Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: J6IgnASPSBFn5Ops3BWp3TCCXmoOYpKIIuA2OtOWOak=
Subject key identifier: 8B:8F:15:37:CD:7E:4E:AD:DF:E3:4E:6D:2F:83:29:D0:94:68:7D:C2
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019E1E6C05E7FF73D7F294817BF234E9DEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0BA7
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: s10X6XzP7WISWMlAZVfYFytgdMNEA05ECrpoMt4nof4=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:05:e7:ff:73:d7:f2:94:81:7b:f2:34:e9:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=8b8f1537cd7e4eaddfe34e6d2f8329d094687dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:04:29:a3:c4:43:f8:53:b9:92:b8:23:c7:
c4:f4:43:18:eb:2f:8f:56:32:e8:2f:49:1f:77:82:
f9:e9:4b:19:f5:40:73:32:86:7c:09:9a:10:4a:be:
9a:43:e9:97:1a:41:82:fd:f7:86:54:e6:84:94:43:
74:05:ab:1f:de:e3:fc:0f:bd:f8:fa:9c:d0:cf:c8:
b7:e5:c7:68:e6:2b:5a:ba:ca:f7:34:f3:70:41:b7:
9a:85:1d:e2:0b:11:97:a0:86:ca:1e:aa:c3:2d:72:
03:b9:9c:1a:83:58:21:a3:a2:a8:03:63:a5:51:45:
33:04:c1:7d:57:87:63:99:f5:a6:f5:8f:2f:ff:e7:
b9:f7:9b:8c:a5:38:94:07:3c:3a:2c:d8:7c:80:64:
d6:36:f1:e5:c1:db:f1:f9:3e:80:dd:93:f1:ba:5e:
30:c1:05:e0:39:f7:35:ac:88:26:5e:27:40:25:2b:
3a:b5:e7:ba:f5:35:14:22:ad:aa:54:9b:d6:bc:33:
f5:37:3d:f8:8e:cd:52:2a:4b:e9:da:37:dc:96:11:
98:a0:07:47:18:fc:1c:14:57:46:ed:32:4d:a3:e2:
0c:e1:8e:60:3e:f5:82:ef:b5:d9:6f:db:62:e1:93:
5f:a4:c4:2d:ca:92:27:fc:05:05:e5:03:1a:3a:c2:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:15:37:CD:7E:4E:AD:DF:E3:4E:6D:2F:83:29:D0:94:68:7D:C2
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:94:75:74:e0:36:39:67:8f:39:f2:ee:6f:e0:ac:88:20:6d:
70:56:c9:1b:35:c4:23:9c:8c:1e:a6:67:0a:f3:a2:97:e6:f4:
ff:bd:8a:2e:ef:e3:94:70:cd:a8:fb:cd:22:f5:ab:83:80:27:
42:ce:9e:76:1a:9e:4b:14:7d:9e:69:82:24:20:74:14:96:1e:
6b:b0:f9:5e:d6:3c:c1:e1:77:d0:88:e3:b1:80:61:d3:01:d7:
79:09:e2:61:f4:4a:18:ef:79:0b:29:55:98:02:56:66:b4:61:
1e:c0:43:73:04:9b:71:ad:5c:f4:b7:78:67:f7:bf:eb:f9:d4:
e0:49:ea:54:30:87:50:f4:ec:25:be:7e:d3:08:a4:30:51:86:
c3:d4:cf:78:af:e3:67:11:e0:d4:b2:05:36:fa:e7:2f:bf:65:
83:5b:4f:47:04:09:33:5e:d2:9c:aa:6e:56:8e:f4:ed:e7:7d:
1c:b4:01:94:ad:8a:b8:d4:16:9a:6a:63:66:23:41:44:30:7d:
cc:41:cf:79:b7:09:ca:13:5b:f6:2f:85:25:60:29:9f:9f:6e:
83:9d:27:74:54:7d:d6:41:7d:f4:b1:ee:72:ed:9a:2b:9d:5d:
b3:dd:20:ef:45:8b:d5:49:e8:1f:bb:72:c1:04:be:a1:6a:28:
91:5e:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:06 2026 by rpki-client