Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: g1jCU6YteGJlHuTGZi7D1XNUGnnA6d8UOfGM1iDPF48=
Subject key identifier: 8D:7A:7E:D5:B8:A0:1A:01:D6:73:C6:9E:C1:94:C8:84:BA:83:D0:CB
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019CA8D7BEE7BB4993EFB0A8499686170EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 1049
Signing time: Sun 01 Mar 2026 10:00:37 +0000
Manifest this update: Sun 01 Mar 2026 10:00:37 +0000
Manifest next update: Mon 02 Mar 2026 10:00:37 +0000
Files and hashes: 1: 0l3jXxOUk3ox5jeThu6HwEBTnYM.roa (hash: ezdpUMz8+l2SPN4UZ7KF4uUE3cAvIShKrnmcjhRrPT8=)
2: 2bvqhGwQ0lPcBuBDG9_LfRJJmS0.roa (hash: CH2b5UD+d3clq2chE/+n6piPoX52uVJBt2iOc7QC1hY=)
3: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: 8l3pkNWh2fIA/cWYZvGQ5zHnTHo2Mkp0IBOwiHfNuHI=)
4: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:be:e7:bb:49:93:ef:b0:a8:49:96:86:17:0e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Mar 1 10:00:37 2026 GMT
Not After : Mar 2 10:00:37 2026 GMT
Subject: CN=8d7a7ed5b8a01a01d673c69ec194c884ba83d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:2e:53:b6:c5:c2:63:0f:6b:31:b5:cc:d2:
3e:ce:45:83:dc:47:3f:e4:27:2b:7c:ff:a2:fd:ee:
d1:0a:85:b3:20:af:c4:45:7b:2b:c0:dc:fc:a7:22:
24:d6:b5:a9:75:91:70:9d:ff:5c:20:bc:92:cc:7f:
9e:42:34:da:44:03:86:72:a3:ad:62:8e:bd:81:3e:
70:4e:f0:eb:a4:9b:35:3f:02:ba:bd:5a:d1:5f:5f:
77:bf:02:59:70:cf:15:58:7b:93:a9:94:db:66:be:
59:dd:1e:d6:20:1e:5a:2d:8c:2b:99:01:be:4b:09:
2e:04:d7:1c:2f:b8:fb:4a:f9:ce:c4:1c:aa:5d:f0:
3c:02:3c:87:89:37:38:c1:b2:3b:ee:71:a2:a3:d6:
c3:e8:a1:5b:67:6e:d2:09:dc:a6:08:4b:a3:d2:1c:
2b:54:1f:ca:ba:7b:00:7e:85:1e:4b:56:f1:8d:2e:
76:bd:27:73:6e:29:0e:66:e0:ca:21:43:38:95:18:
88:96:84:e2:31:c9:25:ae:87:ed:d8:60:08:b7:27:
c4:1b:83:09:72:66:d7:31:5a:b6:ea:b1:85:6b:11:
70:14:1a:27:23:28:f7:d6:81:c5:4d:b8:31:f6:d4:
73:45:e5:ca:5b:c3:78:43:d5:0a:50:36:cd:0d:8b:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:7E:D5:B8:A0:1A:01:D6:73:C6:9E:C1:94:C8:84:BA:83:D0:CB
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:ef:ca:82:98:96:7c:d6:07:ce:39:0d:af:f7:5f:6a:8a:
91:e9:90:84:5b:f7:55:2f:00:68:26:e2:1c:5a:15:c9:06:87:
88:cd:4e:73:53:62:2a:28:6c:a5:3b:5f:bf:ef:a0:b7:a7:ee:
82:e9:9e:cb:5d:dc:42:55:29:5d:5c:1b:d4:37:ff:fb:ad:5a:
4e:75:4b:04:92:48:79:8a:90:28:d7:06:ab:de:b7:74:fd:92:
40:38:48:20:dc:aa:44:14:73:1d:81:a7:30:84:49:5d:33:c6:
2c:79:df:0c:d9:89:b3:15:b7:be:15:34:71:c3:cb:3b:c4:f1:
8b:87:10:f1:fd:5b:16:23:0b:dd:e6:d5:f1:d5:ea:e0:fc:d2:
f8:22:e8:21:b4:bc:ad:8c:3e:ea:a7:74:f1:3e:49:eb:3c:8f:
14:4a:9e:93:5f:9d:80:3a:b2:05:2a:6d:36:cd:4c:5a:b4:85:
53:46:7a:e1:48:7f:48:f1:ae:44:bd:0e:9a:e1:42:3d:4d:5d:
cf:b6:92:4a:a7:1e:26:b9:1c:5b:bc:24:0b:ff:89:bb:a2:24:
9f:0c:cc:de:ab:36:40:01:55:bc:7b:3c:ed:cc:d5:29:63:93:
77:0d:40:8c:6a:6c:fe:e3:32:5d:bb:48:3d:d3:09:71:9b:44:
c6:bf:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:04 2026 by rpki-client