Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: K2xXNZ1HsbmiTplP0nERKeyLvw5B6CZY4sGPEAbneyA=
Subject key identifier: 6A:78:0D:7F:F9:0B:27:52:51:00:BD:15:20:6D:59:FA:49:BB:30:46
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019CAA58E570ABD1E81C58E6FC05EC7D2652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 1860
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: 2wEm6trbRe418QcXgboM4cakGKmbdLdTbYwQEJ9fJr0=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e5:70:ab:d1:e8:1c:58:e6:fc:05:ec:7d:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=6a780d7ff90b27525100bd15206d59fa49bb3046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:75:34:c1:3d:69:6d:d2:e3:b4:2d:68:47:
9a:87:ae:6d:a8:13:75:bb:75:f5:6d:a0:7b:33:f7:
60:fe:6d:34:eb:7b:5e:a3:fb:36:4f:15:9a:03:38:
a8:0a:d7:75:da:63:20:65:51:32:ab:ce:44:34:04:
fc:17:a2:c5:32:31:53:84:52:e6:f4:98:34:10:61:
3f:97:c5:fd:46:3f:94:10:e2:98:04:ed:e0:06:a4:
4a:b4:a9:fa:38:47:f2:59:24:ba:9b:50:7a:01:a6:
16:79:d0:b4:46:8e:6e:f3:d5:0e:9d:b7:85:36:f1:
0c:d3:d8:10:89:b4:38:ce:c2:75:f3:08:e4:63:cb:
c7:6f:26:7c:c8:4f:fa:7c:c0:12:e4:1d:f0:e5:f7:
63:9e:15:fd:df:2d:80:47:ad:a2:ea:f9:b4:95:bd:
2d:9c:90:db:8a:fe:7b:80:99:85:9a:8a:4c:85:84:
e8:60:8b:84:b0:41:53:f6:3f:3f:49:81:d4:7d:18:
a9:cb:a1:bc:15:15:60:e4:9f:59:4b:1e:5d:15:98:
34:d8:0e:1d:62:8c:ea:00:ff:72:09:9b:98:69:44:
12:f2:a0:da:1e:31:ee:8b:1f:23:eb:e4:a9:ec:3e:
da:77:88:37:3e:bc:0f:54:f3:63:de:69:5c:12:d0:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:78:0D:7F:F9:0B:27:52:51:00:BD:15:20:6D:59:FA:49:BB:30:46
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e8:77:81:f2:3d:06:bd:ee:22:3a:c8:e0:87:cb:4e:c4:6b:
38:a2:aa:43:dc:b3:b5:a0:cb:b3:67:ce:bb:96:c5:a3:cb:fc:
f8:ae:e9:5d:42:92:f8:c2:24:cf:33:95:2d:2f:2b:f9:d3:3f:
96:e2:61:55:bc:a6:78:29:95:fd:0b:9b:0e:0f:23:1f:9b:68:
02:5b:ab:62:c6:4f:a9:fc:e6:18:2d:b9:12:97:3d:4c:ab:c9:
f1:a8:66:3c:78:0f:8d:9d:69:3f:34:ba:c6:42:bc:19:80:b2:
68:c3:20:86:50:cc:8e:99:e9:bb:89:c0:c6:cb:37:56:19:1c:
08:b3:41:31:b0:d6:80:b9:9f:71:35:38:ae:80:e1:43:a0:76:
7c:0e:76:fc:ec:96:3d:02:c4:21:e8:c5:24:dc:da:da:71:ff:
54:a4:26:5e:24:2b:49:78:ba:8d:db:90:2a:d2:d0:d8:82:12:
dc:85:3b:0e:4a:71:0b:34:b4:b2:44:b2:45:f9:84:21:01:c3:
e4:76:b4:41:b5:ac:0d:66:b4:df:f2:d3:81:db:87:f6:ce:8f:
9b:cd:8f:95:31:e8:7e:77:2f:66:15:31:35:fa:11:f6:68:0f:
10:cc:02:23:d8:5d:c4:15:db:bf:2e:2a:16:b7:e4:e1:32:bb:
68:63:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:06 2026 by rpki-client