Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier: RDWvxIZjLsYxVWsPpDUspC8uCMPHtsadwPObnWTF+7g=
Subject key identifier: 49:4F:D9:71:50:C3:57:04:AB:93:D5:C0:AE:41:EB:D5:F0:97:2A:D5
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial: 019CAB33F9AE1C1DEEFDEEB5CB9531F9983D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number: 142D
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: uaHqrSc0XLPO0R2V5Hkpm5mYtZkLEhvBeN09JvHtpkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f9:ae:1c:1d:ee:fd:ee:b5:cb:95:31:f9:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=494fd97150c35704ab93d5c0ae41ebd5f0972ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:c9:06:50:27:70:8b:0d:53:06:95:ba:9a:
b3:44:23:69:44:b6:60:23:d4:ce:14:06:73:f4:28:
57:79:8c:e1:4a:cb:ec:62:2e:b0:69:be:e7:75:a4:
e9:c3:f4:ee:cf:74:e7:44:c1:dd:96:a7:0d:a9:8f:
97:71:77:51:fc:55:9b:27:e3:f5:b4:e1:d9:e6:2b:
5f:b4:5f:33:7e:e7:31:70:fb:6f:fa:e4:0e:a8:b1:
82:7b:48:13:49:a6:f1:a8:34:35:1a:80:1a:4d:ce:
66:dd:0d:ed:4e:a4:30:d6:a3:28:7d:48:8b:3f:20:
ba:9b:a1:70:31:c7:08:d2:19:64:97:56:2c:8e:18:
74:64:51:2a:6a:99:10:42:3f:43:ac:b4:d9:7a:f4:
43:03:f9:3d:f0:63:46:e6:2a:57:0f:74:1b:b5:d6:
4c:68:20:7e:5e:b2:bd:6f:8a:29:53:8c:5b:79:60:
92:c9:a2:4f:03:cd:64:42:3f:2d:fd:6b:0a:b7:09:
ec:f6:9a:80:89:27:ea:2b:f1:e4:8b:66:d1:78:ca:
b9:63:aa:b6:68:03:8e:9f:10:14:bd:3f:c3:26:60:
44:01:b4:df:2c:09:23:81:44:2b:95:a5:7c:e3:9d:
4a:27:11:fd:cb:2c:96:f0:18:ff:14:d5:ae:29:74:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:D9:71:50:C3:57:04:AB:93:D5:C0:AE:41:EB:D5:F0:97:2A:D5
X509v3 Authority Key Identifier:
keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:92:06:aa:8e:1f:4c:de:e7:69:49:0d:0f:c0:18:20:a0:
77:49:13:a9:8b:f8:18:80:e5:36:14:c2:05:49:3f:30:fd:4e:
04:49:2e:c0:24:8b:14:ad:2a:70:02:f7:14:10:c9:06:ab:a2:
32:ea:df:67:74:46:dd:9a:9d:00:35:cf:91:34:53:08:09:95:
81:9c:e9:1e:5c:e4:39:a6:34:6a:37:86:14:11:69:86:d7:52:
8b:1f:1f:6b:f1:4d:0e:e7:67:14:1f:ed:ea:04:91:bc:ff:e5:
88:11:2f:8a:f6:3a:29:16:0e:57:cb:2c:29:a8:c7:85:81:92:
cc:4c:a8:29:64:5f:b4:0e:e0:13:50:38:b2:87:e9:df:5c:f2:
0e:1b:8e:5a:cd:9e:44:f4:14:3a:fd:a3:9f:37:30:24:2d:13:
b7:4d:5b:3e:d2:7b:d6:e9:94:5f:27:fc:64:6e:46:7d:d4:db:
9b:09:26:69:c3:c1:27:64:77:6f:91:ba:62:5e:eb:03:2b:c8:
b6:ca:4b:f6:1a:8d:86:f3:47:9c:e4:95:1a:b6:1b:87:a6:c0:
54:fe:00:80:96:3e:7e:81:1c:fd:97:9d:83:55:6f:c3:12:53:
5e:0f:90:5e:ff:29:bd:82:c2:41:ef:98:b2:46:c8:47:b6:43:
78:68:9a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:57 2026 by rpki-client