Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: MEl8+3x7jc7YckwNYikkHdoKd9Z9FU56UY+hOORriZY=
Subject key identifier: 5B:50:1A:43:77:59:E2:AB:4F:F0:10:8D:3D:D3:1C:63:35:97:E2:31
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 019CAA58E241CDD638790849A806554F58A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 086D
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 1D6YY4AfNvV2NepuuxtkGVV-rLg.roa (hash: LNZLVcujqagQzwW2q2V4qRkT/sBDkvN16A/NWVzLzWU=)
2: HOYPj4fxlJpMEgvz-DEwT478Zw0.roa (hash: 7P50ZlqJyO8nhGQCGcuWiJXDncM9pWzrp0URwjErvl4=)
3: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: O6AyVN7H2jcZn+5YESNKEiE2DWhKmKRfZqqiycS6hWY=)
4: UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa (hash: eu9hciCdi48z/WHUFfgsqnitXTRgtMV120uloxDdTDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e2:41:cd:d6:38:79:08:49:a8:06:55:4f:58:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=5b501a437759e2ab4ff0108d3dd31c633597e231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:16:72:3f:6b:da:50:fe:46:61:69:0c:c8:
04:44:5c:d9:b0:8d:c6:07:a9:9b:b5:9f:ef:71:60:
f9:21:b8:7e:c4:1d:18:44:42:4c:1e:c2:04:e2:f3:
5d:b2:65:dd:4b:0f:22:7b:e1:3e:b7:1e:6a:09:d2:
3b:1b:d3:ac:9f:25:81:66:ad:bc:92:4a:2c:87:d9:
1a:43:e3:43:02:72:28:aa:e4:b7:e9:a9:d5:d4:52:
24:38:f4:cb:c3:ba:28:18:f9:f9:df:f4:27:f1:21:
d7:16:dd:1f:c4:b0:91:d5:ad:a4:c9:e8:02:6a:1f:
a3:b0:d8:f6:3f:86:e5:94:69:ff:4f:66:d8:06:f3:
2a:af:f9:73:68:91:a2:fb:4e:b1:75:b5:ef:60:40:
e0:76:45:49:d1:de:15:8e:b9:48:c2:d1:bf:b1:d4:
4d:a1:cf:75:c9:97:d5:1e:89:c9:48:3d:99:03:50:
95:0d:c7:1b:c9:ac:79:12:3e:91:cb:9b:80:4b:1e:
de:a4:d3:40:2c:e5:d4:00:e8:6e:06:99:e3:ed:85:
76:c8:87:8d:73:c9:f4:87:ef:68:ef:98:3d:d4:b7:
76:6d:a0:95:72:7e:e7:30:9a:ad:30:f2:93:aa:db:
a8:09:f1:83:7b:e5:76:81:56:58:5b:70:70:02:0b:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:1A:43:77:59:E2:AB:4F:F0:10:8D:3D:D3:1C:63:35:97:E2:31
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:8e:c5:fc:c5:2d:35:11:98:2d:61:7f:71:e9:3b:48:7b:
85:3b:53:92:06:cc:ce:eb:a6:cb:ff:9a:83:52:fa:bd:bf:59:
21:96:ee:33:fa:97:19:08:a2:7b:26:ce:38:3d:5f:ab:95:85:
36:f3:e0:28:cd:f1:d0:f8:c3:d0:df:a1:62:47:02:14:9b:8f:
a2:a2:fa:23:30:be:01:01:43:bd:c1:3f:01:77:57:a0:04:aa:
b2:ac:11:64:d6:50:47:4b:3e:25:67:93:c0:9b:ef:fe:3d:ce:
52:ab:4f:a4:fb:eb:b4:b2:a8:2c:5c:38:18:78:61:1e:79:34:
1c:8d:da:c2:14:d7:c4:58:b2:ef:59:66:15:b3:7d:6a:28:5e:
97:10:8b:46:ff:fc:19:02:ab:2a:85:89:b6:37:f1:10:80:d1:
19:05:6e:46:84:c8:fb:be:ca:91:7f:06:8d:34:cf:da:a6:39:
44:4e:cf:af:e1:22:a9:05:48:c5:76:47:44:eb:e6:01:7c:ee:
eb:17:32:62:c3:e6:c7:cd:32:7c:3e:49:43:31:37:f0:35:54:
bf:5e:fe:4d:b8:2e:b3:9c:a2:e1:52:64:2d:ec:14:5f:b0:03:
e4:8c:60:9f:f9:7c:f4:bc:28:a5:31:5e:76:d2:2b:d6:d9:c9:
f1:ac:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:02 2026 by rpki-client