Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File: 6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier: uV88uPX79x43HhhyeJRkWRigMgLvVmlP8UvYLapqjxM=
Subject key identifier: 87:1D:00:B8:CC:4D:EC:A7:E5:1A:60:58:AA:ED:FF:F3:26:8C:22:2A
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 019CABD9497FA7E6862D911E65F82AB76A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 0tMWDsmaNpirizCIuYm2kQJNSB4.roa (hash: 7gDJtEKwpzRoEr+LF0O50BFAilj5lath99QLh0PO740=)
2: 1Irv8E4u7UykS63xv-ROJgQRbvY.roa (hash: ONra4D/SwQN2JXNsh0SIHWZc56JHdpcbYmoF15rsgHw=)
3: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: bfIR24+R6Li7nybF8rmpMNOBzqMo4NUM9kqe+xJ6+F0=)
4: BSyVVnIQyVE4YwB72lzy14u_BDA.roa (hash: UV3CW9R7w+p/7qtVB+/WOrunh+7+rnwo65AYKWYxNqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:49:7f:a7:e6:86:2d:91:1e:65:f8:2a:b7:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=871d00b8cc4deca7e51a6058aaedfff3268c222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:70:37:67:bc:58:90:eb:e8:10:78:53:ef:
23:51:51:31:7d:e6:ba:b5:9e:a2:7c:6a:8c:2a:27:
c2:30:b6:0e:78:7c:ba:0e:aa:3b:74:78:fc:ed:c8:
a2:2f:67:0a:ca:34:e4:e0:db:4b:f4:c6:83:65:45:
ac:2d:66:8a:3e:e9:5d:d4:76:5f:7d:cc:cf:63:a5:
85:52:de:15:8c:ef:5b:eb:ec:bc:78:c5:d5:25:57:
d4:c8:d8:b3:b9:ea:db:05:c0:cf:97:5d:e6:33:dd:
79:77:1b:31:ce:3d:e2:34:b3:e3:57:91:e4:33:41:
eb:32:ce:9d:49:82:3e:0b:9a:0e:c3:55:b0:de:46:
a8:48:6c:01:07:7c:2c:b5:1b:73:60:59:42:b0:d9:
6c:36:4d:db:b1:75:79:16:44:6e:cf:70:9d:72:fd:
ca:8d:f1:01:10:2c:cd:d4:07:94:e7:50:e9:8b:8a:
24:93:93:b8:e8:ca:98:51:5e:27:72:28:f0:c6:dc:
0c:71:84:0d:a7:04:34:c2:3d:7c:21:63:25:2f:d5:
7d:35:6b:e0:32:34:fc:b2:f2:a6:68:1b:a5:73:91:
e7:f2:99:b0:f1:27:ee:44:f7:ad:a9:bf:b0:3c:9f:
a8:72:5e:b2:1a:85:0a:b7:16:fc:ca:bc:97:4c:6d:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:00:B8:CC:4D:EC:A7:E5:1A:60:58:AA:ED:FF:F3:26:8C:22:2A
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ee:d1:e9:cc:1b:0e:b0:2b:51:01:dd:4c:36:bc:99:21:0e:
22:42:a1:3a:62:ff:dc:dc:1b:a3:6c:d8:87:8e:9c:ae:4e:31:
24:67:2c:cd:23:73:01:ff:c5:32:f8:09:f1:38:28:bb:1a:8f:
fb:ce:0d:8c:73:67:e0:4e:4d:d2:de:5e:46:d5:f6:d5:69:5c:
6d:93:44:42:f2:2a:a4:46:94:42:f5:41:1e:8f:a2:ad:c8:9a:
33:c6:75:e5:08:5c:be:f1:56:0b:b5:ce:62:d0:e8:a1:46:63:
30:6c:6d:cf:b4:e4:51:04:c3:c9:c0:83:7e:61:ce:b1:ce:01:
cb:7e:69:e6:3f:a9:b9:ed:40:99:d0:03:95:d5:14:2b:53:32:
3e:be:af:1c:db:ae:f9:52:a5:06:90:bf:28:c0:89:14:87:ce:
88:9f:99:04:0b:0b:fe:30:c8:66:1d:44:c9:27:ea:b7:17:a2:
d5:b3:92:07:a4:11:26:75:f2:26:38:b7:b5:f3:46:96:89:38:
b1:e6:70:c5:bd:01:0f:ae:47:ab:0e:57:b7:bd:19:5d:f0:94:
b8:5c:cf:d5:5d:bb:80:1a:31:e4:8c:36:48:69:df:6f:2a:66:
8d:30:c1:df:db:d8:c4:c5:17:1a:dc:1e:a5:0c:c7:0f:62:4f:
76:df:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:29 2026 by rpki-client