Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: S5AreaLbKA5XmmUSESymBZopzi5M/FF//jcxeZ/QjGE=
Subject key identifier: A0:65:91:4B:4A:95:56:72:FF:09:BF:46:B6:06:83:F3:FD:B2:82:28
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 019CAAC647C08361168991CFB1D9C87D7E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 15B2
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: 0rHn/H9NbJJ7oRa75hk5rZv6C9HLIywb9DBoEofsyAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:47:c0:83:61:16:89:91:cf:b1:d9:c8:7d:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=a065914b4a955672ff09bf46b60683f3fdb28228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:e2:4d:7a:10:f9:89:6e:c8:d4:64:b7:ef:
e1:33:26:f0:c9:af:83:94:1c:a7:2c:84:5b:2e:b2:
9e:ba:6d:7e:73:19:bc:7e:6c:4d:ce:81:95:40:26:
3e:be:66:6d:cd:b8:3d:4c:d4:21:bb:51:20:79:15:
bf:10:4e:7b:3e:41:d8:82:83:db:b5:28:36:1b:39:
b7:56:27:3c:78:6f:4c:5c:3f:d5:ec:59:2d:c4:02:
95:8a:a8:3f:81:ef:52:bf:2a:a1:6b:81:bb:ed:fa:
22:c1:db:24:e2:8b:fe:67:4d:73:9a:0a:0a:e3:34:
4a:d8:f8:a6:0c:3d:ce:6a:9c:4b:c2:7d:43:13:29:
4b:f6:f2:8f:da:7e:48:2b:f2:61:35:89:4f:5f:34:
16:f0:03:b7:6c:ae:f0:89:52:c9:4a:2d:c2:86:14:
83:71:37:50:04:f8:01:c2:85:64:f3:92:bc:f5:3e:
91:e2:43:de:7a:7e:6a:d4:a6:e2:09:37:2e:3e:dc:
98:81:4d:25:7c:95:cb:66:c7:1e:63:c5:99:13:98:
a7:33:44:ad:4a:45:3a:78:69:0a:ab:6d:3e:57:95:
db:41:d4:32:e9:6a:a2:91:27:1a:ba:94:5e:e3:f0:
42:b7:19:fd:12:ab:02:36:a7:36:cc:2b:7f:e6:67:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:91:4B:4A:95:56:72:FF:09:BF:46:B6:06:83:F3:FD:B2:82:28
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8b:af:ba:4f:47:77:02:9d:e1:2a:e9:a7:af:a6:d1:24:9b:
fe:01:2e:44:4c:21:ce:cc:a8:58:30:f7:96:be:14:b9:e0:8b:
74:49:38:d6:4f:ce:18:b6:2b:e4:eb:4b:cd:21:ec:49:5b:f2:
be:58:ae:a7:af:41:bf:41:35:0b:cd:6f:38:20:4d:c5:09:30:
5d:f9:a7:0c:0c:29:0f:84:cb:6b:76:12:85:49:a1:5d:6f:e4:
75:34:ed:bc:57:73:80:08:9d:52:c7:07:5a:17:62:dd:44:a8:
82:cb:66:77:16:ab:1c:09:33:21:f8:ed:be:59:43:4c:8a:c3:
4b:24:ba:97:76:d2:b2:31:03:18:d6:ad:a4:ec:98:6b:51:e7:
1a:6b:dd:92:0a:c4:a0:4f:22:f1:c2:a0:1d:82:8d:bf:d2:bc:
ce:e4:75:ec:62:6d:6f:02:c6:3d:20:33:25:a5:e6:e2:65:8a:
77:56:67:00:3a:95:2b:04:f6:53:9f:41:c3:17:55:dd:8d:3a:
47:d8:ab:5a:8a:5d:05:5f:06:b2:c4:59:89:25:62:df:cc:3c:
82:8a:a5:83:47:78:c3:ce:c0:f3:f6:f3:61:d1:b7:07:ee:61:
ba:0b:06:c0:ae:b2:da:7d:60:11:b2:70:2e:a3:26:6a:71:1d:
bb:c4:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:08 2026 by rpki-client