Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: nRaNNfn7LIyK4JaZQMDhL01+oqo8f9ARc2yC60c+Ilo=
Subject key identifier: BE:5A:19:80:26:48:AF:AD:6C:0E:77:38:75:B5:9B:C7:0D:5A:20:79
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019CAC101CC9DC47AE6E2CB31F9C40D40690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 01:01:02 +0000
Manifest this update: Mon 02 Mar 2026 01:01:02 +0000
Manifest next update: Tue 03 Mar 2026 01:01:02 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: bET+/9chhMQhDVFYKwtTRmpgoSLGNLxZK6IzgZ3yquE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1c:c9:dc:47:ae:6e:2c:b3:1f:9c:40:d4:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Mar 2 01:01:02 2026 GMT
Not After : Mar 3 01:01:02 2026 GMT
Subject: CN=be5a19802648afad6c0e773875b59bc70d5a2079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:3a:ef:16:a0:74:ca:95:dd:54:8b:9d:95:
f8:05:b9:07:13:a8:2a:cb:9b:34:a9:42:b9:cd:57:
65:0d:1f:01:0d:5e:60:61:bd:9e:b2:28:1e:77:80:
40:a4:74:ad:be:b8:86:aa:7b:cf:16:8e:6e:e4:df:
84:41:8a:e5:b7:02:56:15:fd:91:c3:6c:ca:cb:ec:
52:5d:08:e2:70:a5:a4:c2:3e:40:ea:9c:ee:ec:f2:
89:55:ab:ae:8b:47:7d:6b:d5:d8:7e:aa:3f:c2:1c:
61:45:a1:d7:b7:12:77:f9:d8:f3:d9:42:ca:2a:f3:
4b:bd:79:2d:22:c8:3b:ee:4c:80:ac:4a:0e:fd:ef:
b9:47:65:b5:fe:fd:3f:8b:7a:14:f8:37:07:f9:e4:
21:c6:84:4a:b7:96:45:17:2b:47:91:d5:82:d7:89:
72:1e:50:fa:c7:bb:eb:d6:cf:79:c6:84:7e:1b:11:
07:3c:73:a2:0c:fd:22:2c:70:32:49:9b:ce:d3:88:
6d:07:90:ad:0d:21:45:0e:08:ea:e2:c5:b5:0a:62:
ea:83:67:78:99:e8:bb:73:f5:73:63:43:14:05:df:
35:9e:53:a1:f6:62:09:9f:40:c7:3e:7b:00:57:92:
14:d7:7d:65:07:fb:a7:49:a4:8c:1f:53:23:e7:ac:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:19:80:26:48:AF:AD:6C:0E:77:38:75:B5:9B:C7:0D:5A:20:79
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7b:c2:98:01:f7:69:05:92:7b:1a:ab:2e:47:44:4b:a1:7e:
12:b6:36:97:c5:b6:cd:f2:3c:42:ae:c7:7c:d5:d9:d5:c7:06:
c8:9a:8c:d2:31:c9:e9:66:ca:1e:6b:cc:d6:fb:90:cc:bf:e3:
ca:0f:17:21:8e:30:e0:b5:a7:41:e9:97:5d:11:e2:89:9f:25:
bb:cc:93:d4:4a:9f:6e:27:07:e1:f2:1c:e1:95:ae:ed:09:df:
e4:70:7d:f1:0f:86:31:12:0d:60:d0:93:0a:8f:cb:91:a4:bb:
4a:3a:7f:55:23:cf:b9:46:78:4d:c7:fa:6c:c2:49:43:1f:37:
cb:fe:54:b3:6e:c0:96:bc:2f:fe:73:21:82:73:b3:e6:01:65:
e6:a5:47:0c:91:53:b7:ec:32:fb:f9:d0:4d:78:9f:f7:60:6d:
88:c9:82:24:e1:e0:6c:12:48:d3:40:57:64:3f:bd:81:76:0b:
40:9f:3e:24:b6:b3:8b:8d:c1:54:7b:5b:84:06:a1:56:a0:dd:
a7:b5:d7:ac:47:35:f6:be:38:c6:b1:ce:55:44:ab:36:f3:ce:
df:14:c5:88:f1:9c:85:09:01:e3:d5:70:98:34:b3:ef:2a:5c:
67:97:05:ce:dc:7f:25:4b:c1:d9:92:d8:04:5f:43:b6:2b:b5:
a2:24:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:40 2026 by rpki-client