Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: A1rIn9sLl/OeYt066zhh9TjVvdw0Tp+li+Dz+t8m5pY=
Subject key identifier: A6:B7:06:72:76:EB:AA:5A:A4:3B:9C:88:41:C7:4C:EC:54:D9:2C:87
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019CAC468D41B3CE3D0D5DCD366E0321574D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 1716
Signing time: Mon 02 Mar 2026 02:00:30 +0000
Manifest this update: Mon 02 Mar 2026 02:00:30 +0000
Manifest next update: Tue 03 Mar 2026 02:00:30 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: Di7IdsU6N+r6A1gEnORhtLxMc0i+lys9cNPjKUTQzoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8d:41:b3:ce:3d:0d:5d:cd:36:6e:03:21:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Mar 2 02:00:30 2026 GMT
Not After : Mar 3 02:00:30 2026 GMT
Subject: CN=a6b7067276ebaa5aa43b9c8841c74cec54d92c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:a8:e8:f2:e4:db:7f:fe:cb:c2:5c:e3:44:
7c:e2:ef:ef:ad:83:27:c2:70:7b:42:2a:3b:57:23:
4f:87:71:26:af:3a:c3:25:07:ef:29:e2:59:a1:7f:
77:8d:f4:0e:3f:55:a0:7c:a2:f3:b3:28:cf:11:4b:
32:79:1a:ab:d3:54:64:f0:27:18:37:3d:48:e0:ac:
04:e0:a0:52:f5:66:6f:9b:fe:be:7e:ad:71:7d:74:
ab:93:28:fa:4c:d5:2e:8d:aa:d0:42:7f:ac:c2:10:
2b:f8:ca:75:99:32:c8:ca:d2:52:2a:58:c5:e4:17:
a9:3e:55:02:bf:6c:82:29:67:0f:78:84:4f:d1:e1:
ef:c4:da:22:4a:1c:5d:ec:7e:92:e3:b5:10:a4:32:
ab:69:84:75:38:ea:dd:48:e3:13:69:fb:08:32:11:
5c:75:64:ab:79:48:e7:31:cc:75:c8:b3:d5:1f:b5:
3f:c0:57:52:40:ba:b0:7a:c9:26:de:c8:5c:1f:7e:
15:8e:6d:7e:3a:62:d6:f4:4f:aa:23:aa:0f:d8:33:
32:6e:5d:b0:e3:06:5a:42:fe:ca:95:cb:f4:1d:29:
c8:00:e2:d8:e0:44:c9:5d:a3:ee:bf:4c:d7:10:3c:
f7:cc:c2:f5:05:27:be:9b:18:9c:d5:2c:1e:fa:78:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:06:72:76:EB:AA:5A:A4:3B:9C:88:41:C7:4C:EC:54:D9:2C:87
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:03:cc:f4:ba:aa:39:1a:24:08:de:0d:94:6d:ef:ce:10:cd:
f8:2d:eb:dc:d5:ce:d3:bb:cb:17:cc:4e:2f:2b:b5:de:82:a0:
aa:b3:1a:99:e4:a5:4b:d9:b9:ae:26:43:e1:a9:23:0c:4e:dc:
3f:48:dc:41:d2:5c:d8:e6:33:a1:be:c0:a8:03:10:da:ad:a0:
f5:2e:03:18:36:e4:a8:a6:66:9c:72:b8:7a:3a:2c:ff:5f:e1:
c2:ca:c3:ac:bf:f9:c7:1c:f2:1c:4a:ea:4d:38:69:3c:23:df:
b6:f6:e6:52:46:45:51:cd:00:74:3d:ce:11:40:60:d7:02:cd:
b9:a1:12:32:ec:ac:ec:98:3a:20:59:0a:a9:0a:6d:e3:64:28:
f3:c8:0a:2c:65:fd:30:89:5d:ec:6e:c3:58:d1:2e:5a:71:88:
97:38:e9:a4:04:e5:a4:b0:64:ba:cc:89:e9:05:cf:83:ee:61:
31:a3:2f:1b:15:d8:0a:6a:eb:eb:f7:a8:57:6e:be:b9:93:7c:
05:98:95:ab:e5:a3:3d:29:ea:f9:0b:b0:87:b7:76:db:f2:5b:
0c:d1:48:d6:28:29:60:71:7d:96:20:8f:40:24:8c:57:50:c0:
70:11:80:4b:d4:2a:ad:00:b8:20:27:d3:85:d5:8f:11:37:03:
49:45:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:58 2026 by rpki-client