Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: 2bLqvYTGxLg1KlWSmFo0etMVaa+jQNKD0GLhUc/5dgo=
Subject key identifier: D8:BC:C4:C8:97:2F:D2:CC:B3:1A:7A:31:F6:52:B5:2A:C3:7B:C7:BA
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019CAC46C551CD4AE5EAEEB5C6A98A27B012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: px9NfdvntBZYZLL30zs0E4mhZQ7DWLUjXYaX67iLFCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c5:51:cd:4a:e5:ea:ee:b5:c6:a9:8a:27:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=d8bcc4c8972fd2ccb31a7a31f652b52ac37bc7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:e3:06:7c:b6:9e:4e:c8:69:c2:55:da:7f:
52:82:e1:78:cf:c0:e7:01:76:4e:fa:b2:9c:c2:03:
01:99:3e:60:e1:1f:c5:3e:6b:0e:1b:b1:1c:3d:ae:
9a:27:90:8b:2b:23:3c:21:52:be:9a:31:72:67:f9:
f6:cb:93:05:b6:ac:32:7c:cf:3c:41:8e:61:b8:b7:
12:31:96:a8:2c:89:b7:1f:00:41:c8:88:fc:b5:53:
e8:06:aa:3c:8b:f8:0c:bf:ba:ca:2b:37:07:8f:b0:
db:b5:39:f0:20:2c:6c:55:b4:29:25:f3:32:b5:cf:
32:17:d3:ed:a7:6f:83:9e:c4:15:ac:b0:01:e8:43:
7b:84:88:cf:48:ad:82:46:ac:cd:98:82:b8:e3:44:
c4:92:f0:9d:aa:17:44:e6:96:c8:1a:3e:ae:31:bd:
50:52:23:33:ee:80:5b:59:92:5c:13:1b:f4:f2:22:
c9:c4:07:c6:1b:85:12:2a:54:ed:3a:92:4b:88:22:
d2:2a:01:68:44:1f:4c:42:34:99:7a:27:ae:b7:53:
73:d8:40:19:e4:a5:54:41:e1:7d:84:e3:24:77:13:
d9:fa:57:7c:c0:a9:c2:84:87:84:7d:cb:04:e5:30:
17:d4:38:dd:53:da:bd:e7:1c:05:01:2f:e5:03:31:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:C4:C8:97:2F:D2:CC:B3:1A:7A:31:F6:52:B5:2A:C3:7B:C7:BA
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7d:c3:1b:92:74:b2:f5:77:91:62:3e:de:a3:72:b3:be:69:
b0:3c:f7:f8:f6:b4:60:38:89:2f:d5:6b:12:f2:94:d9:04:aa:
9c:5a:37:a7:65:e9:9f:8f:84:9f:f0:be:34:c6:6a:5b:11:22:
eb:a8:a7:84:1e:c7:90:a8:6a:0f:77:78:68:c6:4d:1e:87:49:
3f:74:53:7f:24:0e:cc:2f:59:b8:3f:0b:35:59:d9:83:e5:6f:
aa:b2:c9:e1:47:25:1a:27:88:f1:0e:e4:61:99:e0:a1:28:fd:
fa:a1:06:e5:aa:7d:9c:37:76:58:eb:f6:00:ed:f9:7a:fc:42:
8d:ec:00:66:f6:61:96:54:db:9f:9a:3d:87:52:95:b3:cc:1a:
5b:b5:df:38:c1:0c:4e:0e:66:af:9a:42:bc:65:47:6b:e4:6f:
be:0c:89:27:f6:0d:12:65:65:4f:29:85:a9:e7:55:52:ec:33:
98:4e:00:39:17:04:27:3e:95:fd:87:33:bd:e2:94:aa:fb:2c:
5d:5b:1d:74:01:0c:0c:4d:00:fe:b6:ea:46:6c:0b:b3:9b:72:
f5:01:f3:02:00:b0:9e:c0:04:2e:ce:89:e3:61:28:d9:4b:f1:
f6:be:dd:40:73:97:2c:51:7d:54:f1:3d:c9:1f:de:f4:f4:2c:
c4:a0:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:18 2026 by rpki-client