Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File: M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier: Ah/6mm1pHOcpcASP5ZtLKnreJ2lLv9GkIkyR754nVFk=
Subject key identifier: 3B:01:48:5A:58:A1:DC:9E:4A:5B:7C:0E:0A:22:A8:3A:BF:69:A2:A7
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019CAA5913FF4544530B2FB11C66536D5259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number: 31
Signing time: Sun 01 Mar 2026 17:01:30 +0000
Manifest this update: Sun 01 Mar 2026 17:01:30 +0000
Manifest next update: Mon 02 Mar 2026 17:01:30 +0000
Files and hashes: 1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: LfAnAkIYtbQuLtf7/8sYAv4qe8uhWVqX/SOhjw7sHxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:13:ff:45:44:53:0b:2f:b1:1c:66:53:6d:52:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: Mar 1 17:01:30 2026 GMT
Not After : Mar 2 17:01:30 2026 GMT
Subject: CN=3b01485a58a1dc9e4a5b7c0e0a22a83abf69a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:bb:74:10:66:fd:c2:ca:94:7b:d7:a8:fa:
5a:35:7d:c5:87:54:54:fe:b9:3f:c1:2d:3c:89:8b:
ef:2c:3f:02:2d:22:46:23:9d:a7:2f:81:40:a3:37:
19:b5:55:b9:57:a5:a1:3e:13:79:cf:32:6f:e3:4a:
91:6b:e8:90:4e:2b:d1:f1:f3:23:d3:f3:66:db:91:
be:25:9e:4a:51:ad:cd:42:5d:8a:6b:5c:88:11:00:
18:e9:56:41:3d:c6:2c:4c:95:18:6d:ab:54:9f:a1:
4b:eb:5d:36:2f:b6:9e:b4:7a:f9:28:17:a2:69:6e:
51:8f:38:9b:f2:9e:59:27:e4:87:be:9a:0a:2f:39:
d6:57:75:0e:aa:54:c7:fe:d1:b7:cc:1b:84:b9:65:
86:57:d0:ab:06:44:81:2e:64:96:d4:11:b4:95:68:
31:3c:f2:e9:7b:e4:87:43:c7:de:e0:f4:b1:dc:d4:
d1:3d:df:7f:06:87:24:21:cb:86:6a:45:c8:42:ec:
c7:c3:ed:ac:28:46:c9:80:0d:d7:d0:05:1b:7b:37:
ea:3c:47:65:21:ce:2b:ad:11:42:c0:9f:6e:e7:1a:
41:98:e2:fd:e5:d5:32:fc:06:72:27:e6:6d:39:bf:
ed:b7:63:8c:53:ef:c8:15:87:70:62:84:ad:8d:4b:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:48:5A:58:A1:DC:9E:4A:5B:7C:0E:0A:22:A8:3A:BF:69:A2:A7
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:77:4d:80:df:7c:de:c1:7d:ea:a9:10:85:29:03:ba:fd:
c7:4b:3a:6f:63:3e:59:db:37:36:6c:9d:dc:93:1c:05:c1:34:
fa:a5:26:bf:d2:23:6d:ff:e7:f7:63:07:8f:9f:21:d1:24:3c:
74:e6:50:e1:25:a2:6a:30:56:76:44:66:77:73:aa:13:2a:81:
a5:6c:fe:d3:9f:f4:a1:17:95:9d:5e:33:5b:45:53:bf:1a:b9:
3f:f7:1b:3d:00:e9:5b:c3:6f:6c:60:a9:a9:90:97:06:ab:c8:
7c:44:3d:6f:1c:01:4c:6a:dd:82:0e:ee:b0:42:a1:ba:93:4a:
5e:3c:05:a3:17:b8:de:95:fe:cb:72:07:c9:30:ac:82:51:56:
81:86:8f:e7:d5:94:d5:f8:50:a3:06:a0:e6:93:2f:9c:2e:95:
d0:5d:34:ba:75:5b:42:40:98:b2:1d:16:2f:a6:4a:56:96:89:
42:19:5b:5d:56:af:c3:df:d5:88:a2:ad:07:22:7d:ae:a6:4a:
e9:ea:63:b2:ac:2f:39:ba:d6:6e:01:d0:e0:fc:47:e1:55:6d:
92:1d:b1:11:e3:8d:c3:68:90:7a:17:31:1d:8c:b8:05:47:fd:
fd:33:51:08:34:46:29:e9:76:dd:48:99:2f:ff:82:d4:03:e7:
17:c7:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:48 2026 by rpki-client