Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: RLJh15silRei/xO1yywBjQhH7N/O68d9oa7uLvJE1F4=
Subject key identifier: C7:78:CF:1F:4D:5E:6B:74:27:61:93:FF:EE:8C:12:F6:F9:E4:AE:A5
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 019CAA5857014249C736078947411A8BEA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: Q4LE0a4DdwpP58SsOYaQVwF0xtdYyDNDF+ranpSY1m0=)
2: cF8uP7QlOdwZi4fd-Vewyhyr1JU.roa (hash: /tEiL73EsYnvkx71Q1CMlvgCMIyqQRf+8UDWXXfTyn4=)
3: mIHKTw-XLrmmWG8YqweQVC7V0bI.roa (hash: jyb24Oi7s06EeSQHlaZE/EE7bOHrHv2+206uhSP0nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:57:01:42:49:c7:36:07:89:47:41:1a:8b:ea:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=c778cf1f4d5e6b74276193ffee8c12f6f9e4aea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:cf:54:c3:90:28:f8:64:74:66:7a:88:bf:
80:76:55:0e:8b:d7:63:a3:08:f4:ff:00:c6:86:43:
c8:7f:ab:9b:82:4c:d4:26:5a:50:42:6d:d6:98:3b:
c4:51:e9:43:2e:51:a8:bb:fd:f8:88:60:6a:cd:db:
42:a2:65:40:93:6b:27:55:b4:dd:59:c4:97:d8:f0:
3d:7e:52:6e:02:9f:2f:dd:bc:43:e5:74:c9:46:dc:
53:27:8c:d8:51:7e:3e:f0:d8:3c:55:5b:f0:e0:0d:
7d:0c:90:d8:a3:f0:a8:c7:9c:15:9d:4a:30:a9:43:
18:26:c8:15:94:88:03:36:b4:b7:8b:34:35:bb:44:
6b:25:d7:a7:c7:a1:dd:11:0c:4c:77:5f:00:9f:66:
14:9e:12:de:6a:81:97:3c:42:9a:83:95:a4:0b:ad:
23:47:68:d9:9d:b3:6c:8e:4c:bb:a3:a7:97:e7:d7:
7f:19:42:df:75:48:82:7d:d2:4a:2d:67:a3:18:13:
90:91:77:2e:6b:d1:82:ee:6e:23:73:dc:aa:59:6c:
95:f9:6c:83:ab:b0:10:65:03:d1:a4:08:7b:ea:02:
f0:41:4e:f0:4b:50:38:1c:1e:a8:36:c5:b1:76:4f:
dd:3f:4e:89:7c:d1:40:72:25:67:c1:1d:72:4f:3d:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:CF:1F:4D:5E:6B:74:27:61:93:FF:EE:8C:12:F6:F9:E4:AE:A5
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0d:ad:ed:1f:11:5d:74:bf:d1:7a:db:ad:9e:cb:25:ca:38:
2e:db:f6:b4:7d:cb:20:1d:e3:99:72:85:9d:47:b9:53:a0:c2:
ab:3b:aa:f8:e3:e2:f5:4d:be:ef:76:c5:33:39:9f:14:96:4d:
cd:69:d5:c9:1f:71:6a:5b:25:a7:e7:d8:c2:aa:c0:d2:3d:18:
04:1d:3b:1e:79:78:d8:e9:b7:ce:c6:6d:53:5e:19:07:2f:66:
f8:b0:f9:b8:85:1b:90:29:2c:de:20:08:5a:ad:35:ec:05:a8:
3f:77:72:6b:42:7d:43:30:45:71:dd:54:f5:2f:bd:31:1b:95:
5a:79:6f:36:4b:7c:e4:fe:dd:4f:a5:c7:4c:0e:1e:fa:5d:fe:
62:c2:bd:cf:ca:48:52:31:8f:a9:a3:d0:ed:e4:d9:88:62:db:
7f:d6:39:3f:3c:9b:e2:f2:94:2d:e6:ff:26:99:26:f7:b3:04:
fd:30:12:f5:43:f1:44:d4:48:7f:5d:e6:3b:3c:35:cb:da:de:
b0:7b:15:ed:f6:bb:0c:31:56:d5:57:bb:41:05:b9:6a:c8:a3:
db:40:13:de:e8:2f:eb:f3:e2:d5:ae:e5:2e:99:c4:9f:ca:27:
df:7c:06:d3:3c:f0:82:8b:1f:24:f8:a3:15:48:d7:79:bf:f1:
87:ba:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:40 2026 by rpki-client