:23:4e:fd:47:25:b4:
76:1b:75:40:14:19:7b:f7:a3:a7:a8:e8:53:eb:ce:1c:fa:7b:
94:ac:6e:6d:e8:f3:3d:63:83:b0:34:60:92:61:a8:44:9d:3e:
7d:57:e4:f1:99:d2:26:2d:2e:b1:24:33:75:bc:5c:06:41:d4:
fb:ab:a2:86:18:5c:d3:4d:eb:d0:38:b4:4f:50:d3:71:80:ed:
09:fb:3b:7d:27:1f:3e:72:02:b7:b6:68:64:f5:19:83:b6:85:
f1:3a:91:ca:34:95:18:b1:06:b7:59:ee:3d:fa:46:ab:7a:e9:
b5:55:fc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJG5gZMIMdMDItOoUz037MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy
MTVhZTcwHhcNMjYwNzI0MDgwMTA2WhcNMjYwNzI1MDgwMTA2WjAzMTEwLwYDVQQD
EygyOTcyMzVkODZlZTczMjFmMzdmMGI1YTMxZjJjNGQ5ZDU4MjJhN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fHkwN1sRiaHN8iBSg94lp/2SGHm
Z1KgA/juEDpZ+0UlViiw3d12j87NbtSEg8CfjzTWtRuDKt8smETBuWWIOF7jccZC
wVXo+L+I6XyqtT7z0h3+MiJ1ep9hCKt3UXOynSHbrJUdIF1/V2W4W4jyVZGyX1XL
525zE4RN9zsvBs+1MM4bJrbMk9jxfgpz7Wg7XucJWGsFt4IOcvxgoZZZyg1EFIIX
zrlMg2iuUQR3hU2tNmOeFzYGFoFYrApD+28arCaXz6OtAf8AEdGA6J8LUvIsvOh0
yT2dcyC4ptQOcZE8RRsTL2ZjO6nfI5Gvoe6KY3o4HK5p2w/IYHEmhqNsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClyNdhu5zIfN/C1ox8sTZ1YIqf1MB8GA1UdIwQY
MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt
MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh
LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuhujbf+
mKl7egZ8yrNPy1uH7naoTocAm1/nYD+UU4gFIDj6w3YLkscu4ObSzvvQ016/z7s3
Khkl0bsZLTZnzy+8Mb7Ufm3ai0h32ovdbOwqUMB3gFvibEUE0t6TfF7H+VQ9SaGG
2Wqm2etkWLciYIZu4I3ogIqk4Tc7yUCmQmTd45bzlfthQfMAI079RyW0dht1QBQZ
e/ejp6joU+vOHPp7lKxubejzPWODsDRgkmGoRJ0+fVfk8ZnSJi0usSQzdbxcBkHU
+6uihhhc003r0Di0T1DTcYDtCfs7fScfPnICt7ZoZPUZg7aF8TqRyjSVGLEGt1nu
PfpGq3rptVX8Ew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:41 2026 by rpki-client