Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File: M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier: TwpBZDiTZpR6CLppb796n9GXgsme9KI7yD5Th+y1ZEg=
Subject key identifier: 90:DF:72:8A:DA:26:EA:CB:8C:5C:C1:6D:B6:A0:E1:23:68:CA:73:5A
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer: /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial: 019CA9B3C4BF0D40B8A34CBEC5B07A6F67D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 14:00:56 +0000
Manifest this update: Sun 01 Mar 2026 14:00:56 +0000
Manifest next update: Mon 02 Mar 2026 14:00:56 +0000
Files and hashes: 1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: oLbVvhX1K6HvSWk0EkGhHCvW3UYtbTUugg+qrSitbo0=)
2: sbdmVuFID9uQRYJtZJ4fWH3G57k.roa (hash: 9b8Tb0KDChimmsKiC/A+gQbmV4xXpq9nJ9Cvm1zmBBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c4:bf:0d:40:b8:a3:4c:be:c5:b0:7a:6f:67:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Validity
Not Before: Mar 1 14:00:56 2026 GMT
Not After : Mar 2 14:00:56 2026 GMT
Subject: CN=90df728ada26eacb8c5cc16db6a0e12368ca735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:ab:a7:fe:89:a6:60:bd:f4:52:e2:fb:fd:
af:34:9d:da:9f:79:3a:a9:16:93:9e:e7:57:10:c4:
79:a7:c0:4f:3d:f7:be:7a:33:93:e1:1d:51:ab:cd:
04:4f:5a:13:63:50:17:cf:be:99:78:1d:50:03:83:
5e:68:fa:eb:e2:fe:2c:cb:da:b3:68:d9:9c:f3:22:
b8:3f:ac:a4:68:cc:b6:4f:96:3d:94:21:e5:c2:2a:
dc:d2:ea:ea:7e:36:d5:07:e0:c5:88:d6:ed:90:6d:
63:09:ac:a7:d3:cb:cc:a7:96:25:20:07:a1:4e:fd:
37:c6:0c:af:73:83:4c:79:40:67:f6:4a:46:70:c4:
74:ca:2f:1f:4b:6f:df:3c:b4:54:b7:03:b7:fe:30:
52:61:e7:c3:aa:99:3d:7b:59:67:c4:a4:ba:38:e0:
02:6b:e1:11:94:52:7a:ad:53:0c:f9:79:50:06:64:
a0:c9:53:ce:33:c3:da:bd:fa:cd:1e:93:8a:18:3c:
92:4c:c8:d0:5b:e5:c2:ce:35:97:db:b7:f0:83:2c:
d5:94:97:6a:f0:b5:3e:07:d4:d9:f1:9d:40:3e:91:
c4:ca:bd:c7:18:aa:70:81:4e:bc:2b:b9:5e:75:99:
11:00:74:62:0c:9d:ee:f5:d7:86:bf:da:75:cd:cb:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:72:8A:DA:26:EA:CB:8C:5C:C1:6D:B6:A0:E1:23:68:CA:73:5A
X509v3 Authority Key Identifier:
keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:8a:70:77:ae:69:27:e9:7e:9e:58:5a:81:40:3d:93:0c:
cc:61:df:65:74:ab:14:85:27:cf:59:37:96:70:c6:65:7f:55:
9b:25:fe:0a:e3:89:ad:ad:fb:b7:a8:de:f4:06:58:b4:83:ba:
8c:e5:01:a5:e2:9b:96:cd:9b:15:9c:e0:6d:88:8a:31:06:4b:
db:f7:53:1a:16:73:26:61:7c:30:ce:05:9a:fe:eb:b6:68:4f:
83:d7:9e:c5:a5:ac:f1:92:d4:65:14:fc:44:8d:5c:7b:b4:76:
10:7d:3f:25:41:10:34:8b:d9:b8:05:94:3b:bf:75:54:c3:50:
20:54:aa:7b:f4:2c:27:1e:40:7b:42:b8:8d:c9:18:13:d3:e9:
88:10:5b:75:cf:f3:1b:57:31:d9:5b:04:85:c4:a2:a7:ab:ca:
f6:4d:82:ed:6b:e4:a7:a2:f7:2f:ca:44:d9:52:95:b4:7e:13:
2c:0f:b8:61:32:2d:2f:e6:8e:18:7a:9f:e9:df:bf:4b:f6:36:
f9:13:7f:99:2d:6f:7a:e7:72:51:31:dd:06:d3:08:e1:62:dd:
6b:e9:64:e8:30:d0:83:35:08:2b:09:4e:77:5f:c0:45:a7:b6:
e2:b5:93:4f:7e:2e:d5:49:cf:d0:cf:fc:45:06:0b:b4:d1:a5:
57:30:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:55 2026 by rpki-client