Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: fJSCJeN3XciuvcTxj+HtRwbsdTtyXfshTwXyolE0Pwg=
Subject key identifier: B6:FC:B0:E7:84:CE:D6:5B:6B:8B:52:B1:D2:C2:30:6E:DF:66:E7:0A
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019CAB6B1CBEFD4620CF85511A19B0E92959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: EH/qvvpGizetKg2mZRnJy8DYSJWdphg9tR/smxzTpIc=)
2: eBuAc98eLhdzaSpEXuI8KUheXdk.roa (hash: ZAyeKkTZKpzp6DSuRIfinH6S1nkpaZ2M6lG5LcE6ZAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1c:be:fd:46:20:cf:85:51:1a:19:b0:e9:29:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=b6fcb0e784ced65b6b8b52b1d2c2306edf66e70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:07:98:f4:1d:b2:93:f7:8e:61:7f:c7:a3:4a:
6e:2b:1a:09:56:58:2a:72:f6:19:b8:8c:d1:86:8b:
36:db:35:d0:c0:17:09:db:d7:f0:f5:2e:2d:28:cc:
67:d0:37:5c:1c:13:f5:24:21:ff:31:f6:55:a0:2b:
ec:b1:80:a9:5e:3e:10:a9:ce:8a:a7:16:77:38:29:
e5:ba:ff:7c:fc:11:f7:50:25:f9:6c:3f:0a:96:1e:
18:04:6c:5a:14:b1:dd:44:d2:1c:4c:6d:3a:8f:e3:
f8:d1:76:f7:f2:1e:46:fc:fb:aa:6c:bd:1a:72:12:
83:81:62:c9:79:71:20:75:cd:58:98:c6:4f:e4:ed:
8e:90:b7:da:33:bd:44:93:54:7e:a0:99:bb:b9:5e:
76:47:aa:b1:01:fe:96:5a:68:6c:f1:4f:49:da:43:
8d:f3:69:5f:08:03:06:cb:8c:52:20:81:d6:b7:fc:
78:8b:6a:95:1b:bc:c9:24:b2:9f:db:39:a8:4e:6f:
08:48:bf:5c:9d:30:5e:aa:ab:fc:cd:91:8b:16:cd:
be:31:29:b1:87:ca:e7:d0:13:ba:f3:66:87:56:5e:
45:71:d6:37:07:77:6f:3b:ad:d3:eb:a8:46:cc:c8:
59:02:4c:80:75:dd:1e:7c:d8:24:8c:64:ba:6f:ea:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:B0:E7:84:CE:D6:5B:6B:8B:52:B1:D2:C2:30:6E:DF:66:E7:0A
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:b4:10:f6:bf:91:a8:26:a8:59:8d:0f:35:fa:37:8a:7e:
cb:ed:61:c9:b3:df:be:bb:08:2f:d8:89:d5:04:3b:3e:32:de:
f5:21:3b:22:2b:11:36:31:76:41:7a:34:fc:0b:76:a4:5b:92:
e4:52:7d:68:10:0c:4b:15:52:b0:f1:fe:12:e6:35:3d:e0:4f:
f4:35:b2:eb:6f:3a:48:ae:e0:9b:67:93:d9:42:20:06:07:13:
0d:46:39:03:a2:5a:dd:e7:69:f5:1c:2a:49:ae:e0:44:e0:a8:
5b:2e:ba:fd:60:c4:c8:eb:1f:d1:f2:af:e2:f9:69:58:25:bc:
08:c7:08:d8:79:18:c7:78:9a:c6:a3:3a:7f:f3:31:37:5d:4b:
6e:97:80:e6:cb:a0:ca:78:51:08:a7:97:05:94:0d:5f:01:ef:
54:57:f6:3b:95:eb:ba:b8:9d:d8:aa:cc:e8:bc:82:80:7e:39:
f4:91:79:ae:8f:91:f5:3a:e2:ca:30:52:fc:cb:b2:71:68:ce:
5a:9b:14:7e:57:fe:c0:63:00:85:ad:42:90:73:a8:df:3a:be:
31:7b:f9:48:93:a9:7c:57:6e:70:29:ae:32:d5:3b:0e:44:36:
4b:c1:bc:b9:99:53:60:69:76:1c:47:8d:ea:e9:fe:02:ae:b9:
1e:39:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:04 2026 by rpki-client