Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: 1pxpjvWKTIKdXHN8Jo8Mo0+/CE7HzLWtsjEWZ2TJVcI=
Subject key identifier: 76:0F:2A:B9:97:56:C4:34:9D:A9:19:CE:98:66:CA:F0:87:46:80:ED
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 019CAA5830ABFB0BF803D45955788C6FFBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0C0A
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: Uc8-vtLFC1N8lVj4ndp6unkcS6U.roa (hash: UrDkg/Sd+X+UaUrCGrnxftMeAYE4D59TadpDzTu8j1Y=)
2: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: G3LpJCDtz7NrN5AUkyq3qtMrbGnYWVqGTzSIiDx9rxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:30:ab:fb:0b:f8:03:d4:59:55:78:8c:6f:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=760f2ab99756c4349da919ce9866caf0874680ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:13:35:e3:ea:b4:cf:02:9a:12:62:ff:d0:
76:17:d4:77:21:57:bd:05:c9:3d:c8:ab:4f:96:37:
04:3e:88:c8:de:92:1f:a1:9f:3e:74:83:0d:c3:96:
22:28:97:9f:89:c6:ca:7e:48:78:5a:da:7c:02:d9:
cb:0c:bd:31:e8:9f:1c:07:f3:ec:61:b6:a9:33:b7:
97:32:d4:4f:69:48:02:e1:aa:cd:54:70:1a:7e:d4:
d3:54:b1:14:e6:c5:61:fe:fc:88:70:36:3e:0c:09:
5a:01:34:9e:f5:7b:52:77:c5:10:39:97:96:15:77:
fd:47:b0:b4:0a:37:3e:0f:6a:71:9c:da:b6:8e:e5:
12:18:cf:c6:7a:d3:37:48:de:ce:9c:7e:20:c0:c8:
d0:cd:e5:ef:f5:53:ef:20:39:41:89:e3:64:37:b2:
6e:04:2b:ac:06:7c:94:8c:99:ce:1f:51:87:8a:e8:
a3:f8:21:55:09:14:4c:09:82:74:9c:74:4e:05:c6:
47:84:8c:cf:26:c6:b4:81:00:d2:64:7d:5e:41:73:
d9:ce:05:6b:77:59:38:9f:04:cd:05:dc:36:26:4a:
f1:63:a6:37:3f:14:fe:e6:8d:89:b2:c8:99:04:91:
14:ae:9d:66:f0:3c:fc:74:65:e4:ae:60:7e:cd:14:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0F:2A:B9:97:56:C4:34:9D:A9:19:CE:98:66:CA:F0:87:46:80:ED
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:b4:34:52:4f:46:90:bd:ce:70:1f:12:41:37:d7:f6:d3:
34:d6:30:02:23:12:8f:c7:2c:43:b9:35:dd:4a:f4:f9:59:5e:
f8:6e:78:90:bc:f8:fa:2b:23:2c:1f:c2:af:52:23:64:b0:05:
ed:c8:ac:ff:95:b2:79:45:e6:1e:c2:f1:0d:16:cd:03:48:95:
5e:a5:54:09:09:0c:c6:fb:53:3d:60:44:90:bc:a9:58:85:a2:
64:20:10:45:1c:79:87:f7:94:b6:f8:cb:22:f2:d5:6d:78:4b:
20:53:99:b5:e5:3c:86:a9:a7:c1:ed:45:a2:78:7a:a9:c8:bb:
23:71:61:1a:3e:7b:25:49:e0:c3:de:e0:5f:42:55:df:35:a2:
f0:28:c8:d9:b6:4c:df:cb:de:b7:90:3d:39:6b:eb:11:d8:09:
f1:ea:69:74:e4:a3:8d:7c:a2:3d:a5:b0:76:6d:a5:3e:72:3d:
27:1d:80:75:b4:e3:30:5e:dc:5a:1b:88:51:af:0b:86:a9:f8:
43:b7:f7:1d:20:35:f1:ce:5d:b7:b2:56:f5:4f:a8:fa:52:c1:
33:46:04:18:49:9d:d9:4a:22:25:56:6e:52:11:15:a9:0a:ed:
98:96:62:db:1c:a8:5e:58:cd:fd:0c:67:e0:65:7c:c6:0d:13:
48:3c:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:14 2026 by rpki-client