Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: 4oL7K2py3G+4c9zZ0hbWt0eoQrSlmww7uiA6RgbamG8=
Subject key identifier: 26:98:A2:76:B9:6F:58:EA:59:21:09:B3:AD:4B:38:01:59:ED:95:E5
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 019CAA58F9724646160FFB415E37645F8A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=)
2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: 7QDMfX1yvBlG5fhu09bQhSMZpF7eou1xWN4aRUDBM0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f9:72:46:46:16:0f:fb:41:5e:37:64:5f:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=2698a276b96f58ea592109b3ad4b380159ed95e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:3b:85:df:f6:f5:e8:7c:f3:01:f7:f8:df:
33:60:90:57:0e:1c:f8:52:82:3b:71:cf:4e:d8:c4:
ef:98:5d:6e:ad:8b:6b:9d:3d:8c:97:e4:fc:76:c8:
8b:fa:2a:c5:37:f9:03:21:73:1d:d3:5f:0e:39:9a:
9c:8e:a3:c7:17:af:45:da:0f:37:4d:41:5f:f2:8a:
cd:c9:eb:d7:8c:ac:ed:ef:06:2c:cf:71:4c:00:c7:
75:27:9b:66:5a:4c:76:fa:52:4c:c3:5d:2e:4d:3d:
2a:89:8b:22:ad:ea:bd:8b:2b:fa:67:cc:fa:ed:b4:
d1:df:aa:6f:c3:30:48:f1:50:68:33:45:75:67:49:
d6:3a:1e:e5:4a:b1:55:19:6b:90:b1:8e:3b:33:c1:
4e:ea:50:38:cc:16:56:c6:87:0c:c1:b9:b3:ee:00:
dc:6c:19:78:1b:ef:6a:89:92:25:74:09:9d:ac:b7:
77:a4:e6:8c:82:c5:30:2c:9d:ea:48:e2:b8:30:bd:
12:7c:6d:53:1d:36:94:65:5f:d8:ed:0c:f5:1c:d6:
43:35:fc:72:ff:a1:36:13:27:e1:f1:d7:31:f6:21:
0f:af:fe:1b:7e:e7:43:8a:a0:d7:8c:89:21:94:b4:
96:73:5c:64:a7:5b:32:af:a3:1e:03:42:f0:28:d9:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:A2:76:B9:6F:58:EA:59:21:09:B3:AD:4B:38:01:59:ED:95:E5
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:04:a4:cb:84:5f:55:31:0e:99:e0:84:0f:9c:3a:36:89:
a3:ea:d8:b6:f1:fa:13:b7:2b:1c:f1:ee:cd:e5:7a:06:de:00:
16:be:eb:a6:87:c5:47:f9:89:5a:af:69:2d:04:6e:e1:0b:7e:
4b:a5:0a:35:17:41:7c:6c:30:27:2a:71:27:8c:7c:df:c1:b7:
6e:5e:af:6f:24:9f:e6:36:f5:1d:bb:34:32:62:89:e0:b1:54:
c2:45:a3:42:0f:3d:4a:bb:f0:ca:04:2e:12:aa:43:e2:82:12:
20:25:e3:9e:f6:5a:e1:03:88:58:9e:3a:57:3b:af:57:93:b0:
a8:4d:46:76:7e:90:0e:87:7d:aa:37:16:39:75:44:ef:23:66:
b3:00:c3:13:74:cf:1d:cd:9a:72:d9:0c:66:6b:91:71:56:e8:
ff:18:d7:06:b7:f6:9f:7c:d8:cb:3d:89:e6:84:60:84:26:60:
ae:a1:b0:ac:6d:05:e4:54:cd:21:ca:a3:7a:69:db:fb:06:a7:
ea:f9:97:dc:bb:8c:67:33:3e:fb:e2:c1:31:a9:56:93:3f:42:
72:00:5e:20:02:89:01:7b:70:92:ad:f6:42:a9:fb:07:a5:71:
fc:ed:a5:5a:5d:30:04:9f:93:af:b1:fc:aa:a0:0f:da:58:10:
e7:74:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:07 2026 by rpki-client