Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: gR6H/IIFyCSSYHHfeXOjsFpZ4BHnzxPmZr00kf8N0C4=
Subject key identifier: 6A:0F:AC:AF:10:C7:78:F0:8B:C0:20:57:87:64:73:E5:4C:32:73:6A
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019CACB4D0EF1E774E94E5D75F13E4A8C78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 0284
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: 2wVqGk6AbYESqyQxARKZDNQW2QQ.roa (hash: FUC56YwLhblEO2nyGhzzY6G808Ssz4UfeZmgnIVvLic=)
2: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: 127YileErAtLQBhlbkJl0pxRYQ6m+YNaKZsjfB+0644=)
3: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
4: TdySsF6nSwr-dhc2le7MQt8mmfo.roa (hash: Hl3h9XRsY3f/YfdL9fN3vN5Yw0EWEoNUgj337vGvxO8=)
5: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
6: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
7: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=)
8: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
9: xVfc3l4EP7dhrtLcyRanOg0ot1M.roa (hash: xZO+gj3NO3PDe8x2SOyM664HUG69cn+y1nIklk8tHeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d0:ef:1e:77:4e:94:e5:d7:5f:13:e4:a8:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=6a0facaf10c778f08bc02057876473e54c32736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:e2:d4:95:c3:09:75:ef:3f:7f:2c:f1:54:
34:2f:56:74:db:90:75:31:02:44:6b:ea:1e:5a:15:
21:fe:68:07:82:8b:16:72:47:76:f7:bc:e6:76:b0:
0d:c6:e8:0a:66:2a:21:29:6c:93:25:23:c4:76:2d:
11:d2:0d:71:bc:bf:e1:2b:26:bc:36:76:f5:a8:87:
b4:e8:3b:62:1d:76:a2:91:d0:9f:c1:38:a6:96:cf:
a3:33:6b:03:91:23:77:bf:44:fb:3f:f1:24:57:0b:
d5:01:45:e2:eb:1e:09:18:01:36:63:b9:22:db:7f:
7c:69:83:ec:4a:d2:0d:ad:d3:c0:9a:54:8f:19:79:
d0:9c:47:26:08:fd:51:b6:68:d5:aa:f3:e0:65:d7:
27:e6:e9:ba:33:ee:c0:34:91:fd:c9:43:50:fb:ef:
87:77:2a:1a:2d:3a:c1:dd:4d:b1:8f:23:3f:db:a9:
15:f0:57:af:43:49:3a:49:2a:86:a2:c4:84:78:6f:
b8:b7:19:46:27:9b:55:eb:ce:2d:6a:20:42:37:00:
5a:73:4f:ed:33:27:8c:ad:85:1e:0b:89:56:09:a5:
98:77:c8:c5:1c:d7:2f:7c:1d:5d:ce:9a:ac:de:02:
71:45:13:06:66:22:92:9a:30:af:ee:e1:a3:32:be:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:AC:AF:10:C7:78:F0:8B:C0:20:57:87:64:73:E5:4C:32:73:6A
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:9c:c8:22:e0:8d:06:75:3e:f4:de:c4:8a:aa:73:89:4b:
b2:51:c3:1a:9e:af:80:17:55:8e:f2:a6:d3:5b:8a:c6:cc:b6:
c4:01:42:bd:5d:4e:da:fe:ba:7f:4b:cb:d2:c6:30:83:d7:6b:
a6:fc:bb:52:94:aa:ba:29:74:93:af:99:e1:8c:20:a1:d6:70:
2f:6f:fe:48:f1:c0:79:19:40:7a:37:a7:53:09:47:43:89:28:
4f:36:f0:ea:fa:07:a2:57:0f:cf:a9:8b:06:a0:1c:87:c5:10:
c7:56:a3:0a:b1:8d:e4:50:61:7f:1d:dd:03:de:1c:67:7a:d6:
23:7c:fe:6d:ff:96:55:93:32:b9:e5:4e:74:73:6c:40:ae:05:
fc:21:d2:2e:d7:1f:d3:c0:3e:b7:fe:17:aa:d6:3f:e5:05:ea:
a3:a5:b2:2b:88:60:7c:06:21:51:a9:63:77:2c:4a:64:f1:2a:
9f:f1:2d:d6:44:53:c8:2d:e6:e1:55:89:81:e4:f2:3c:ca:e9:
4a:be:f4:dc:de:b2:cb:f1:ca:97:e1:d6:2c:30:10:e4:88:00:
dd:b3:77:1b:d9:19:36:cc:08:e3:d1:ce:59:08:17:c5:6b:a4:
5f:0d:ed:6c:77:b5:dc:e9:60:5d:a4:f4:a4:b7:9d:c9:5e:a3:
53:62:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:33 2026 by rpki-client