Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: 6vRZrhm4L9eLcwQS9qIh0TQ3bZ4D93uRMWwuRj+Wpmk=
Subject key identifier: EF:A8:1E:3D:E6:BA:2A:E2:C8:28:DD:32:F2:47:D9:64:E0:74:1B:A0
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 019CAA8FB9B269DD8BACB5FC9246CFFA1B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 0CEB
Signing time: Sun 01 Mar 2026 18:01:11 +0000
Manifest this update: Sun 01 Mar 2026 18:01:11 +0000
Manifest next update: Mon 02 Mar 2026 18:01:11 +0000
Files and hashes: 1: JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa (hash: Vl0xLqESsMyxlanXnevOLg/LtIR0/LLBMgnk3RuFu6Q=)
2: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: TqCh/mVzqlo+xRkPf5rzVtCdmyEXnUt32OPwx60jhlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b9:b2:69:dd:8b:ac:b5:fc:92:46:cf:fa:1b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Mar 1 18:01:11 2026 GMT
Not After : Mar 2 18:01:11 2026 GMT
Subject: CN=efa81e3de6ba2ae2c828dd32f247d964e0741ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:5e:e3:b9:e4:c3:09:3d:42:29:4c:bc:80:
64:c3:40:64:55:48:e5:76:70:a4:58:c5:ef:c6:03:
53:d0:b2:11:5b:23:62:03:c7:d5:ff:80:51:fc:ea:
90:ff:59:71:a7:fa:52:b2:65:cb:98:c1:df:14:87:
f1:ba:35:27:e2:6a:11:a0:2c:b7:20:b0:b1:06:1f:
3e:94:35:0d:b5:7f:45:38:a6:c2:2a:fc:92:e2:fd:
3e:ba:2e:0f:d5:67:95:a2:f4:33:48:84:40:db:e0:
fd:ef:85:05:b1:8c:02:51:90:0c:ef:c8:dc:d1:ad:
f9:e9:5d:53:b2:79:2d:74:6e:89:56:1e:fe:31:74:
ca:29:4d:58:a4:0e:8a:16:0f:ee:a2:88:ac:a2:ac:
a3:8b:cd:9c:cd:ca:0c:ae:fa:0e:9f:ea:4b:c6:63:
42:60:47:21:1d:8c:11:4f:6e:3a:48:42:7a:06:3f:
30:ce:be:22:62:47:35:e9:45:6f:00:4f:88:88:61:
3a:be:40:b0:25:44:ea:fc:26:82:c0:0b:93:66:5a:
bd:d9:bf:6a:e3:da:a5:73:7b:76:05:1a:94:ad:fb:
44:dd:51:6a:1a:f9:54:c5:ba:37:3d:56:44:e7:a3:
89:82:b5:76:47:c1:6e:1a:0a:be:41:b8:93:eb:e4:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:1E:3D:E6:BA:2A:E2:C8:28:DD:32:F2:47:D9:64:E0:74:1B:A0
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8e:8f:84:8d:3e:9e:23:f5:4e:14:8c:b3:07:22:a0:37:e3:
81:67:17:15:80:8e:01:5c:51:4e:4e:90:a0:d6:95:77:12:42:
9c:f0:66:47:6f:89:35:08:cb:2f:9d:20:e2:5f:e6:b2:b9:c1:
13:20:e9:59:23:6c:68:fe:d4:06:90:c3:f1:81:40:c5:97:35:
0c:97:f1:e7:6d:ca:7d:de:65:99:e4:5a:c6:70:5b:9a:87:aa:
5a:89:ee:90:81:35:89:df:f0:89:6f:21:9e:b1:2e:d9:61:35:
83:96:fb:f4:2b:f6:23:83:cb:86:29:16:79:2e:c7:4a:49:b9:
05:47:85:01:00:67:ae:54:51:40:0b:6f:7d:ec:e8:a7:1b:16:
30:f5:85:21:34:8e:40:fa:b5:9e:c2:c7:96:70:82:39:9b:03:
01:7a:14:f4:f6:b9:e4:f3:35:a9:a3:00:86:e2:2e:68:be:f4:
e0:75:19:6f:56:ec:72:21:ed:5c:87:b9:ba:92:44:b9:ee:50:
11:ab:9a:ce:4b:9a:24:54:da:f7:c1:6b:19:05:ae:2f:f8:22:
a2:2d:98:48:3f:35:68:0e:42:0b:56:8d:e5:dd:2e:b8:46:67:
f5:74:cf:1c:fc:f1:34:1c:25:02:9d:d6:08:8f:46:30:61:14:
88:a4:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:48 2026 by rpki-client