Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier: Gmsc6q4rUW+NkCKHNJeKUdxg+2UJY57o5lZc/ZuuwL4=
Subject key identifier: FE:02:34:AB:4B:78:19:BC:9A:32:B1:11:F3:2F:C9:C0:E5:B5:3B:7D
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 019CAC46BC52A39216658227801A40908828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: PP8v4ZF9LqDHcTW_KE_ttdsGemE.roa (hash: WpVmL0psb7bfXQaqzyLO36WcvKirINpjSx0F9NsCq+M=)
2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: FCfqedXHa1n8xU9fX/inYG3djHJOEUANKWaVeisIaNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bc:52:a3:92:16:65:82:27:80:1a:40:90:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=fe0234ab4b7819bc9a32b111f32fc9c0e5b53b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:49:34:5f:6b:7a:22:ef:44:22:a2:0b:15:
4b:c9:f8:2c:0f:4d:cf:40:f0:e6:1d:b6:ff:36:36:
b5:7c:93:d9:47:74:39:b3:67:9c:8c:85:dc:cc:1e:
6b:4e:55:32:55:38:8e:6a:c6:47:6d:75:f6:9c:5a:
95:35:f5:a8:4a:a2:70:d9:73:d9:86:65:d6:e1:45:
50:bc:d5:d5:3c:2b:d8:de:b0:65:13:79:9d:a7:ac:
1d:6c:a5:85:ea:6f:54:b5:b3:75:75:b1:a1:e1:12:
cb:7c:e0:c1:3d:4f:1b:7b:be:3a:3c:e3:37:67:14:
0e:b3:cf:7c:c1:0b:69:14:37:ae:58:02:09:0b:0a:
d9:1a:65:e0:60:3f:eb:8f:61:46:cd:d2:54:3b:8f:
9b:40:f2:07:bb:58:59:62:2c:6a:fa:23:f7:83:71:
a6:9e:c7:9b:a0:80:78:4d:71:69:e0:4d:7c:d2:bb:
eb:f3:c4:52:6e:e2:a2:81:e0:7c:f9:ec:16:37:69:
2b:2f:26:39:d6:64:12:74:a1:3b:aa:b8:94:da:12:
5b:a7:bb:cc:c8:38:7f:62:de:6e:e9:11:64:28:15:
03:14:3a:df:4f:a1:d3:f2:95:fa:60:30:a8:cb:dd:
b6:d0:20:10:47:e8:90:24:84:d4:fa:47:a0:e5:9f:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:02:34:AB:4B:78:19:BC:9A:32:B1:11:F3:2F:C9:C0:E5:B5:3B:7D
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cf:a8:1e:3e:67:ab:03:c9:03:27:67:d3:cb:cb:cb:ba:83:
11:ce:91:30:cc:78:6d:f2:76:cf:70:81:2c:74:d6:39:1a:38:
8c:07:a0:86:2d:e3:c0:47:73:27:8f:9c:fa:8e:00:a2:ac:83:
86:c6:8d:01:2c:f6:95:d4:13:88:b0:84:c7:53:c6:ba:27:9c:
6a:b0:f9:73:e8:53:3d:51:ff:91:6b:88:51:77:61:ba:cb:ba:
12:1a:a9:e8:15:47:41:31:46:9c:ac:82:01:79:51:56:a7:ca:
7f:76:93:77:32:da:c5:fe:e5:e9:d6:0e:5b:d9:5c:65:29:e3:
4e:d2:6e:f9:c7:7b:8f:83:7a:e2:36:b0:00:88:ec:47:61:59:
30:fb:5e:5e:57:69:dc:79:ba:9e:a5:1d:a8:6a:c0:c8:57:8d:
e6:7c:4b:15:58:85:39:73:69:57:77:c0:cd:31:f4:1c:f2:c6:
26:1d:ad:1a:c8:26:cf:48:f2:d4:2d:a7:93:8f:47:08:cd:1e:
75:f2:1c:82:aa:2c:ad:0e:93:4f:61:98:ee:5a:7d:ed:49:f5:
42:e7:59:1c:b1:54:ed:ff:63:6d:b9:cb:fc:44:37:3b:ff:4d:
70:16:c8:cc:c0:f7:41:2f:e7:da:a8:21:2e:ff:d0:db:8b:e4:
14:7e:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:11 2026 by rpki-client