Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: 4/I3miATtXhlHkZmPLvYg2/1NBidxXRAiiMf0R1hMLg=
Subject key identifier: B2:C0:6D:BB:FA:10:11:6F:A8:FB:FD:FE:1F:C8:18:0D:BE:64:7D:41
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019CAAC6715A5291E514E62FE2B88282FAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 0283
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: 2wVqGk6AbYESqyQxARKZDNQW2QQ.roa (hash: FUC56YwLhblEO2nyGhzzY6G808Ssz4UfeZmgnIVvLic=)
2: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: KcTq8k2Iapcb7xh9Tgy6IPd7eyzk0iGUGan2tShKrpA=)
3: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
4: TdySsF6nSwr-dhc2le7MQt8mmfo.roa (hash: Hl3h9XRsY3f/YfdL9fN3vN5Yw0EWEoNUgj337vGvxO8=)
5: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
6: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
7: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=)
8: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
9: xVfc3l4EP7dhrtLcyRanOg0ot1M.roa (hash: xZO+gj3NO3PDe8x2SOyM664HUG69cn+y1nIklk8tHeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:71:5a:52:91:e5:14:e6:2f:e2:b8:82:82:fa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=b2c06dbbfa10116fa8fbfdfe1fc8180dbe647d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:2f:d5:04:73:a3:8c:5a:e5:91:d7:07:4a:
16:51:45:fd:c5:43:fe:0c:ca:fb:7d:1f:ed:21:41:
cc:08:c7:1d:99:41:1d:03:48:1e:e9:f5:aa:3e:06:
7a:19:73:a1:63:69:a8:7a:f3:dd:f6:e9:53:a5:ea:
ef:46:6e:2f:38:49:fe:2d:c9:f0:28:b9:9e:b9:e4:
dd:bb:08:72:c4:29:7f:0e:95:68:49:d2:5e:44:15:
00:0a:dd:ba:11:28:2e:2e:61:fd:a1:f9:b6:8c:15:
2f:6b:b1:53:6a:57:fc:38:62:13:5a:91:f7:5e:e1:
c0:23:3b:5b:90:ac:62:53:1b:f4:9c:ab:69:37:9d:
9e:42:77:51:66:41:fb:ad:40:2a:a2:21:71:1b:58:
4e:6d:81:74:76:a1:99:4f:2e:f8:e7:79:5b:b4:76:
3f:1e:2a:59:f3:43:a7:7d:d5:c2:e4:fc:02:6a:14:
11:7a:4b:c8:f4:c5:45:ac:8c:a1:9a:f3:63:fd:93:
52:9d:d1:d1:38:37:fb:de:f5:22:28:3b:bd:c8:77:
cc:95:b6:6e:70:4f:64:00:8c:e9:cd:7b:97:8b:ec:
20:f2:e7:43:2b:7a:11:26:0c:4d:76:d4:b7:a6:43:
24:b8:65:ce:3e:6a:6f:3c:52:7c:99:be:63:4a:95:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:6D:BB:FA:10:11:6F:A8:FB:FD:FE:1F:C8:18:0D:BE:64:7D:41
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:2e:f4:e2:cc:2c:83:15:a9:f0:e4:5e:e2:ef:6f:89:75:
eb:b0:98:c6:c3:90:59:64:f3:d5:6b:d6:59:d9:54:fa:96:27:
b8:34:36:52:3d:79:31:68:b3:30:97:79:50:8b:05:3d:d4:8d:
25:bd:77:ef:d9:42:b5:1c:a7:f5:ed:b4:ee:b1:ef:3f:8f:bb:
5b:1f:5a:66:45:61:14:7a:6c:d6:94:60:45:b0:7f:af:60:a2:
69:2e:7a:7c:a0:0e:56:d7:f5:fa:60:0d:5c:51:27:33:78:5c:
05:81:6f:38:5d:59:2e:3a:64:df:af:19:bb:4e:31:fc:5c:4a:
7d:55:36:c1:ed:fd:c1:97:d4:05:ba:00:17:72:80:c0:f2:bd:
03:8e:0d:ad:94:36:8a:5a:39:28:68:70:b1:41:00:82:26:27:
67:53:f9:db:83:87:0e:17:2d:7b:6e:59:18:bb:d6:0c:9b:39:
9d:cd:1d:7e:bb:6a:92:07:51:87:db:7d:04:85:b3:d4:f2:cd:
63:ad:01:6e:7b:80:21:64:02:30:c9:a4:60:16:14:06:cb:0b:
80:d3:9b:a9:b5:27:2c:b2:3f:89:00:6a:75:89:63:e2:ab:e1:
ab:4a:5f:11:21:15:4d:32:ce:d4:de:d2:34:26:4b:f3:72:e4:
bd:30:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:26 2026 by rpki-client