Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: eE5h5PqEOghNCA9WvLS5/4q3YgPtFdO2UHu64bkQ/DI=
Subject key identifier: EE:59:72:99:8A:6F:3F:CF:D9:07:08:6F:64:C7:DB:AC:5B:3E:EE:04
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01A0D796438EEC171620DEFC06BAFE0EABB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0D10
Signing time: Fri 25 Sep 2026 08:02:24 +0000
Manifest this update: Fri 25 Sep 2026 08:02:24 +0000
Manifest next update: Sat 26 Sep 2026 08:02:24 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: /Ts5C5zRn2xzb4l3uhsDHca+OUnsvBMOpQ5BZZ89+Do=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:43:8e:ec:17:16:20:de:fc:06:ba:fe:0e:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Sep 25 08:02:24 2026 GMT
Not After : Sep 26 08:02:24 2026 GMT
Subject: CN=ee5972998a6f3fcfd907086f64c7dbac5b3eee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:ae:31:98:8b:98:aa:66:e8:af:ff:1c:e1:
14:ab:16:e4:e4:b5:60:ff:4d:1e:05:de:27:d6:c6:
32:b1:1d:45:4f:0c:83:14:93:90:c9:77:8f:0d:8f:
38:a3:6a:d6:30:08:33:c7:5c:0b:d6:d6:3c:88:71:
39:fe:e5:f6:37:50:06:c4:a6:07:13:51:21:af:13:
09:f7:ff:8a:18:9e:ea:32:2f:e1:fb:51:9f:e3:4b:
06:f0:18:7e:a8:79:44:a1:0e:a0:c6:45:51:23:39:
eb:4e:06:e6:5e:d3:3e:26:80:66:96:89:78:58:a0:
23:97:6c:f3:e7:d1:76:95:ad:83:1c:83:40:db:0f:
3d:74:5e:f3:95:6a:be:f2:62:fd:8a:e3:6c:55:81:
9f:bb:fb:f7:da:f0:7a:1e:11:31:39:98:75:36:1b:
66:f2:ad:2c:84:f0:4f:44:1d:fe:a6:f0:f8:d9:4a:
73:6e:d0:ff:fc:74:3d:4a:f4:03:44:95:34:52:42:
69:ab:0c:b6:3e:9f:e0:b2:b2:2d:1d:4d:a9:b9:c8:
be:b6:4d:3f:9a:5e:75:94:f2:53:2a:61:af:3a:8c:
69:70:9b:b9:95:29:7a:1e:06:37:89:e8:d0:f8:04:
a5:0a:80:53:65:ef:12:02:7b:a9:0c:02:26:6f:64:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:72:99:8A:6F:3F:CF:D9:07:08:6F:64:C7:DB:AC:5B:3E:EE:04
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:27:8d:8c:70:da:44:e6:e9:0a:cd:b0:f5:ed:7c:dc:34:59:
f1:98:65:4a:3a:a9:51:bd:19:a6:b5:b5:ed:2f:e7:ab:b4:9d:
7b:51:42:e8:c4:bb:f1:dc:b9:70:30:95:62:37:83:82:3a:ca:
73:1d:4d:ce:32:d2:ae:7e:22:8a:02:08:f1:c3:c5:e1:0a:24:
c5:05:8a:c7:5b:37:f6:d7:2e:63:b6:ea:6c:6c:12:2a:d9:55:
a9:18:86:d2:51:16:b2:b5:3c:ca:b3:b1:36:fb:84:9a:78:0f:
8d:b9:8f:09:00:97:ac:a1:77:1b:c6:86:47:22:f0:07:72:29:
d1:74:fe:39:bb:5d:e4:d6:00:83:30:72:a2:d0:18:76:0e:2e:
71:23:4e:d8:0f:6f:c3:c6:76:a2:2d:60:16:7a:fb:98:91:0c:
de:d7:7d:e6:b7:11:08:86:5c:4a:5a:8f:50:ac:b9:fd:6e:6b:
47:50:1b:b0:7c:47:a0:ae:59:ca:41:b9:b2:39:54:a6:04:43:
d1:2c:6b:fa:46:6a:c2:4b:3f:4a:71:54:69:3a:d0:73:e9:5c:
62:05:c3:e1:b3:3d:3c:a3:18:a4:47:20:34:39:75:ab:54:65:
9b:f2:a9:6f:23:77:55:5d:68:cf:48:af:99:5d:07:c4:77:7f:
a2:00:05:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXlkOO7BcWIN78Brr+Dqu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjFiMzEzOTYwODNjZTllZDUxZTQ2Mjg5OGUyOTRlZDgy
MTVhZTcwHhcNMjYwOTI1MDgwMjI0WhcNMjYwOTI2MDgwMjI0WjAzMTEwLwYDVQQD
EyhlZTU5NzI5OThhNmYzZmNmZDkwNzA4NmY2NGM3ZGJhYzViM2VlZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo+uMZiLmKpm6K//HOEUqxbk5LVg
/00eBd4n1sYysR1FTwyDFJOQyXePDY84o2rWMAgzx1wL1tY8iHE5/uX2N1AGxKYH
E1EhrxMJ9/+KGJ7qMi/h+1Gf40sG8Bh+qHlEoQ6gxkVRIznrTgbmXtM+JoBmlol4
WKAjl2zz59F2la2DHINA2w89dF7zlWq+8mL9iuNsVYGfu/v32vB6HhExOZh1Nhtm
8q0shPBPRB3+pvD42UpzbtD//HQ9SvQDRJU0UkJpqwy2Pp/gsrItHU2puci+tk0/
ml51lPJTKmGvOoxpcJu5lSl6HgY3iejQ+ASlCoBTZe8SAnupDAImb2RChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5ZcpmKbz/P2QcIb2TH26xbPu4EMB8GA1UdIwQY
MBaAFDOxsxOWCDzp7VHkYomOKU7YIVrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAt
MzNlNjFiZDkxMmVhLzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xY2MxZmEtMjhkZC00NGQ0LTk4YTAtMzNlNjFiZDkxMmVh
LzEvTTdHekU1WUlQT250VWVSaWlZNHBUdGdoV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSeNjHDa
RObpCs2w9e183DRZ8ZhlSjqpUb0ZprW17S/nq7Sde1FC6MS78dy5cDCVYjeDgjrK
cx1NzjLSrn4iigII8cPF4QokxQWKx1s39tcuY7bqbGwSKtlVqRiG0lEWsrU8yrOx
NvuEmngPjbmPCQCXrKF3G8aGRyLwB3Ip0XT+Obtd5NYAgzByotAYdg4ucSNO2A9v
w8Z2oi1gFnr7mJEM3td95rcRCIZcSlqPUKy5/W5rR1AbsHxHoK5ZykG5sjlUpgRD
0Sxr+kZqwks/SnFUaTrQc+lcYgXD4bM9PKMYpEcgNDl1q1Rlm/KpbyN3VV1oz0iv
mV0HxHd/ogAFVQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:50:46 2026 by rpki-client