Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: nUhAv18xQI8APpHtkIwgpqh3Y1hdwJHSw89olSooAiE=
Subject key identifier: 09:49:B9:87:E3:F8:C2:2A:3B:FC:D7:F6:DE:39:91:01:57:1B:10:8C
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019CAC7E0FC28DFBB4ED16771E0A923F9CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 0CBC
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: 9KtcCJssA7VEFOfkZhEwt-nCZW4.roa (hash: j3u+N8kCJRmuv2zhaNserTw/6cAR6T0TMUl0BASzttg=)
2: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: EspfSe0/yMhnbbWBdvIxe/i5/pCN9zTr4/i/WGZ9Drc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0f:c2:8d:fb:b4:ed:16:77:1e:0a:92:3f:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=0949b987e3f8c22a3bfcd7f6de399101571b108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:ad:97:33:cc:d9:40:6d:37:e8:30:81:2d:
c3:c1:72:cc:a2:a2:04:f3:79:69:eb:5d:33:7c:68:
cd:6c:6d:be:a5:e1:31:42:39:83:0b:57:78:45:b4:
57:28:7b:1d:02:bc:c8:31:1c:8b:74:4e:83:41:a2:
1d:69:d4:74:09:82:d0:d4:e6:bb:8f:61:85:a7:1b:
20:01:c0:ab:03:fd:1a:b0:22:ec:51:c0:70:12:14:
81:c9:93:f7:f3:a2:50:04:c1:10:3d:5a:ca:2f:dd:
a5:0e:47:c7:df:32:fa:f9:c7:a9:de:10:e9:1e:ef:
9b:a9:fa:4c:ee:a3:0d:9e:d3:cd:e7:25:bd:1a:23:
48:95:68:3f:fd:92:f8:e2:72:f5:01:07:a5:d2:ce:
5a:41:44:fe:59:7a:54:37:8e:c3:f6:42:e0:19:ec:
ed:cd:02:a2:4f:7f:68:2e:5c:2c:ac:12:02:18:a6:
69:38:e5:e2:90:f7:25:71:7c:ec:70:f2:39:1b:b3:
d8:0e:ca:3c:9a:2c:1d:04:76:77:69:82:c1:51:e9:
93:76:eb:a7:17:bf:0e:9b:24:b9:76:80:25:46:d6:
eb:ff:33:03:47:4c:16:c7:a3:f5:0f:3f:17:3d:48:
3d:83:69:16:9d:6f:f7:15:1b:8c:8a:8d:e6:08:d6:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:B9:87:E3:F8:C2:2A:3B:FC:D7:F6:DE:39:91:01:57:1B:10:8C
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:f1:8b:ce:0a:3a:73:4a:8c:c9:77:9a:ff:db:5d:0d:c3:
81:ad:7c:d9:13:5f:38:52:dc:43:ca:21:e9:0d:86:aa:51:80:
cb:e6:3c:61:6f:de:35:39:ed:f1:69:1d:32:94:33:51:81:a4:
e6:26:07:2e:a7:56:6f:90:aa:23:12:36:3c:45:d4:ac:d2:38:
2b:ca:33:79:0b:de:29:91:69:55:e1:46:26:c4:ea:e4:a1:87:
3b:f6:c7:5c:b6:00:34:4e:a2:d5:6a:a4:e0:d6:28:20:2a:f7:
f4:8e:e9:b6:81:28:47:2d:8c:29:d6:41:e4:57:ba:8d:d8:b4:
4f:05:45:86:41:57:7e:94:0c:b5:ac:fc:14:67:d9:15:09:ae:
b4:dc:b6:c0:51:c0:ee:04:37:82:63:3c:68:66:05:7c:58:4a:
32:4c:23:e1:78:7a:f7:81:84:da:64:c1:c6:47:08:d8:5f:8e:
bc:3a:37:d4:e0:06:49:d0:09:29:c6:2f:68:51:c1:92:b3:ac:
3e:55:c6:dd:07:08:50:d1:7d:5f:7d:90:8d:5b:ce:32:ee:32:
04:c0:d4:93:44:4f:5c:e1:45:61:90:9b:13:87:1c:cd:0f:89:
b3:14:53:53:ad:58:78:94:e5:03:36:f1:42:ee:f6:0f:7e:85:
58:65:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:49 2026 by rpki-client