Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier: +A8gGhP/yFgjaGA3DSfpXyeklFRaYENUJQFED/L8HEE=
Subject key identifier: 41:D9:67:AC:48:1B:39:E4:41:E2:18:20:9F:BA:79:26:9F:30:CF:95
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial: 019CAE34F13026460541F72E632A059E6A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number: 04CE
Signing time: Mon 02 Mar 2026 11:00:31 +0000
Manifest this update: Mon 02 Mar 2026 11:00:31 +0000
Manifest next update: Tue 03 Mar 2026 11:00:31 +0000
Files and hashes: 1: 4EQFHPchKGJRSlfAMbJURA8f5Vw.roa (hash: r/Hza9cO99krJK0iZfoHSiR1NTC0AWSrrarH8tZXu0g=)
2: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: jPthRW0tWsffvyjEnqSTZtxJ2zvaYw57bEX606c57fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f1:30:26:46:05:41:f7:2e:63:2a:05:9e:6a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Validity
Not Before: Mar 2 11:00:31 2026 GMT
Not After : Mar 3 11:00:31 2026 GMT
Subject: CN=41d967ac481b39e441e218209fba79269f30cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:f8:84:6e:2e:9f:f1:0a:9c:15:8a:e3:96:
f8:ff:a8:b6:ec:a9:55:cf:4b:24:a3:1f:67:0a:c1:
d8:a9:69:1b:45:53:78:e8:e4:fd:ca:b6:65:c7:20:
5e:4f:b3:d4:17:45:7b:54:78:fb:b6:6c:30:9d:76:
10:9c:1c:14:10:71:1c:93:37:14:1c:f7:86:2f:40:
cf:18:9e:1b:69:bc:7d:ee:bd:da:ef:57:1d:1d:5b:
fc:04:4d:5a:74:33:da:be:cf:25:d0:22:96:b2:21:
0f:95:1c:c6:db:97:55:72:31:f3:ab:96:c0:4e:5c:
93:4f:5f:1e:04:e2:de:6b:ef:a5:85:f2:70:c9:47:
32:b2:e3:08:2e:ea:da:b8:18:10:33:0d:be:8c:07:
40:34:66:8a:43:fc:fe:26:65:59:30:cb:13:b3:10:
76:2f:3f:d3:97:9e:c7:63:a6:79:58:bc:c8:96:2d:
72:0d:d8:6c:ad:c6:ff:d0:9c:11:99:b6:87:9c:bb:
0c:84:e8:5e:1f:84:7b:4d:7a:0a:8d:a1:d1:ca:44:
c8:0a:a2:1d:8f:28:71:85:bc:9e:f8:c8:d3:d9:9b:
e8:e7:24:ad:6b:66:10:2a:fc:c9:95:3b:6a:1a:c8:
b9:04:d7:79:0a:85:33:4b:69:ac:7d:aa:c3:e7:ea:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:67:AC:48:1B:39:E4:41:E2:18:20:9F:BA:79:26:9F:30:CF:95
X509v3 Authority Key Identifier:
keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0f:98:73:60:31:10:5c:89:8d:b6:8e:2e:d6:d1:1a:3b:32:
2e:96:54:81:50:b6:5e:63:34:79:9b:d6:d1:dd:25:1e:fa:b1:
f1:2d:89:45:a9:87:e5:31:36:8e:fa:18:75:0a:88:b8:c3:77:
7a:7e:ad:8f:5c:f0:44:f8:24:7f:be:d3:cc:78:37:69:a9:7c:
f6:4e:e6:f3:0d:1d:70:d2:d0:8c:f3:96:ac:cb:82:e9:c9:9c:
3d:14:cb:cb:8d:e6:c4:b7:95:09:c5:c1:94:4c:c8:62:93:53:
59:9a:ef:a4:90:f4:9a:e6:d7:51:b6:33:4f:68:82:03:56:ec:
88:38:45:07:8b:09:70:4c:7a:63:f3:a3:90:06:a2:82:d4:f2:
c8:33:0a:76:de:23:a8:b0:6d:bd:a3:90:32:34:b1:e1:5b:b3:
47:54:25:05:0e:a1:46:a6:f0:89:9b:ee:f3:29:f6:2a:e3:cc:
39:c4:b7:61:8b:bf:4e:1c:44:e3:02:a4:3f:fb:10:22:c5:57:
15:9d:1f:ff:87:53:72:c3:47:b5:93:df:2d:b1:33:e1:f8:a2:
71:08:c3:c8:f6:d6:56:73:5a:41:a6:a8:1d:b3:c7:36:e5:ca:
38:44:1e:09:3a:67:7c:ae:8e:62:3e:a0:ac:9f:11:23:75:eb:
77:0a:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:35 2026 by rpki-client