Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: eWrqPrgzBojLyf/FoYfQb5HX9kzKwxe+KpUsaBlvyOI=
Subject key identifier: 5F:DD:2B:BE:B4:34:24:A8:84:3C:20:99:A8:30:09:6B:C9:B9:57:55
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019E22495AA341D05BBA6D99ECE3FA263D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 17:01:33 +0000
Manifest this update: Wed 13 May 2026 17:01:33 +0000
Manifest next update: Thu 14 May 2026 17:01:33 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: f1DKu9Fzb/doECsdTAGeM/ljCR6mDDCa7dxzxZn/1oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:49:5a:a3:41:d0:5b:ba:6d:99:ec:e3:fa:26:3d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: May 13 17:01:33 2026 GMT
Not After : May 14 17:01:33 2026 GMT
Subject: CN=5fdd2bbeb43424a8843c2099a830096bc9b95755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:ed:12:8a:de:be:0e:66:45:19:21:b5:0d:
4f:1e:2a:05:e0:04:78:73:9a:fb:d4:1f:cd:ee:f2:
39:e7:89:ce:23:1b:75:9f:d7:2a:83:82:17:9d:fd:
74:d9:fa:23:10:60:e5:75:9b:b3:16:ba:66:23:37:
b7:87:d8:99:1b:47:c9:8d:06:e3:90:5d:84:38:0b:
fc:31:0b:58:2a:1d:06:e1:34:cc:fc:62:a8:82:4f:
1e:68:a0:a6:33:ec:4a:31:c5:19:9b:be:88:fd:a7:
32:62:21:0c:55:37:42:63:8b:91:81:18:53:df:99:
37:fa:7b:f9:b6:f9:8c:ac:16:95:2d:ec:e0:32:df:
7f:15:55:50:ad:7b:05:57:bb:07:b8:65:7b:f8:b1:
6a:fb:14:97:3e:3d:ae:33:c6:4c:34:f9:67:4c:1f:
63:e5:be:6c:73:11:42:e4:3e:3c:c6:1c:55:8d:38:
8a:00:54:ca:c0:65:8f:a9:6c:a0:14:1b:01:ba:40:
dc:4f:e7:98:a2:b5:cf:d8:a0:35:07:f5:33:25:62:
e9:43:29:e0:4b:2d:c4:6f:72:40:3e:94:3a:0d:d0:
83:d3:fc:4b:76:5d:67:c3:c0:9a:5c:30:1a:d9:de:
f1:30:6f:ae:e6:83:c4:4e:11:e8:f1:16:49:d7:95:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:2B:BE:B4:34:24:A8:84:3C:20:99:A8:30:09:6B:C9:B9:57:55
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:21:23:8a:f2:74:6f:28:93:6d:fd:22:b1:c1:3f:17:86:
6f:27:8c:64:62:0f:a1:c1:99:8d:8d:4d:23:15:2f:61:b7:d7:
01:1a:40:be:f0:28:c5:f5:1f:5f:27:f6:03:b7:09:e0:b5:08:
df:73:8f:d5:79:c3:b2:86:81:6c:15:42:01:9a:15:e3:3e:0c:
c2:14:b4:29:89:00:02:c6:6d:1b:a4:c2:97:46:81:cb:32:79:
d6:fb:39:b7:49:a9:5f:45:22:f1:89:58:d7:1e:9a:91:b0:c6:
94:c4:78:37:10:4d:23:a1:04:90:ab:f2:78:d7:fb:f3:46:23:
38:17:81:96:67:60:eb:30:81:c0:d6:2b:54:ec:22:c8:b5:7c:
01:61:a2:de:ea:d9:41:b9:8c:ae:9f:2e:ae:e9:07:36:17:e3:
b9:60:fc:6c:cd:73:af:a8:14:ff:ef:79:35:22:1a:09:78:7f:
e6:1b:31:09:ff:e7:76:65:52:25:de:bf:3e:cd:b4:ba:2d:02:
81:5c:77:36:b7:93:70:0a:62:de:80:57:8c:77:b4:61:00:69:
fa:d0:ff:50:07:6b:77:f5:91:0b:58:e9:b4:7f:fa:71:b9:dc:
50:53:c2:14:2c:46:1e:20:06:22:07:87:9d:37:3c:f2:97:de:
34:94:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:52 2026 by rpki-client