Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File: svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier: 89A26KszsARvDsZsfMrfgXbFJ5/ofLKQqD1q8hjCEwQ=
Subject key identifier: 30:4B:C1:7F:05:90:CB:02:C1:F6:34:96:EA:16:BD:B4:66:B5:88:6A
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial: 019CAED9C7701AE51B10BDE3F25D1A684790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number: 10EE
Signing time: Mon 02 Mar 2026 14:00:33 +0000
Manifest this update: Mon 02 Mar 2026 14:00:33 +0000
Manifest next update: Tue 03 Mar 2026 14:00:33 +0000
Files and hashes: 1: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (hash: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc=)
2: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: JyTZsrW9FdqlfCNvlfCQw2x1HmIz5gttImJgJyoTHMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c7:70:1a:e5:1b:10:bd:e3:f2:5d:1a:68:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
Validity
Not Before: Mar 2 14:00:33 2026 GMT
Not After : Mar 3 14:00:33 2026 GMT
Subject: CN=304bc17f0590cb02c1f63496ea16bdb466b5886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:ba:83:3b:53:7e:f4:bf:3d:ca:e4:06:f0:
b1:de:ef:81:cb:6d:83:d3:c9:22:a2:28:1a:31:f0:
e0:04:4a:ef:50:65:ec:aa:4c:e9:5c:39:ea:11:e6:
1b:cf:f1:cf:10:89:a5:41:b5:99:ff:43:4c:f7:7e:
be:48:14:6e:da:6c:10:d0:92:3f:1f:e6:70:6f:29:
2b:57:47:fc:3e:35:44:af:26:8e:cc:47:5e:df:14:
58:aa:80:00:ef:3e:52:01:96:77:2d:2a:b6:b6:a4:
22:24:09:76:59:20:c4:76:b1:73:80:39:92:66:29:
9c:a0:08:dd:a4:ec:ea:78:d7:e6:5a:3f:6a:dc:88:
c0:89:64:e4:68:80:61:61:e5:d1:98:64:d8:85:53:
a4:79:db:56:e0:a5:73:3a:6d:33:0e:fe:a4:23:82:
2b:b0:6d:63:5a:14:dc:fa:06:8b:f6:5b:5c:92:13:
3b:ef:29:b8:64:6a:8e:b0:e3:33:91:3e:ab:2c:1c:
7a:d6:2d:b4:8e:ef:42:d7:50:24:a2:80:f3:dc:99:
2b:4d:1d:4a:ef:5c:6b:4d:20:2e:44:87:f2:d1:9d:
ec:0e:c2:55:19:65:8a:bb:02:96:37:d0:03:ba:19:
3d:21:27:89:9c:13:cd:f0:7e:45:db:e7:a4:ee:df:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:C1:7F:05:90:CB:02:C1:F6:34:96:EA:16:BD:B4:66:B5:88:6A
X509v3 Authority Key Identifier:
keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:31:62:be:d7:ff:6a:b6:e4:63:d7:8b:eb:eb:13:da:30:3d:
b2:27:b1:00:4d:a0:c0:f8:e1:54:8c:c2:2f:e5:4f:29:c6:7b:
7a:61:08:c3:60:a2:e1:cc:92:7e:d8:de:8d:06:65:ea:4a:9b:
f8:7b:0f:c4:1c:e5:64:86:db:72:ae:3d:24:84:34:40:b9:0e:
e1:38:dd:0b:48:d7:ac:a3:4f:f6:ac:80:3e:de:5a:8c:50:04:
0e:b7:fe:82:e5:b3:1b:42:b0:e9:a4:d2:3e:d2:ef:d4:86:a9:
80:6c:eb:b6:c1:54:86:43:cd:ae:ba:f1:81:70:ac:cc:d4:45:
d1:72:7c:88:6f:69:6a:3f:8e:ef:58:a8:79:58:b0:8c:c6:cc:
9d:b9:09:bf:1a:1e:aa:36:5f:66:75:0e:50:e8:b7:74:cf:b7:
db:df:41:56:81:fa:ad:d9:1f:ad:08:b8:9c:0a:49:a7:67:cc:
88:4f:ed:80:f2:7c:e7:89:71:b3:00:85:e4:c0:12:80:e4:82:
80:5a:92:7f:0d:fc:de:0a:4b:c1:b7:9d:05:ec:13:2f:71:55:
71:1b:4c:41:ef:89:a6:59:6b:f0:5c:bc:80:4a:de:6a:93:0b:
00:1d:c0:f8:9a:34:65:75:ea:0f:47:37:a1:3e:d7:3a:27:a0:
0f:66:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:43 2026 by rpki-client