Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: SNwrwCsv64tohK1V6Ijp+iVqujvFSHFlqYV16pbczUk=
Subject key identifier: 80:98:4C:49:93:84:4E:7C:AF:CE:9E:56:E5:EE:1B:2E:ED:F4:8C:FE
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019CA9464A88D301A9C7630626520EE4F8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 12:01:21 +0000
Manifest this update: Sun 01 Mar 2026 12:01:21 +0000
Manifest next update: Mon 02 Mar 2026 12:01:21 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: 7i1WwwD0wcA1BWrKrS+10MEZwh0gAlEarTZj3nQ4/xo=)
3: xc0me2KbQgULMNxKZvuhScRUfCs.roa (hash: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:4a:88:d3:01:a9:c7:63:06:26:52:0e:e4:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Mar 1 12:01:21 2026 GMT
Not After : Mar 2 12:01:21 2026 GMT
Subject: CN=80984c4993844e7cafce9e56e5ee1b2eedf48cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:19:1f:9a:30:0a:19:c7:4a:95:00:0a:b5:
b4:45:e2:78:fb:0e:ab:4d:ce:27:3d:4d:71:19:3f:
2d:a9:54:0e:48:89:73:d6:c9:e5:fb:16:d7:62:1f:
a7:01:17:38:46:d7:c0:c9:52:45:87:23:1b:07:34:
81:41:7a:39:75:3e:f2:c2:57:7b:ee:cc:6a:29:c1:
61:64:91:1d:7d:1f:df:0d:90:16:5b:88:b0:de:3e:
30:f6:15:dd:3f:f1:9a:a5:7a:e0:e5:3f:d1:96:dc:
31:a1:76:25:b4:8b:7a:73:de:50:b6:7b:1b:38:56:
16:79:0c:92:a0:0a:e7:d6:0e:fa:c3:a3:d8:eb:ec:
67:d0:a0:83:ec:05:2c:d5:2d:5a:33:86:a1:6c:4f:
00:b1:a5:b9:f1:81:d5:70:2e:99:2c:eb:24:83:d7:
84:c2:36:ce:7a:ff:e1:43:44:df:3b:0c:ad:71:d2:
5e:ea:78:79:11:2a:20:95:77:e6:48:b5:9f:fa:11:
cb:8d:ce:7d:00:ce:99:8c:e4:02:b8:58:99:c9:6a:
36:14:38:cf:8d:28:84:53:19:ab:8a:99:25:ab:1d:
d6:f7:e6:0f:9e:da:aa:9d:69:22:a5:df:86:42:24:
80:c5:8b:d6:a7:bd:d1:45:23:b1:23:44:71:42:8b:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:4C:49:93:84:4E:7C:AF:CE:9E:56:E5:EE:1B:2E:ED:F4:8C:FE
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:b0:4d:17:2c:e3:af:fd:6d:5f:a3:34:e3:ef:54:2b:df:
85:5a:61:be:1c:43:fc:06:a7:34:ba:0c:08:f4:4a:dc:93:d7:
5c:64:61:f6:90:82:5d:bf:02:b7:6f:09:ee:67:df:c1:41:b8:
4c:32:8a:a9:f7:05:8c:16:28:1b:1a:d5:79:36:18:9e:fc:d7:
a7:b9:6d:31:1e:4f:e3:ca:45:5e:e1:e0:e1:6c:9a:7d:2a:b9:
d9:c8:a1:6e:ed:3b:16:a4:7a:2c:d0:83:30:4c:3f:83:b6:05:
04:1f:ff:da:db:3d:57:b5:32:0c:92:01:76:30:44:bc:2c:50:
4f:dc:be:c3:00:e7:2b:17:c3:9e:b3:dc:0d:fb:46:79:01:43:
9f:06:44:e5:72:e0:99:75:c2:37:2a:e9:37:3d:29:27:f1:b1:
a7:56:4f:9b:be:91:ec:77:55:1b:41:08:d6:63:58:c6:20:1f:
6a:cb:c6:11:b1:90:03:e2:62:f6:e9:1f:bf:38:54:02:4a:44:
b5:6f:a3:41:f1:8e:2e:e5:fd:39:df:30:4e:fa:0a:39:ac:97:
7b:9a:be:67:71:23:9c:c1:22:d7:d9:cb:78:d8:92:c6:1c:20:
df:f0:ae:9c:86:5d:0e:c2:29:dc:18:b4:f4:de:b1:55:8c:be:
da:9f:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:49 2026 by rpki-client