Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File: a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier: tL+Xa8kd6rrHttd2mdUNf9JNFE3kLTZqOrBFf6JuHg8=
Subject key identifier: 32:D0:5D:E2:AB:DC:FB:72:6F:77:16:39:34:A7:F7:C0:73:D2:8C:0F
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial: 019CABA22FB46256BE0942F20270759EBFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number: 0E83
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: 0vQnyQ3hXqzpV2UPPOpTPgINrk4.roa (hash: 4algmiejEZMto+7PZwa7gie6uv+uFN+W8bKhST4lB6M=)
2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: JiHK+SASv735ZTXJgphwOnCSeU7XUKYAdSMHz32wBMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2f:b4:62:56:be:09:42:f2:02:70:75:9e:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=32d05de2abdcfb726f77163934a7f7c073d28c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:18:fd:4c:d9:09:17:69:02:88:ac:57:bf:
87:e9:61:94:56:a8:d1:75:49:16:ac:97:28:c7:e4:
46:73:ce:a5:bf:61:ce:be:7c:63:46:61:cc:8a:cb:
76:c8:fa:76:77:85:3d:fc:7b:65:fd:25:e7:ee:6a:
46:0b:15:da:3f:e4:58:6c:33:e7:b3:7a:7e:1d:fd:
cc:52:57:48:7d:1b:8b:a7:29:6a:3e:4f:15:dd:93:
94:6c:a3:c5:52:2f:ba:ee:61:10:80:8b:56:a4:ee:
0a:6b:70:97:6e:3a:18:80:01:b9:af:e4:e6:cc:20:
f3:c1:99:ce:c8:13:be:9b:22:53:dd:0c:59:b7:a0:
38:47:1a:84:8e:e7:db:e0:65:e4:3c:60:9c:b8:de:
2a:ad:f1:c3:f9:c2:b3:85:64:8f:da:84:73:9b:18:
d2:97:38:96:5a:c0:9e:d5:b4:19:7a:62:55:74:8c:
0b:15:cf:be:2f:2e:40:c9:da:d1:87:7c:5a:75:4d:
41:84:51:71:c2:ad:5b:ed:3a:f3:96:da:1a:78:2e:
0d:7d:72:dd:b4:57:dc:af:41:46:e4:93:34:0d:61:
08:5b:0f:15:47:2d:2f:af:ff:d2:73:2a:55:fe:7a:
99:c5:46:cb:57:6f:9f:9f:33:95:c7:ba:d9:ea:f7:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:5D:E2:AB:DC:FB:72:6F:77:16:39:34:A7:F7:C0:73:D2:8C:0F
X509v3 Authority Key Identifier:
keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2e:ab:2d:2f:ad:4b:bd:5f:e4:c2:08:5f:4e:cc:e2:44:77:
79:62:fb:d6:f3:d4:61:bd:aa:84:7b:16:e0:0d:60:2b:ed:98:
9d:bc:91:ea:bc:7a:6b:cb:18:60:26:9e:4b:34:41:c7:9b:23:
b4:db:56:6d:a6:16:fc:94:3e:82:3e:3c:bb:68:9e:de:6b:06:
a3:2f:76:c4:bf:ad:c6:f4:6f:62:90:9a:1c:97:ac:54:44:26:
bb:d6:00:dc:1a:bc:f5:99:bb:4a:20:54:3b:21:94:fd:6a:a4:
fb:04:85:f1:b0:61:dd:de:c3:3b:93:94:39:c0:d6:da:52:5e:
15:09:bc:fc:55:1d:28:b0:60:de:47:ec:d6:09:36:d3:f5:78:
6d:5e:1f:e6:d4:57:6d:e0:66:9f:2e:59:f7:01:7a:37:e1:6d:
2d:52:39:e2:5f:04:ac:cd:25:f0:c2:02:f1:b7:03:30:de:87:
71:9c:6d:7a:f3:e8:90:74:f0:cc:7e:2d:f7:c1:5b:63:73:bc:
8b:0a:b6:c3:2d:3d:2c:8f:61:a4:b4:48:c1:bb:5a:32:5b:95:
ee:84:25:ab:d2:a9:fd:b4:59:c0:8d:5b:f0:57:cd:95:e5:39:
02:27:22:9e:1c:be:ea:cc:54:dd:9b:63:ae:31:93:e2:c0:2b:
21:23:05:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:51 2026 by rpki-client