Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: JugyD8K/eNEJn/ki1xOTwjA4H1MAqB44NGwwmr+PfgI=
Subject key identifier: 93:E4:C5:45:00:25:DD:2A:B0:0D:6F:B2:DA:68:99:B5:19:6D:F6:14
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019CABD983FFED03BD7ACA4CB795B0966FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: SVOvzgkEfvGYjK4LPp7LCekPWQg.roa (hash: lwuDAbFV1ncdXu1vKoYuToeJM9cyJDqz+l6o1B6s+ac=)
2: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: TKp/7uulv87VqrJR+0jRiahm9VfHw3XKhvqjDb3i4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:83:ff:ed:03:bd:7a:ca:4c:b7:95:b0:96:6f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=93e4c5450025dd2ab00d6fb2da6899b5196df614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:72:c2:71:63:33:0a:98:0e:67:48:fb:5b:
31:f8:38:3e:e8:be:31:99:e0:54:28:f0:a5:00:bc:
69:e7:f3:3d:13:45:a9:b8:fb:74:1c:22:77:02:58:
5a:a8:b0:01:69:4a:32:f1:ae:76:f9:7c:03:5f:bd:
ee:49:fa:c5:eb:06:ea:0d:9d:c8:39:91:dc:5e:d9:
5e:d8:7e:68:23:7a:d1:50:8b:f3:94:4f:2f:77:03:
a6:eb:28:0c:7c:1d:50:34:b5:84:7d:4a:22:a4:fe:
b8:7b:cb:17:75:d9:01:d0:35:b9:ba:94:70:ec:c1:
5d:3e:bb:2f:43:9d:bb:c7:fe:32:b2:dd:17:ba:16:
cc:8f:95:1b:ba:b5:44:b2:e2:36:52:e0:e4:68:4e:
b4:a1:de:a4:94:af:18:f1:62:00:ab:74:a0:f4:94:
e5:59:59:1c:c1:eb:7e:18:b8:15:a4:bf:57:f0:96:
85:c0:f2:89:44:28:9d:f5:f3:ef:ed:66:06:8e:3a:
8a:98:ac:81:5b:b0:1e:3a:2c:33:38:bf:1b:28:3c:
a5:31:cb:aa:21:62:c4:77:c6:f6:97:c6:1e:27:75:
f7:c4:5d:e6:4c:88:95:1f:a9:b3:78:b3:5c:1b:82:
1f:b2:a3:a6:fd:a0:62:d9:3e:00:09:bb:7a:ea:31:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:C5:45:00:25:DD:2A:B0:0D:6F:B2:DA:68:99:B5:19:6D:F6:14
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:91:c6:10:44:7e:e3:16:d7:bd:79:4b:59:55:3f:1a:da:
00:96:2d:16:f0:52:ce:f8:90:34:cb:e3:2e:b3:0a:2d:3f:7d:
9f:2b:61:3f:eb:c4:65:19:5e:a0:49:20:6b:c2:15:75:6c:e6:
28:a3:21:55:cb:1f:3e:26:47:b0:85:af:5b:41:5d:64:5f:09:
57:47:03:7a:27:c7:aa:3e:5f:46:b3:92:06:e5:b3:79:58:c0:
06:ff:0d:f2:a9:58:25:0a:b3:1f:eb:b9:df:9c:2c:76:df:f3:
ce:e8:52:81:86:dd:11:3f:81:fd:2a:3d:0e:e1:88:e9:fd:6c:
c8:f5:b2:b8:55:64:44:a7:3d:ff:19:80:71:22:97:7c:0b:ab:
03:64:e4:4f:c9:b4:13:12:a5:cf:2a:27:90:10:8a:c3:87:eb:
aa:00:3b:3c:3a:95:0a:75:07:29:f1:63:30:44:8a:1b:ac:20:
29:ad:5b:6c:52:11:db:9e:4a:a9:1c:76:e0:c8:d0:41:06:93:
69:91:f4:28:48:b4:ce:e1:b9:3c:e8:e7:cc:e6:0a:fc:c2:f5:
34:6d:c4:02:20:8f:7b:e0:f6:d1:52:b1:9f:82:3d:9f:2a:f4:
b5:b4:85:80:7a:b1:36:52:e0:e9:5d:00:12:f4:43:b5:96:d3:
79:86:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:50 2026 by rpki-client