Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: px9ta0EBJLSsru4/cfr81niD3eH/EDBxUon+VqsiqSo=
Subject key identifier: 9D:22:71:4C:A2:03:9F:5B:95:33:B9:A0:5F:BC:F5:68:B3:9B:95:E5
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019CAC472CBCE53AEA2CC49176523985366C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 02:01:11 +0000
Manifest this update: Mon 02 Mar 2026 02:01:11 +0000
Manifest next update: Tue 03 Mar 2026 02:01:11 +0000
Files and hashes: 1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: LlkA6FKiOq6C/VmDQYtv4LOzRWvvdpDZUKZdzUpLcR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2c:bc:e5:3a:ea:2c:c4:91:76:52:39:85:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Mar 2 02:01:11 2026 GMT
Not After : Mar 3 02:01:11 2026 GMT
Subject: CN=9d22714ca2039f5b9533b9a05fbcf568b39b95e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:d4:03:1f:73:2d:68:78:f0:e7:14:b0:a0:
59:0e:be:55:23:cd:b9:72:bf:19:85:90:2c:68:84:
56:90:ea:07:7e:30:12:9a:ef:09:7f:60:c0:a1:9a:
55:27:87:1e:5c:9e:97:84:88:52:de:f7:96:af:2c:
8c:80:71:02:77:fa:9a:b5:f7:0a:2a:36:da:9e:e4:
ec:1e:b2:05:89:26:67:3b:56:d9:ff:41:3a:8b:65:
f1:4b:7a:8c:3b:20:ca:67:5f:6c:5b:5c:ec:dd:a8:
fa:8e:c8:6d:2b:5b:45:41:1b:a0:6a:75:74:70:2d:
0d:69:6a:a0:e7:45:1b:bb:94:00:54:af:0f:c1:b9:
25:24:fc:f1:da:7b:60:5c:d0:34:54:0a:ca:8c:4d:
8a:a5:97:8b:9c:21:b4:65:ab:e4:af:81:56:46:b1:
c5:43:4b:32:6c:20:de:9d:d4:17:8c:11:bd:8b:1d:
19:75:07:e9:be:7b:42:66:94:ef:a7:ad:25:98:0c:
8c:45:6b:0a:3f:c9:e0:75:98:dc:2e:59:5b:2e:c6:
40:1d:f6:41:55:fd:c7:2b:34:24:bd:b9:d2:7c:45:
39:a9:e9:ff:60:c3:89:3f:b3:b3:13:e6:15:4e:38:
6c:a2:f2:3f:8a:58:d7:81:35:77:2e:c0:41:f6:6c:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:71:4C:A2:03:9F:5B:95:33:B9:A0:5F:BC:F5:68:B3:9B:95:E5
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:24:4d:02:a4:10:92:d5:9a:48:cf:be:86:51:98:d0:86:68:
3e:90:62:f6:a4:97:1c:5d:24:07:0a:48:f3:7d:58:ab:01:e1:
c3:e0:d3:87:4c:19:ee:2c:16:6a:f3:2d:81:4a:d5:bd:9f:db:
58:89:0b:e8:9e:0f:61:2b:4d:e4:54:37:c7:29:9a:d6:f8:8c:
3f:c3:4c:be:43:da:22:bb:df:7c:f9:f1:72:ce:69:c0:53:a2:
8a:00:89:26:9b:a9:a0:cf:98:81:95:98:5a:53:43:de:13:9c:
b0:f1:8e:7e:50:0a:67:49:fb:47:be:c4:c6:42:eb:8f:63:b0:
7a:10:84:62:9e:0c:9b:e2:48:a6:bc:f5:93:87:e6:63:d1:54:
42:2a:d0:fb:41:77:75:c3:09:d0:17:b0:4b:f7:14:12:e9:b2:
9c:0d:9b:7d:88:07:59:e8:6a:19:3b:4b:5b:c2:b4:f4:67:c2:
ed:b0:e9:35:c0:ac:68:47:e5:ae:11:8e:20:aa:a9:31:46:2b:
4a:22:93:da:29:46:b3:af:4d:2a:a7:e6:9f:21:12:6b:6c:fe:
86:05:86:7b:ef:28:9d:bb:52:61:3b:4d:db:2c:2d:97:23:19:
9d:f5:46:44:21:49:a6:7e:f1:b7:96:30:47:d9:c8:50:be:ee:
0d:c3:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:03 2026 by rpki-client