Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: Wz+nSKf5M2DGkKsrXXV0URQaUDUQVRs5651SUR/c44A=
Subject key identifier: 62:AA:BD:FE:C9:BA:1E:58:08:9A:DA:73:3A:4C:A6:EA:03:9E:9F:FD
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 019CAA219F8C34143A108E8E2E1666FE19F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: X3SG_E7dKLkySN2NXBNircknUi0.roa (hash: H3iDQ4ve/GqzLagGcVLrgcEFBGMPC2p/bJLU2T5Fnqk=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: q5x8bH8F3MTyPr+o0SkalFZgWMOhVPBLjzDMQBbcSMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9f:8c:34:14:3a:10:8e:8e:2e:16:66:fe:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=62aabdfec9ba1e58089ada733a4ca6ea039e9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:ee:f1:b2:da:07:35:11:85:d3:71:30:a1:
99:1c:77:d9:82:a5:49:10:6a:a5:a2:c0:1b:36:12:
d2:92:6b:4d:26:89:86:8f:72:c8:4c:0c:b4:0c:68:
d3:06:8e:a2:c5:46:53:75:9d:cb:d5:4d:ca:27:34:
30:a7:21:e5:e4:4f:c5:d8:8d:31:4c:63:54:ec:79:
3b:1d:51:5d:b7:fa:61:b6:46:f4:27:ea:17:0f:2b:
41:d7:2b:ac:30:a2:99:a2:5f:ef:bf:57:a1:45:aa:
4e:58:f0:91:ea:0f:7b:ce:bb:19:ab:5c:87:e3:60:
8b:43:d2:d3:9b:d4:92:6e:3e:c2:cb:8d:ce:6c:37:
16:99:53:cb:68:48:3d:d5:76:20:c9:a1:96:d2:f3:
76:f5:f1:b4:65:37:5c:04:36:e4:7a:10:44:5d:4a:
61:97:bd:5f:84:5d:88:0e:6d:ac:4d:97:8c:1a:f6:
9f:00:9e:34:c6:9c:a3:09:60:09:4d:25:c3:0a:70:
01:62:af:c2:02:ad:a9:c6:a3:20:94:f9:4e:39:c4:
ae:92:e9:cb:ad:84:8b:32:98:af:bb:d6:f5:cb:22:
16:36:44:b6:26:68:51:82:55:47:6b:4e:89:da:45:
36:54:2e:f2:7c:2e:4d:0f:98:b4:03:6b:b4:2d:60:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:BD:FE:C9:BA:1E:58:08:9A:DA:73:3A:4C:A6:EA:03:9E:9F:FD
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:97:2f:dd:9d:43:3d:3f:00:81:c6:5c:31:e4:db:2b:f7:a1:
bf:6c:9f:73:32:1f:80:96:aa:de:e3:d8:a6:82:06:4a:8f:7d:
ea:36:e5:7e:2a:3c:a4:be:b8:1a:e8:fa:27:42:93:f8:d9:81:
ad:a8:4e:61:8a:97:d7:07:75:2e:a8:4c:8b:8e:02:37:eb:f6:
f7:de:91:88:55:58:b8:30:0b:b6:87:61:19:c0:7b:0d:ec:4d:
41:5c:d9:09:95:25:ad:1e:67:50:8c:f8:af:64:38:a5:15:5b:
c4:b2:48:85:ac:48:66:80:ca:ae:d2:45:5f:4a:92:f1:a7:b6:
8a:9e:c2:ef:c1:5b:0f:88:3c:7d:cf:98:a4:21:42:c6:3d:f3:
5c:cc:3c:61:96:d7:29:fd:37:07:bb:f5:0a:79:f9:5d:c3:e4:
8f:f4:f4:c9:65:30:dc:95:63:91:1c:a4:db:91:cf:a1:88:40:
7f:f4:1a:9f:e1:43:e6:b4:31:22:e2:21:ef:8b:46:4e:fd:4b:
4c:02:04:20:e0:84:69:4d:52:24:b7:6d:28:ee:24:54:90:c3:
1b:74:67:72:c1:4b:38:5e:9b:d8:4f:56:d8:c3:83:13:8d:0d:
d9:fb:e7:0d:e9:c1:bf:8a:e0:3c:40:c3:87:3a:9b:d1:b5:50:
65:0e:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:14 2026 by rpki-client