Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: UyhZHZVAemGkOGdldfGHs18by80IkFvpcbifwtBZPK0=
Subject key identifier: EB:4E:24:F8:B6:76:67:5D:36:E6:9E:45:FA:E0:70:8A:E2:66:C7:BF
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019CAAC650090D9C70805185BE574AF47957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: u+rSQiD2otnLQKsu7yj+kks80Kn9PBi7qn1ZFaenb6c=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:50:09:0d:9c:70:80:51:85:be:57:4a:f4:79:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=eb4e24f8b676675d36e69e45fae0708ae266c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:9d:dd:18:72:f5:96:f5:42:f7:06:29:ee:
ca:fb:a9:f8:a6:f1:36:d2:bc:57:ac:53:42:27:30:
2d:1a:8a:f3:89:fd:37:a6:df:99:83:b8:b3:e8:25:
c6:87:89:80:63:35:69:95:6b:7e:84:b4:22:b7:20:
e5:ab:a2:e2:31:05:22:27:3c:03:e1:1e:7a:a6:82:
9c:ff:e5:04:3b:60:dc:69:58:0e:ee:7f:2d:8b:e1:
ad:d6:e0:94:67:aa:72:ea:e1:09:25:f7:90:11:39:
2e:0d:24:be:b0:37:0d:77:ee:31:1f:73:9a:99:b5:
5d:e6:ac:8d:fc:7c:7c:72:37:61:c4:95:60:9f:5c:
8c:ca:b8:51:1d:f7:f4:7c:8c:52:e1:65:1e:a3:8e:
0d:9e:cf:b6:69:17:fc:74:bc:f3:dd:d2:49:04:01:
56:6b:33:53:40:5e:89:fd:7a:f8:64:ac:01:b4:70:
d9:e1:a0:c2:ba:7f:72:b1:a9:57:09:48:e5:ea:c5:
53:d2:d3:31:a5:c5:12:60:32:eb:f4:7e:f0:df:75:
69:a3:86:0e:47:62:97:61:af:92:da:68:9b:b2:5b:
90:db:ac:bc:ea:f0:c2:be:b5:83:da:59:61:c4:31:
94:80:9a:75:0d:59:d8:1d:71:09:95:20:13:56:d0:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:24:F8:B6:76:67:5D:36:E6:9E:45:FA:E0:70:8A:E2:66:C7:BF
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:08:f2:9d:56:35:00:7b:33:92:7f:9f:20:57:38:b4:e4:
c3:cf:5d:25:f9:96:cc:29:71:e3:e5:ac:bc:23:99:50:13:09:
cd:2a:ba:1c:06:72:0b:dd:f6:0b:66:fe:a6:08:1a:39:16:74:
a8:3e:3d:a1:bd:0f:4f:b3:66:ec:fc:a8:82:ad:a6:fd:9a:d9:
4a:99:ed:ce:0b:c0:68:2f:ba:7b:cf:ca:1b:79:94:69:77:bd:
6b:57:b5:4f:c3:67:40:dd:ed:92:38:f8:c0:d6:b7:b8:cc:73:
04:2c:6e:7f:cb:5a:c8:fd:ef:5b:45:e1:bd:8e:06:e4:8b:48:
34:d6:1e:66:b1:b3:a1:80:60:1a:84:82:48:84:3d:b4:14:45:
4b:33:5e:e8:d5:c1:95:b4:34:75:5d:69:57:28:04:21:33:36:
a4:f1:5f:26:f4:56:fd:8c:02:a0:c2:56:ba:62:59:2b:de:cd:
30:2e:64:17:6a:45:41:46:8f:f4:94:fc:e0:c7:4d:41:9b:46:
16:40:d3:3e:5b:d8:4a:04:67:f4:90:c3:1b:32:c0:5d:ec:86:
3b:36:84:25:7a:e3:fb:35:dc:82:60:17:9a:5e:ce:8e:8d:ff:
ef:dc:43:bb:d7:49:21:d9:f5:f7:74:fa:10:93:79:7e:81:1a:
7c:14:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:40 2026 by rpki-client