Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: ZC1SWU63IQscvjGqHAybD8O3RPtxPuZvpY8Gh2dxtJo=
Subject key identifier: DB:31:10:14:74:9A:3C:60:D9:DA:B1:05:CC:11:48:FF:69:CC:44:9B
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 019CAA21F850D6B95C045399CF2B535D9D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: j5iTBfQexadasqTPZf3BdqF-LoM.roa (hash: cKixD027h0pGrgVj07zhaZHgaHhvJuIsf5swfvNOu00=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: 2vcw0Ce0ZScPLD/jLEHRZ32j5/O4jUGUnTyrVkPCjgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f8:50:d6:b9:5c:04:53:99:cf:2b:53:5d:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=db311014749a3c60d9dab105cc1148ff69cc449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:29:de:c5:6c:fc:51:db:03:5f:5c:21:4b:
d5:7f:84:87:88:49:49:d3:78:ab:40:03:99:22:69:
02:1c:a3:88:05:95:1c:8d:25:75:16:33:2d:61:df:
3b:34:6b:c2:ec:68:5c:35:00:92:7b:ef:f5:ec:d9:
f0:5b:88:c2:4c:79:5e:0d:74:53:37:c5:5a:7f:80:
56:76:1f:3e:dc:83:86:af:2f:d3:cc:87:eb:c3:e1:
a0:08:1f:e0:c5:8d:6a:73:6a:03:25:a2:25:1a:e4:
a7:7a:7f:3a:84:5f:ce:46:3a:1c:cc:24:9e:ca:6b:
57:0f:95:3c:8f:0e:9d:3f:78:65:87:c2:63:9b:aa:
13:4d:46:37:42:9c:fb:21:c2:6c:51:1e:f0:da:a9:
c8:da:91:00:99:d8:8f:9a:95:d3:3c:69:69:98:70:
44:09:0f:b9:ee:f5:96:9f:2b:06:79:66:e5:79:3b:
23:13:51:97:d8:ea:5a:9b:0a:ec:de:9b:39:52:9c:
57:89:ca:5c:0a:3e:37:9c:a9:44:65:6a:7f:a4:f1:
c0:6d:fa:1b:28:01:52:da:57:23:2a:ab:47:bb:93:
b4:47:88:12:a3:71:d3:c0:21:8a:cd:7d:ac:a3:ff:
b7:bb:f9:20:d2:03:8f:91:d4:dd:19:45:93:9b:d5:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:10:14:74:9A:3C:60:D9:DA:B1:05:CC:11:48:FF:69:CC:44:9B
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e3:65:20:e1:e1:ee:59:9b:e3:46:71:df:7e:87:98:30:8e:
10:c3:55:7b:5b:09:11:bf:1c:e7:12:d3:66:0d:3a:00:42:79:
4e:93:71:ac:93:84:e0:ab:0a:c8:ba:cf:5a:2d:f1:d7:4d:c6:
43:8a:8d:c0:6b:31:12:d4:f8:f6:7a:26:2d:ad:b0:b7:3b:50:
4b:88:1a:15:63:1a:39:02:87:42:94:00:95:43:3c:34:f0:19:
4f:80:04:c6:69:51:54:e0:bf:b4:ce:e4:68:8f:19:29:e9:24:
10:7d:8c:93:76:b2:bb:9f:15:69:4e:0c:6b:56:f6:65:7d:8f:
88:70:31:70:d3:1b:a2:be:e6:fb:f0:2d:6a:a8:5e:f6:f3:ba:
e5:3d:6d:1a:55:2b:4a:71:39:0f:c6:2f:f5:c7:e7:77:16:00:
8d:34:6b:41:5a:9f:53:78:3a:5d:bd:70:47:fe:cc:4c:dd:a3:
d3:9b:09:51:5c:a4:6d:db:dd:25:71:f1:19:18:4c:21:68:00:
bc:03:82:17:ae:8e:60:2c:4d:2a:15:63:af:fb:e5:d8:cd:41:
28:69:75:b7:f4:39:45:3c:19:ab:29:81:18:81:72:6f:3d:ea:
65:b8:08:4f:04:47:89:2c:d8:8d:b8:35:14:e7:ce:5a:ef:b1:
70:a7:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:58 2026 by rpki-client