Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: 4JCShDoMu6m9fi4lJ6n8cIyglzmBQi5YzLykgTw06rE=
Subject key identifier: 4F:F2:D5:F7:5E:53:85:FA:BF:05:35:8D:DA:4C:12:38:12:93:7A:A0
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019CAD22E70FC18C4116CE8E02FF9745E9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0945
Signing time: Mon 02 Mar 2026 06:01:11 +0000
Manifest this update: Mon 02 Mar 2026 06:01:11 +0000
Manifest next update: Tue 03 Mar 2026 06:01:11 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: tcf4QfWcRuQSYCSrzFuhTkjkiF1addSlL4lbJ3esc5A=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e7:0f:c1:8c:41:16:ce:8e:02:ff:97:45:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Mar 2 06:01:11 2026 GMT
Not After : Mar 3 06:01:11 2026 GMT
Subject: CN=4ff2d5f75e5385fabf05358dda4c123812937aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:47:31:d9:20:27:8f:65:44:99:49:7b:81:
6d:e2:43:5a:7d:e3:48:43:80:6e:c6:9a:29:14:23:
04:8f:84:69:4c:75:68:13:01:43:6f:78:55:f5:fe:
a9:ad:13:0d:a1:e5:39:12:4d:ba:f3:0e:63:0e:fa:
2b:a3:33:ce:f0:c5:2a:cf:f1:7a:4e:0f:b4:bd:d7:
de:3d:00:0d:81:49:46:0c:98:8b:ff:12:da:9d:22:
19:53:bb:ed:c1:8e:0a:28:5a:82:f8:44:e8:1d:82:
8e:c9:ee:d0:6d:b3:05:c0:27:dc:cb:ea:88:4c:8e:
c0:0f:7f:8c:92:8f:c2:b5:3c:b7:29:e5:1a:d4:8b:
70:83:ec:e7:cf:a6:30:9d:0c:62:9f:5f:42:76:8b:
23:45:8e:d7:ec:a6:64:06:9b:60:3a:d6:b1:24:55:
52:9d:37:d0:c1:02:78:a1:41:0c:86:39:8b:a3:0b:
dc:90:a4:b0:8b:29:c7:51:24:f1:03:84:34:9b:47:
ba:37:8e:2f:7b:fe:2d:cc:6d:54:d0:20:b2:a7:cb:
ef:66:1c:8d:5c:cf:0e:d3:5c:be:66:44:7e:1b:a5:
ab:cf:b7:a6:bc:34:70:4c:21:6e:b9:de:96:d6:32:
aa:30:50:bd:b1:e4:ce:c6:26:ab:31:22:44:f5:4b:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:D5:F7:5E:53:85:FA:BF:05:35:8D:DA:4C:12:38:12:93:7A:A0
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:5e:5c:47:21:96:2e:30:ec:57:2d:eb:ae:55:b6:34:17:
a3:eb:f7:5c:95:bd:eb:1b:72:55:45:f3:90:16:90:45:81:40:
29:8f:fe:7e:df:d7:60:82:e2:84:c4:3b:9c:46:fc:aa:5f:1d:
59:66:a4:a7:8f:8c:17:46:8f:a5:b4:72:d6:7f:34:b8:47:91:
7e:1b:63:e5:61:e7:47:df:00:da:ae:b5:38:ca:2e:12:d0:0d:
8c:37:f8:89:2e:78:c8:5b:f0:1d:a0:7c:ce:f9:70:fb:77:08:
10:a3:25:29:a0:4e:2f:76:88:7a:96:e9:6c:fb:01:d5:b7:fa:
37:7f:89:3f:c2:93:79:c6:c2:5e:9b:2e:82:bd:6f:ff:cc:c7:
49:be:2b:29:e9:46:c7:24:6a:62:0e:1e:10:24:53:6a:9f:32:
86:92:18:cd:bf:55:33:23:3b:72:fe:d0:cc:8f:8e:5e:1f:a4:
2a:84:36:d8:5d:38:2c:cf:d1:e8:64:0e:de:82:62:a4:1b:a0:
71:4e:d3:84:11:0c:15:b7:cc:94:48:b8:72:75:46:4b:65:ae:
d9:f5:b2:2e:40:f3:6b:b3:8f:4c:6f:cf:41:ab:e3:64:7e:bb:
3a:cf:3f:42:a9:1a:8c:d2:ff:77:dc:3d:38:fd:3c:d2:ff:d0:
8a:65:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:02 2026 by rpki-client