Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: VszRjNoz1YiZUV75dIlxRBQAks/z6YvBVaSdq5TyAFk=
Subject key identifier: ED:C0:4B:9C:1B:54:F0:DD:D9:71:D0:92:60:44:0D:E5:52:0F:03:4C
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019CAD5988993C4A384FE6BC6B7D132528E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0C0C
Signing time: Mon 02 Mar 2026 07:00:51 +0000
Manifest this update: Mon 02 Mar 2026 07:00:51 +0000
Manifest next update: Tue 03 Mar 2026 07:00:51 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: iP2aOt9CQ1rGIFhcN4GMM4tRABgQMwmUS+swyTpO7M4=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:88:99:3c:4a:38:4f:e6:bc:6b:7d:13:25:28:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Mar 2 07:00:51 2026 GMT
Not After : Mar 3 07:00:51 2026 GMT
Subject: CN=edc04b9c1b54f0ddd971d09260440de5520f034c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:0f:3d:7a:84:b2:39:2e:05:e4:33:a3:a0:
b9:be:ad:21:bc:ce:38:f3:74:4a:fa:e1:84:23:7c:
78:92:23:dc:22:f4:e3:7c:22:0e:a3:a1:16:74:6f:
78:64:c0:ab:19:aa:44:58:1f:0d:f7:e5:da:8b:1f:
5e:53:d6:56:10:5d:01:f8:0e:43:7f:91:cc:0e:f9:
fb:64:50:b6:86:46:94:e6:33:dd:fe:96:20:1e:79:
4f:ed:fa:15:b4:ab:56:5c:46:71:73:e0:7a:f5:ba:
51:45:54:46:d5:0c:6f:f5:35:29:87:22:4b:11:61:
e5:75:43:2c:df:e8:af:d8:cd:2e:bf:0d:39:ed:b9:
9a:03:16:0a:a5:24:0a:fa:27:5b:6a:5b:36:48:87:
22:0a:7f:75:f8:de:c5:44:52:17:54:f4:13:11:cb:
68:9a:b6:4d:ff:05:fd:a7:37:c7:c0:62:bc:4c:e5:
01:2e:37:89:d0:36:91:26:7c:03:34:a7:e7:cd:de:
70:d5:76:c9:fb:8a:78:8b:0d:fb:93:15:2a:81:b5:
4b:c6:15:25:0c:ea:ab:49:24:06:00:cc:d0:73:6b:
59:23:d2:a5:02:2d:28:b4:2c:f9:34:c9:a6:a1:7f:
36:cb:b7:6a:09:42:b1:98:08:73:ab:9b:f4:56:c5:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:4B:9C:1B:54:F0:DD:D9:71:D0:92:60:44:0D:E5:52:0F:03:4C
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1d:ff:b4:c9:83:84:99:bd:07:b5:c3:83:e1:88:81:b2:59:
f4:0f:b5:0e:32:ce:fe:9b:b3:bc:e5:bb:ea:be:6c:bd:4b:14:
6a:94:0e:a7:51:d1:49:1c:22:06:c4:c9:37:be:98:da:54:28:
e2:7d:73:a0:21:2b:47:92:fc:e7:18:c5:71:61:99:d6:ea:73:
f1:0b:30:15:81:d5:da:18:99:36:04:bd:a9:f3:9a:6e:48:88:
91:15:58:14:00:3b:d6:0e:b0:9e:68:f2:00:a1:cd:09:b8:78:
3c:20:d4:ca:fc:87:78:d1:67:6e:28:05:d5:d7:8c:d6:f5:7b:
c6:74:10:1f:c0:e4:59:b6:c5:98:0b:2b:32:97:ba:96:94:3c:
9b:0d:7b:d6:b7:0a:9b:f5:14:45:fa:65:2e:bc:41:53:ee:20:
fa:db:d9:01:c6:fe:6d:8a:88:fd:ce:da:d1:53:3d:ba:e0:9e:
40:d4:90:b0:0e:e3:ff:85:12:b1:1f:af:2a:8b:13:8d:19:5f:
10:7c:e5:be:07:44:f5:4b:ac:55:d6:77:34:5a:18:0f:5c:7e:
af:9d:60:4d:ea:b5:fb:c9:be:4c:e5:75:6b:b8:13:7d:05:88:
09:f3:e2:b0:c1:44:61:c7:dc:a6:1e:09:41:b8:16:54:2b:d1:
41:45:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:00 2026 by rpki-client