Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: mI7XvBSlg5iTn3+dB71M0Yx2uNn6FYvDu5iVmoZcga4=
Subject key identifier: 60:0D:3D:BC:6F:44:59:56:EB:D9:08:01:17:4E:9A:06:2D:CC:C7:13
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019CADFEC633B6B89B475C41961C43A4494C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:01:21 +0000
Manifest this update: Mon 02 Mar 2026 10:01:21 +0000
Manifest next update: Tue 03 Mar 2026 10:01:21 +0000
Files and hashes: 1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: eP53O1X+FmfxNnPjCg4lPTWH0SLHks8q2Kp3vLEBcCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c6:33:b6:b8:9b:47:5c:41:96:1c:43:a4:49:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Mar 2 10:01:21 2026 GMT
Not After : Mar 3 10:01:21 2026 GMT
Subject: CN=600d3dbc6f445956ebd90801174e9a062dccc713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:34:55:44:5d:57:65:bd:46:4b:88:03:92:
1b:23:cd:7b:d3:06:2c:61:b8:0d:93:12:98:59:ba:
3a:38:0b:47:d1:00:d2:ad:ec:3a:a8:1e:65:d0:09:
7d:ee:9e:78:d6:98:5f:d6:cf:87:43:18:88:75:8a:
ba:b6:3a:f7:d3:2f:c3:61:0b:be:b2:9a:14:ef:e3:
c8:19:4a:87:37:ef:b3:14:75:60:06:58:f9:73:3d:
4f:b4:8e:52:d6:66:17:e4:96:1a:08:81:5a:9b:49:
bd:f4:d5:a1:2e:3c:d4:96:50:58:8f:a0:f8:31:cd:
1e:ad:4b:a6:52:fb:5b:ba:f0:73:27:35:5a:fd:e3:
6c:77:bc:50:ec:31:80:5d:45:29:36:08:87:62:8f:
c5:aa:75:df:34:2f:73:23:b3:55:6c:02:84:02:9d:
93:a3:3f:cf:28:86:de:f9:82:5f:df:8b:33:9f:16:
6f:72:36:68:a5:61:12:16:14:dd:34:cd:69:3e:ee:
18:d1:a0:0e:83:dd:89:06:21:53:7c:28:48:4a:8b:
93:19:62:8a:c6:59:ac:70:da:88:5e:1d:63:c3:8c:
5e:b0:79:45:44:c3:68:39:2c:3c:a7:d8:f0:17:38:
d8:a5:82:e2:db:c9:d1:82:d5:fb:08:0a:a3:7f:35:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0D:3D:BC:6F:44:59:56:EB:D9:08:01:17:4E:9A:06:2D:CC:C7:13
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:d9:78:c5:cd:18:89:47:2d:ca:90:56:64:b6:fd:9a:25:
27:a0:6b:f1:d4:4a:f6:a3:58:3d:d3:ec:27:61:e3:ae:c9:0f:
3a:b7:a4:4f:ca:07:99:83:04:7d:b9:0f:51:83:f8:79:3c:c1:
40:00:92:5a:63:39:d6:a1:93:4b:01:d9:c4:58:89:7c:4c:89:
0f:b7:ab:f0:63:d0:82:11:29:f0:d3:79:dc:ee:c0:84:f2:26:
e7:81:6c:19:81:73:cb:38:5a:4d:cf:d5:7e:80:57:ac:78:a0:
e2:27:8d:03:c6:dd:e0:ed:56:fc:46:88:e8:07:6d:38:96:82:
38:76:b4:03:f2:5a:58:a7:fd:74:0e:2d:05:a3:dc:78:a3:ba:
11:ca:a7:36:25:3e:c3:49:01:a3:86:b7:ad:92:d3:3f:89:98:
c2:2f:37:3d:b0:66:fd:06:46:93:5b:ac:0b:c2:2a:a2:54:14:
d4:87:bf:d4:9a:5d:28:52:20:e5:32:5a:96:db:bc:f8:84:70:
13:9b:54:72:20:82:f2:8a:39:28:be:92:2e:c2:92:28:c7:00:
10:1a:a1:cc:b3:59:e0:86:fa:f0:50:8b:9e:72:ee:26:7c:ca:
bf:6d:75:1a:d8:2d:98:73:b9:2e:be:17:5b:53:06:24:49:44:
0e:e2:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:00 2026 by rpki-client