Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: jGsFIjFqu0WiBHhivPWyjUK1qKuLdYdB0XxCbmq/L/k=
Subject key identifier: F0:9B:E8:FE:15:D0:72:F7:4A:C3:A4:46:FA:D6:3A:5B:22:E4:0B:22
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019F94DB55C3C5FE8A62E48A0E4910259B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1541
Signing time: Fri 24 Jul 2026 16:00:30 +0000
Manifest this update: Fri 24 Jul 2026 16:00:30 +0000
Manifest next update: Sat 25 Jul 2026 16:00:30 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: HwGHvU8rlNm33NXUYmZwreK6CDEmZ/W1vak/B/n35KQ=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:55:c3:c5:fe:8a:62:e4:8a:0e:49:10:25:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Jul 24 16:00:30 2026 GMT
Not After : Jul 25 16:00:30 2026 GMT
Subject: CN=f09be8fe15d072f74ac3a446fad63a5b22e40b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:33:14:3d:8a:74:d7:8e:12:43:ce:a6:07:
dc:41:e7:7f:ba:81:dd:0b:1b:d3:e8:88:92:04:63:
c5:bc:c3:a0:53:ce:b8:0a:34:3e:84:9c:af:7b:a6:
e0:f9:4d:67:cb:e3:6b:e5:f0:ee:a7:54:d1:7a:8a:
b2:d0:8f:6d:ec:a3:70:a1:3c:1d:1f:af:54:b2:99:
22:ce:21:c5:7b:db:f7:97:35:b1:19:e9:64:98:ea:
2b:25:c0:d5:f6:af:35:ef:81:ab:65:da:2b:4b:8c:
a9:05:f1:0c:df:c4:96:63:12:86:55:57:25:3a:63:
36:a6:06:8d:f8:71:73:ad:e7:9c:94:9a:0f:53:9d:
02:26:62:04:6b:2f:8e:8c:e0:23:07:9b:28:6f:c1:
00:ed:d0:5f:f8:9f:5e:c6:88:d7:96:84:47:76:99:
f2:9d:01:e2:a6:48:51:fa:01:8d:d0:f5:93:83:bc:
c2:eb:17:3d:a8:a1:86:65:2b:1d:37:61:47:ac:77:
a1:ef:83:8d:c3:d8:7f:3d:cd:59:82:37:08:6a:36:
61:c8:2d:52:a3:06:cf:c7:b4:93:cc:68:8f:ed:fa:
ec:0a:b7:51:66:e8:f8:4a:e5:d9:bf:e1:02:2c:69:
1e:2a:c2:51:87:30:9c:c6:7a:f5:59:b0:39:b6:cd:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:E8:FE:15:D0:72:F7:4A:C3:A4:46:FA:D6:3A:5B:22:E4:0B:22
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b4:ca:1a:9e:02:1c:01:aa:62:99:24:15:0f:e7:04:e0:5e:
14:4d:ce:5a:0d:7e:5c:4d:97:1b:76:0c:df:5c:23:15:3d:bf:
e9:84:51:51:51:2e:9c:1c:77:bd:9c:43:3b:77:cf:b9:fc:29:
28:9f:95:77:f6:82:7b:55:12:e7:dc:cb:59:e3:78:a5:66:6f:
35:51:52:6b:55:93:c1:75:10:e6:d3:ca:4f:0c:2f:85:24:78:
c7:62:cf:2e:45:89:d6:de:e4:e8:78:47:e7:d9:f3:9e:97:8c:
30:e7:4c:d2:6b:e9:e1:ef:8e:cc:49:0a:30:f8:5b:88:c2:91:
90:46:4f:68:a6:de:0a:1f:f9:ab:c9:52:26:f1:e4:0d:93:83:
b6:ea:13:6f:17:a7:bb:ac:1e:79:8c:bc:a0:ce:98:c2:b5:80:
4e:1b:2e:76:27:c0:57:59:da:9d:ca:92:87:76:68:b7:4a:e9:
a8:70:9a:6c:75:f4:e8:ff:1a:58:97:5b:db:1b:58:01:47:28:
db:12:c7:ee:1b:db:06:21:37:b1:96:8b:a4:92:a0:db:70:05:
3d:e9:28:00:64:7e:b6:cb:8c:8f:8b:88:34:54:20:3f:4a:8d:
b6:a1:4e:9f:97:93:3d:06:93:2d:ca:9a:54:c0:68:8b:46:2e:
5b:13:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:22 2026 by rpki-client