Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: kd1YPXVluY8f2/ayeK8SoKe6yIKrqCP+TTNS1cGdLgQ=
Subject key identifier: B8:4C:B2:DD:EC:27:47:90:5B:6B:0D:FE:6A:DB:E9:EB:35:39:05:F8
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019CACEB6E581BE3F2309549F20A1CFCB111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 068C
Signing time: Mon 02 Mar 2026 05:00:36 +0000
Manifest this update: Mon 02 Mar 2026 05:00:36 +0000
Manifest next update: Tue 03 Mar 2026 05:00:36 +0000
Files and hashes: 1: 6OqTpgmhzn6PJTKFB1lTcULSUt4.roa (hash: 0yR0XfZvnK3OQ/1YUSPxxfbZ0KMJ3RWvdqB7yb8/Z9c=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: sx4EpwZuGjfYFrCl7/iNPnUVD6/A2LbsGRp5qXWneB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:6e:58:1b:e3:f2:30:95:49:f2:0a:1c:fc:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Mar 2 05:00:36 2026 GMT
Not After : Mar 3 05:00:36 2026 GMT
Subject: CN=b84cb2ddec2747905b6b0dfe6adbe9eb353905f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:c7:6e:66:4d:f1:ae:f6:19:51:34:e6:cb:
37:30:d4:f4:ba:b8:f6:41:a5:dd:29:ac:f6:33:ec:
28:c4:ca:67:54:6a:55:12:3c:f5:60:53:7e:be:77:
fa:d2:15:75:7e:63:b3:2e:24:80:d6:75:58:8d:ac:
61:86:5f:d6:36:1d:a3:a3:c7:19:f6:17:80:75:ff:
92:4f:4e:d0:a6:9e:a4:f3:73:4b:7f:ed:00:5c:93:
81:7f:90:43:bd:c1:16:f6:c3:6e:b9:76:f7:ca:a2:
7b:2b:06:32:0a:48:27:2a:49:83:10:d9:a8:29:8c:
55:e5:f1:53:1c:79:5f:ca:cb:66:80:72:8e:f3:9d:
4d:e8:7a:64:f6:2d:43:a2:56:49:fb:00:06:90:d0:
5c:b2:0c:6d:16:f7:39:ab:58:1d:4e:0a:a8:5c:9e:
1b:71:51:c6:14:83:fe:5b:69:1f:ff:fd:74:ca:e6:
96:cc:6a:35:b1:82:0c:b5:e8:91:cf:82:44:55:69:
36:70:cf:63:f3:3b:01:00:3e:b2:98:64:e1:98:a6:
b6:d1:05:cc:aa:bc:8d:dc:a8:46:a5:cb:d6:48:a8:
18:7a:72:3b:e5:71:29:60:d7:97:c8:5a:ea:03:84:
f8:6d:88:06:d2:eb:89:9d:90:2b:c5:dd:96:51:fa:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:B2:DD:EC:27:47:90:5B:6B:0D:FE:6A:DB:E9:EB:35:39:05:F8
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:39:96:42:0b:97:79:3d:fc:ff:07:c5:f2:89:e8:b6:58:
60:b2:dd:ea:e3:06:e4:e2:b6:c3:e5:b5:dd:d8:bb:97:b7:61:
ae:03:7a:79:27:b1:aa:7c:38:60:a7:8d:5e:49:f9:c8:3f:5b:
4a:da:f7:9b:8a:ce:63:c1:93:7d:21:5e:d7:28:18:76:c1:e4:
45:c2:a5:98:2c:1c:08:31:42:ec:69:45:a7:48:ad:ef:57:d1:
c0:81:9a:7b:40:1e:45:2f:9c:5c:00:cf:28:b4:9e:dc:f6:a8:
29:55:65:c3:49:35:31:2b:e7:2d:87:fa:0f:b9:59:46:74:ef:
37:8a:8e:4e:d9:e9:ae:07:9c:eb:05:26:20:d0:61:d0:9b:a4:
8b:1b:fb:65:c6:77:5e:8a:d6:f1:fa:c8:d5:35:51:a5:b4:6f:
8a:75:84:e4:a0:7a:d5:a1:50:dc:12:30:32:ad:3e:f8:80:c1:
b0:25:42:9f:c6:ec:bc:af:66:5c:d8:16:0e:7b:8b:17:e5:91:
8d:02:db:fb:97:dc:f3:ea:48:e5:0d:90:66:8a:77:71:db:f2:
1c:58:76:47:80:36:39:a8:4b:f4:c1:92:ab:2d:86:fa:83:1a:
6c:89:d9:22:b1:a1:49:e9:d2:b1:81:dd:27:dd:e6:46:51:d3:
e2:d9:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:29 2026 by rpki-client