Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: Q7rHzY48HQbk5VgaPk5vOsbyLB0ED0E+G4aLJWtIYvg=
Subject key identifier: 3D:C5:D2:0D:D0:F6:64:E6:A7:6E:A3:37:9E:A2:5F:17:39:46:E2:AE
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019CAC103EC918A4D173D5A569D8B51A308B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0D26
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: Iy3HpATqC6yUd/tgeuGFrsAQPI0OBRBfs/a2BITjqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3e:c9:18:a4:d1:73:d5:a5:69:d8:b5:1a:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=3dc5d20dd0f664e6a76ea3379ea25f173946e2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:82:a1:61:d1:2b:8b:91:0f:15:ae:60:c9:
ad:a3:4f:5d:4a:86:e1:c9:78:c9:cd:fe:4b:a0:91:
9e:a7:1c:79:fc:1b:bb:73:a6:79:28:94:c3:e3:b6:
e4:cf:c3:01:ab:cc:e5:19:a9:3d:c3:b4:8e:df:17:
da:e5:87:28:0e:9d:a3:48:65:b8:2d:14:9f:7f:57:
dd:23:a0:f8:38:90:68:21:6a:df:8f:20:b7:c3:ae:
ef:26:94:53:1d:52:d4:b7:93:0c:a1:4d:cb:45:a4:
e8:ce:39:e3:a0:2c:de:3d:66:d3:04:94:86:a5:42:
4e:db:a5:1d:f7:31:bc:e5:9d:23:d3:2c:dd:66:88:
8c:29:fa:10:4a:18:80:58:22:d6:19:f1:fb:7d:37:
79:a4:90:94:f9:90:00:43:31:0d:ae:ff:b0:51:ae:
d8:52:03:03:02:76:8f:9d:c7:43:47:4e:0d:9f:64:
25:34:bc:de:cc:ff:f0:d1:65:64:26:69:83:99:e1:
c7:17:38:38:b7:1a:13:a3:b9:cc:9c:c6:45:2c:bd:
61:93:27:e1:db:d6:4d:81:df:80:43:ad:50:c2:6a:
ce:b9:5c:0f:02:ed:e4:b4:07:92:04:32:69:18:b6:
9e:f5:48:dd:c9:13:2c:55:26:c8:8a:05:51:7c:cc:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:D2:0D:D0:F6:64:E6:A7:6E:A3:37:9E:A2:5F:17:39:46:E2:AE
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:45:93:51:b9:ae:39:1e:c3:8f:de:65:38:e4:79:c1:fe:
dd:47:97:69:e9:22:ab:71:13:f1:8b:b0:b1:87:ac:4a:cb:f5:
1a:b8:76:da:d4:5e:29:e0:c9:b2:b6:db:50:ab:4d:e5:98:67:
d6:dc:04:39:12:db:6e:7a:d8:34:41:13:20:61:ab:cc:09:07:
54:6b:b2:fc:0e:04:de:b8:32:e7:08:f6:5d:86:69:a6:a1:b8:
77:4b:77:25:47:74:f0:ea:3c:ed:ee:cd:d0:89:13:be:fd:f5:
f3:48:42:6d:85:d6:1b:d5:18:d8:77:80:0d:9b:ce:90:62:3d:
aa:6f:0d:a8:84:28:49:34:33:0f:11:e4:89:c1:61:ab:5c:72:
58:a5:f9:e8:4f:a7:10:28:3e:80:df:0e:e3:8d:ff:df:42:57:
8f:cc:0d:b6:cc:5c:37:dd:49:7e:59:4f:ed:ff:f2:9a:4b:aa:
ba:07:8c:03:36:92:09:cd:9b:22:73:6e:3f:9e:5c:89:f0:24:
33:64:11:1d:00:46:71:20:be:08:c2:0f:25:bc:56:2a:be:00:
32:79:1e:22:c8:1a:43:df:4b:8d:89:6f:13:b1:be:8a:8c:36:
d9:34:61:0d:20:80:ae:7b:aa:c1:69:04:01:e1:d6:01:88:c7:
90:a4:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:59 2026 by rpki-client