Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: QGxMQgzKvWkkcT3EyLOYnFLPN0vm7MbFtsA2gRIgmew=
Subject key identifier: C6:F0:43:38:EE:E6:C8:B8:7D:7C:AC:A6:BA:15:16:DA:27:20:C8:C5
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 019CAA58D827D2BD759A861CEECB1E5F199B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: 26qCc7S74ZY5HHyodwtArQXjq47S0XTSpv7g/Pnt2eo=)
2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d8:27:d2:bd:75:9a:86:1c:ee:cb:1e:5f:19:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=c6f04338eee6c8b87d7caca6ba1516da2720c8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:0a:1b:be:e4:f7:a8:56:00:aa:d6:e4:a7:
aa:80:e0:f5:c4:35:b9:bc:6a:45:01:de:2a:e9:9d:
86:d3:55:88:dd:57:89:48:c0:34:01:f2:b4:f9:ce:
6e:ec:f0:1c:5b:4e:81:eb:c5:b4:a2:b9:46:23:25:
57:34:ee:ca:f2:f9:1b:ec:d9:b7:65:68:a2:f8:c5:
7f:70:69:ff:c1:49:dd:30:50:73:11:0a:4d:01:c2:
a3:6e:13:b7:87:6f:bc:ee:93:dc:78:7a:ca:eb:2f:
c4:0f:3b:44:79:c3:6d:25:be:22:44:ed:5f:76:80:
f9:e4:09:c0:f5:4e:2e:ab:1d:27:49:e8:8f:49:67:
e5:d5:fb:4e:df:b0:f8:91:59:89:f9:39:44:93:bc:
b1:ec:b9:9e:fb:1c:a3:e7:eb:2e:4c:e6:9a:18:f8:
40:b9:71:0e:43:8e:a5:b2:ba:a9:37:af:81:df:24:
b3:eb:dc:2e:c4:ad:32:64:38:c9:6a:95:b7:20:ed:
71:e6:60:5f:d9:4c:dd:42:ff:78:4f:48:8f:e1:28:
22:2b:ae:0c:0c:4d:30:10:ab:37:5d:0e:85:d4:a3:
02:5c:30:1f:36:99:1e:94:8e:1b:08:ab:ea:fd:61:
ea:b2:df:f4:8a:01:46:0e:d1:1a:8e:c5:68:62:d1:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:43:38:EE:E6:C8:B8:7D:7C:AC:A6:BA:15:16:DA:27:20:C8:C5
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:ee:c1:20:0f:2d:7e:1d:d4:26:36:27:73:0d:9b:6c:48:
38:93:9d:eb:6e:53:43:d3:8c:02:3c:87:95:f5:16:e4:a0:81:
f5:06:78:0d:6d:1e:89:93:fa:41:a9:9b:de:7b:9c:53:88:58:
56:b2:a6:45:4b:10:34:fa:36:21:d7:5c:9d:bd:d0:28:a5:a7:
08:32:72:b1:94:1e:11:e8:a3:ac:0f:a1:d4:10:a4:6b:a2:16:
35:24:58:b3:2b:84:f5:0e:7d:63:30:75:99:99:9c:70:75:6f:
44:2b:cc:58:77:8d:b2:b1:be:5d:fa:28:96:c3:7c:35:95:f6:
9c:da:08:bb:64:2f:e0:d3:89:b3:e3:e5:53:6c:6b:fd:6b:46:
f6:9d:9a:45:43:1b:87:0c:56:cb:e8:82:0b:90:2d:3f:dd:cc:
5e:d6:e4:05:06:d2:16:7c:35:e0:11:ef:34:ab:db:31:c1:7d:
76:85:36:01:e7:00:3e:22:49:a6:34:1e:cb:eb:aa:f2:49:e1:
78:d3:40:86:88:ae:54:2d:dc:d0:ff:a2:23:59:89:17:55:c1:
86:5f:41:a7:ff:25:1d:9a:49:d0:df:5a:02:20:62:ef:9a:fa:
8a:21:68:bc:36:f2:57:6b:88:ba:7f:1d:c8:83:34:19:b6:f5:
7c:ec:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:59 2026 by rpki-client