Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: BSpsIKC01HNWvvoyWwJI0mTxz7eM5LVM8DFNc/HpAiw=
Subject key identifier: 94:22:82:5E:41:D6:0B:C9:DA:7D:68:ED:FF:DE:9E:BE:09:5D:E4:B0
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019CA9EB7FFBA92989E3970AE60F5AC8B00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 067F
Signing time: Sun 01 Mar 2026 15:01:49 +0000
Manifest this update: Sun 01 Mar 2026 15:01:49 +0000
Manifest next update: Mon 02 Mar 2026 15:01:49 +0000
Files and hashes: 1: Cn7otlqrlBoH8eqplXyFDFxSHV0.roa (hash: KQg1ng+oRcwBjN4nRRG0LDNp+DR1AyFQwxX7EBSyZLI=)
2: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: jONEG2nKrTidWcojz7Sq/DF9VNCA4Ln1OegR2t1RdsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:7f:fb:a9:29:89:e3:97:0a:e6:0f:5a:c8:b0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Mar 1 15:01:49 2026 GMT
Not After : Mar 2 15:01:49 2026 GMT
Subject: CN=9422825e41d60bc9da7d68edffde9ebe095de4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:87:af:e2:86:72:35:89:42:2c:71:f6:6f:
ce:88:7c:05:cc:90:84:2a:aa:2b:2c:d9:0b:39:70:
3a:2b:c2:89:cd:92:45:69:c1:3b:8b:32:1a:46:17:
b9:f3:c7:25:97:f9:2e:a2:d9:b3:0d:ec:b6:0e:e8:
f0:4f:fb:94:28:77:a6:e8:80:84:4d:c6:f8:01:ab:
9e:3f:51:dc:78:b8:ed:b5:ff:7d:0a:8f:03:07:af:
79:2b:cb:d3:07:8e:5c:9e:e5:1f:40:91:94:1f:70:
2a:c9:d2:94:88:52:7e:95:e9:0e:18:f7:8f:30:2b:
03:35:98:a9:cb:b9:c2:31:71:38:63:ea:e3:1a:1f:
5e:80:07:3f:6b:da:cf:35:53:71:79:f0:12:9a:8d:
1c:51:ba:db:fa:ad:a6:04:5d:44:14:ae:ef:ee:20:
92:3d:d4:30:bc:60:5d:95:cc:e9:d5:69:40:5b:03:
05:fc:74:f0:66:1c:8b:58:b6:99:7d:02:65:95:44:
90:58:af:c6:79:b4:39:8b:c0:ed:59:2e:72:fb:d3:
01:86:40:c7:da:b5:fc:dd:24:50:45:b4:96:83:c9:
5a:df:5b:d9:22:2b:5f:18:e0:16:b8:e8:a8:37:3b:
58:19:7e:d6:25:eb:cf:09:01:dc:5c:37:d6:67:05:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:82:5E:41:D6:0B:C9:DA:7D:68:ED:FF:DE:9E:BE:09:5D:E4:B0
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:5f:d0:1e:40:db:51:da:63:17:17:eb:f2:a2:d9:0b:de:
ee:50:d1:99:30:6e:cc:c8:05:65:81:4e:5d:86:32:4e:38:03:
9d:d2:81:30:85:7d:8c:70:97:3c:a3:da:36:8e:7d:72:b5:a6:
90:26:54:c8:4c:79:9f:e3:65:2f:b8:86:5b:e3:ee:ab:5e:9a:
86:4e:bf:3b:84:4a:68:a3:2c:72:95:02:be:8a:08:fd:c6:47:
c4:a3:c8:b3:7e:40:be:1b:e7:ce:bc:a6:29:89:bc:bc:7a:f0:
14:e0:42:cc:7f:bb:c2:01:11:4b:a5:97:22:ee:29:1b:d5:04:
f2:1c:3a:67:ba:a1:11:2e:ad:9d:da:80:98:3a:93:d8:f9:a4:
23:9d:d5:b6:2e:84:ff:23:a1:a9:bc:d2:60:c5:c6:8c:ed:ee:
f7:e2:38:ff:fb:c1:66:81:53:05:c0:e4:8b:09:63:38:ca:ca:
2c:59:7f:50:9f:db:ea:3d:02:8b:d5:62:03:47:29:ff:93:44:
42:85:47:23:b8:e6:55:d4:56:01:7d:95:37:ff:df:61:40:d2:
00:64:62:c1:cc:31:58:77:17:2e:d2:57:f4:c0:2f:70:2f:6c:
c3:e4:27:e0:9a:a0:40:8f:67:04:25:71:e3:5e:2b:b7:2d:19:
18:49:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:14 2026 by rpki-client