Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier: VMo6W6p93cY75PiHlfv/E47lM2hc0LtzAnlGCVjGoNg=
Subject key identifier: 11:7D:9C:AD:D5:3C:19:52:F0:1E:69:7A:24:6F:AF:46:45:9F:83:BC
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 019CA9EAC0C3A136DD351697B977E138C451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 15:01:00 +0000
Manifest this update: Sun 01 Mar 2026 15:01:00 +0000
Manifest next update: Mon 02 Mar 2026 15:01:00 +0000
Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: 08RoraeRNC/Bq9dobFo+Qkhr7wOiQO5+D/HN1kWWduM=)
2: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (hash: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA=)
3: x04dCWjItyDGXFoquqgz5jnrMRg.roa (hash: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:c0:c3:a1:36:dd:35:16:97:b9:77:e1:38:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Mar 1 15:01:00 2026 GMT
Not After : Mar 2 15:01:00 2026 GMT
Subject: CN=117d9cadd53c1952f01e697a246faf46459f83bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:66:1a:4d:a5:b2:0c:57:7a:6b:fa:f2:b8:
76:a6:6f:ce:15:4f:92:75:96:dd:bf:d8:88:a1:03:
28:54:57:33:ac:5c:6d:7d:f1:b0:6b:5b:9a:b1:b9:
30:f1:27:6e:c6:60:9d:64:2d:ac:0f:1d:3e:2d:57:
8a:43:04:ce:df:72:a9:13:f1:d2:d1:1d:98:e0:03:
40:2a:95:8e:b3:cc:f4:d3:5a:bf:6e:f9:61:5a:3c:
0c:68:a7:d6:c0:75:08:67:92:93:3e:10:5a:44:30:
5b:91:2e:a4:17:ce:04:4f:bd:9f:56:5d:e4:f1:95:
d5:d5:18:f7:b4:84:28:3c:c1:15:81:e3:9a:79:51:
a4:c1:b4:a3:b0:b2:6d:dc:37:fb:99:15:6a:89:e9:
ec:e8:3a:83:6f:65:bc:79:f7:69:2b:f6:b7:42:49:
0c:b8:fb:3c:e2:e5:b4:f6:56:36:09:db:65:8b:d3:
55:b5:75:1b:17:14:01:f5:64:c7:4a:27:34:dd:a8:
7a:5c:ef:3c:97:f0:80:aa:44:46:49:6d:8b:8c:ca:
73:8e:f5:40:be:19:f7:0e:cd:c4:9f:f0:da:5c:99:
e7:b3:74:2a:0e:e9:8e:14:c2:55:99:d2:7d:0c:04:
f0:6b:d4:1e:db:43:8a:60:ae:9f:c7:ad:70:cd:92:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:9C:AD:D5:3C:19:52:F0:1E:69:7A:24:6F:AF:46:45:9F:83:BC
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:82:ea:78:cc:2b:c1:0a:5e:23:2d:a7:ed:61:3a:0e:0c:da:
e4:06:29:80:15:ef:15:ce:d4:cf:70:0f:53:68:26:20:95:7d:
9d:8a:68:32:26:94:5a:d7:f8:5d:d1:a6:c2:81:3a:da:80:90:
98:ab:53:b6:ee:65:d0:6f:5b:a2:d4:04:c7:48:5a:16:a4:1b:
6d:62:49:c3:ce:00:6f:17:9b:06:8d:9c:63:c1:f8:88:69:b1:
b8:b1:0c:07:df:55:c5:0e:19:fa:fa:56:6e:60:7b:5c:54:92:
04:13:0c:13:0b:f3:f5:da:ba:aa:6e:eb:9e:e2:fa:18:2d:cb:
74:77:c6:c8:e1:4f:3c:62:af:6b:a6:c0:15:4a:65:a8:35:6b:
80:4c:a9:54:f0:b2:23:d4:86:a6:4b:97:cf:a5:51:f3:52:6d:
c2:e1:e4:ba:5e:12:c4:7e:4d:49:c4:24:50:6c:68:f7:f6:bb:
dc:bf:24:ee:47:8f:cc:45:41:86:67:60:0b:6b:1f:0a:1c:27:
0b:5d:57:e1:48:f2:60:3e:c6:00:fe:17:c5:0c:52:1f:32:89:
07:41:f1:79:6d:6a:4c:97:a9:85:f7:f5:54:1f:6b:ca:5b:51:
93:b0:08:fa:3e:53:1f:6b:fa:aa:74:5a:52:73:73:05:73:f9:
5b:05:59:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:07 2026 by rpki-client