Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: WzeJPK8VbHpgnajijPm5rIM7IbwmI8W+e17ctdk9fU8=
Subject key identifier: A4:23:D8:9F:F6:A8:09:E5:16:32:69:57:3F:EA:37:D1:F1:01:8A:3B
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019CABA1F24A0990D3958C252F3C8C39D93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 188F
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: pT+h5hmAKgj4revXY7LvRlI5bXCbDWDSFkl/Tl12bNQ=)
3: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
4: wtV2klfLWleWP1qzNHVdYMq9dus.roa (hash: V2B2Cn1HBoj5/PU6RFBz/2Uk6IbTH7AFuBLPfpKvcTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f2:4a:09:90:d3:95:8c:25:2f:3c:8c:39:d9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=a423d89ff6a809e5163269573fea37d1f1018a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:92:85:8c:20:88:b9:5d:d2:45:27:cc:56:
0f:3c:37:77:9c:a8:fd:8b:7b:13:c6:92:69:9a:b2:
48:4d:63:75:57:4f:81:6b:e3:d7:81:11:a7:84:7d:
9b:de:41:4f:fe:1c:51:45:4a:d2:39:37:b7:9d:81:
64:16:29:bd:94:53:58:59:84:2e:20:66:0c:7c:6a:
83:1b:14:84:7c:2f:23:02:6b:d8:9f:8f:22:aa:94:
67:64:84:2a:40:dd:b3:76:53:e3:e7:af:66:03:d1:
36:0c:e7:e0:f3:27:ea:7f:4b:ef:09:e2:e1:77:22:
ad:ca:97:ed:eb:40:49:ce:28:80:19:b8:b9:ca:40:
2f:54:b4:08:bb:f2:aa:fc:81:5f:63:6e:ba:07:3d:
06:cf:ec:bb:a2:d1:b6:96:fe:71:24:ec:d1:f3:70:
f3:b7:de:21:dd:63:7e:2a:2b:55:05:00:65:6a:44:
0a:3b:08:37:28:34:a0:4e:66:f3:9d:c1:c0:99:66:
d7:a5:0b:27:09:f4:32:0a:af:da:f4:fb:40:3d:cf:
2c:1c:e0:65:d2:9f:71:3f:56:e0:6d:eb:fd:76:44:
77:44:f3:b3:38:40:ad:c3:c6:e2:2e:ba:61:0c:06:
19:71:63:5b:5b:68:bd:7e:17:4b:75:67:e6:d3:c8:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:23:D8:9F:F6:A8:09:E5:16:32:69:57:3F:EA:37:D1:F1:01:8A:3B
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bc:60:55:e8:d5:49:f4:28:ea:31:91:8d:c6:79:9d:4a:ca:
45:21:16:a3:bd:ed:da:06:a0:c9:d5:7b:ad:a4:57:af:9a:31:
87:8c:0a:d2:2e:37:e1:66:cb:a4:27:e6:21:2c:8c:af:f4:32:
a5:8f:19:bf:e1:ff:9b:12:e0:93:c6:9a:3e:18:71:13:b8:36:
36:ef:63:dd:06:67:40:da:20:7e:fd:92:4c:ec:2d:c7:e6:0b:
0e:6d:6f:34:f5:b6:1c:55:83:a4:46:94:c6:59:7b:64:93:a3:
ef:56:b5:50:66:97:e3:86:20:14:5c:c2:99:97:b6:7e:0c:79:
64:1a:16:f8:c3:e9:19:7b:31:11:4c:bf:0e:6f:2e:ba:d4:b3:
3a:e8:c4:87:e1:d8:4c:39:95:9a:ee:28:af:83:13:19:fb:ea:
db:20:74:ce:d4:07:0e:2a:b8:ff:01:89:87:ec:0a:fe:5c:2d:
82:0c:a4:f4:f6:a0:5b:27:8a:94:1a:7f:11:de:ea:2e:6a:87:
de:84:c1:ad:1c:64:a0:9b:53:24:ff:a9:22:6f:f3:91:46:7e:
91:a4:78:b9:b6:d2:2f:06:fe:a1:8f:3f:2e:be:46:bd:d4:3a:
ec:64:bb:2d:8c:1d:02:25:29:46:46:89:60:1e:6d:83:6e:f6:
c0:e1:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:12 2026 by rpki-client