Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: 0WKcyUubaGjpnK0G80TlumeB4Vqchac0+V1NGlU+1RY=
Subject key identifier: 94:56:76:DA:36:95:9B:A9:50:8E:65:AF:8C:22:36:F7:5F:3E:81:29
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019CA8D7B7F9B75BC10C5C079395C0117FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 10:00:35 +0000
Manifest this update: Sun 01 Mar 2026 10:00:35 +0000
Manifest next update: Mon 02 Mar 2026 10:00:35 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: b5/aimEiBJFx67l5HTwDBDStXEkcGw9J+7Ca3SnbnlQ=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa (hash: joUgZ1+fSeYV8k7xjRhKW4mLd1zfaAQo+STxOJIkVhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:b7:f9:b7:5b:c1:0c:5c:07:93:95:c0:11:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Mar 1 10:00:35 2026 GMT
Not After : Mar 2 10:00:35 2026 GMT
Subject: CN=945676da36959ba9508e65af8c2236f75f3e8129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:c7:85:c5:10:3b:de:e2:f9:08:95:41:10:
c0:1c:b8:7d:fd:3e:e7:e1:d1:18:ed:d3:02:1b:8c:
a8:f9:90:b5:68:90:32:77:fb:64:68:72:ff:53:54:
eb:ab:58:16:55:6b:e5:59:91:f8:3d:21:2c:5b:03:
0d:7d:77:f9:29:08:db:72:25:3e:c2:0e:cf:bc:8f:
a3:0d:65:b7:84:4f:c0:80:67:fd:51:85:b0:02:be:
4c:7e:eb:84:05:17:2f:3e:5a:67:d4:91:17:36:5a:
1d:56:1c:49:6d:58:38:02:8d:5a:de:97:bc:4e:22:
61:cb:90:45:20:5c:a4:be:49:31:fd:26:a2:c2:fc:
ea:26:4e:b0:ea:7d:e5:5a:74:8f:b3:1f:65:2e:41:
27:6a:e8:b3:1e:90:6e:29:19:4a:bc:8e:a8:0e:32:
09:f2:f6:55:b3:aa:91:1d:34:55:6a:31:59:8d:10:
38:02:9a:b2:38:20:fc:4e:73:86:21:9f:69:55:05:
d5:3d:c0:f7:7d:f6:d4:7e:5d:26:63:1e:c3:67:a6:
ac:ff:7f:5e:7f:de:44:a7:39:9c:33:66:fb:55:b2:
6c:38:08:ac:d7:03:36:f1:2b:a8:06:ca:b4:c9:cd:
1c:ff:bd:2f:6b:ea:14:6b:94:99:b9:14:c5:cb:bb:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:76:DA:36:95:9B:A9:50:8E:65:AF:8C:22:36:F7:5F:3E:81:29
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0a:90:29:1a:bd:49:bf:47:eb:72:ef:b1:75:ff:d9:f7:e9:
5a:c0:8a:3d:20:39:1e:b4:ea:4a:b6:47:9c:27:e0:a4:dc:aa:
87:cd:a8:8b:9a:53:c4:b8:5c:eb:cc:68:4c:45:51:d6:5f:3e:
e6:3a:d3:29:34:34:4c:33:2f:70:14:b4:af:2d:1a:83:50:2d:
54:17:78:4e:ae:a2:42:c3:cf:03:09:9f:c0:39:d1:fc:6b:ec:
e8:99:7d:cd:03:f1:c2:18:bc:d3:fd:9e:c2:59:ef:35:99:8c:
95:a2:ca:44:27:bb:0a:b8:3e:d5:09:02:fc:46:fa:45:98:85:
78:31:4f:c6:18:8e:90:6a:b6:48:f6:9a:de:09:79:a5:b9:7e:
e8:5c:71:3e:27:76:7a:1d:65:28:95:f0:34:f2:84:64:99:5c:
65:7a:10:fa:b5:47:a2:87:c4:a0:67:74:e6:b9:fa:4b:34:bc:
34:33:24:dd:b6:96:2b:df:1d:1e:19:8b:4a:68:13:3a:4f:78:
38:e4:6c:0a:f6:4f:3b:82:27:9f:5e:bb:0e:51:ac:8b:d9:70:
d7:38:bc:1a:d2:a8:91:49:d7:20:6d:8a:ac:4a:2e:2a:06:cb:
59:e6:28:a5:16:e1:c1:aa:52:9e:09:e3:1d:e8:59:ec:c5:7d:
db:f6:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:22:28 2026 by rpki-client