Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: qNMKx0PXZK6/bncRAi4oY5Oz9rUhJ0LFRnXGCOmbCDU=
Subject key identifier: EF:29:E0:7B:C8:8E:B8:1A:4C:8D:C8:76:97:08:07:93:24:2D:2B:16
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 019CA9B3E1D8A9F39D51E7057DCD611FB50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 063A
Signing time: Sun 01 Mar 2026 14:01:03 +0000
Manifest this update: Sun 01 Mar 2026 14:01:03 +0000
Manifest next update: Mon 02 Mar 2026 14:01:03 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: mgvTefoAQGyzG+E7uuhiMwlsfykXt+0bBx2sSCXrSBQ=)
2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e1:d8:a9:f3:9d:51:e7:05:7d:cd:61:1f:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Mar 1 14:01:03 2026 GMT
Not After : Mar 2 14:01:03 2026 GMT
Subject: CN=ef29e07bc88eb81a4c8dc87697080793242d2b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:12:ef:60:69:b0:ea:86:95:f6:a9:3b:5b:
9c:4c:ae:b8:fe:8e:eb:80:e3:77:0f:cd:03:fa:f8:
ac:8f:c8:17:dc:cd:99:df:7b:34:3f:d9:20:aa:c1:
ff:ed:10:3c:fd:05:cc:90:00:c4:7c:f4:56:7d:67:
57:e3:f9:00:cc:61:73:2e:c4:c1:15:5c:52:3c:b1:
e2:d0:40:cb:cc:4b:93:7c:75:d1:70:a6:a4:46:35:
c3:db:a6:21:2f:2a:71:56:be:34:32:f9:11:b0:20:
7d:8b:6a:e8:d9:11:54:3a:55:0a:b8:04:a6:95:b9:
26:89:15:7a:6e:6d:ef:bc:bc:8a:94:14:c4:41:70:
40:63:81:81:f9:3d:78:ad:74:29:9b:20:c5:d0:90:
d0:85:dd:c1:22:b1:b6:f6:d0:40:3c:85:b9:f2:c3:
ce:b9:5d:39:0f:9c:b9:59:bd:2f:97:fe:ec:92:f3:
80:9d:d4:77:1b:9f:0c:e9:06:11:16:15:2b:92:9f:
90:0f:a1:97:0a:0f:a2:2d:bd:2f:f1:94:1e:25:60:
e1:b1:3f:5e:07:e1:44:29:c6:62:bb:c9:83:76:db:
d2:ee:73:13:d5:74:4a:65:55:c3:f5:66:83:5f:7c:
b5:92:77:88:87:54:d5:aa:c4:c5:2c:9d:02:db:6c:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:E0:7B:C8:8E:B8:1A:4C:8D:C8:76:97:08:07:93:24:2D:2B:16
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c5:38:f6:32:28:72:53:29:f0:bd:b2:c2:79:cd:04:c7:d7:
bd:a5:19:f8:b4:01:e8:f2:f1:b5:86:e3:55:ef:3c:9e:7b:d4:
0a:61:f6:54:17:31:4e:ae:e0:6e:ef:d8:50:d1:47:2a:cf:a3:
da:58:84:e9:fe:60:d0:41:83:9c:b0:85:b2:ea:9d:1f:36:6b:
6b:ba:94:77:b9:09:d3:6d:ed:9e:b8:d0:1b:a4:df:03:47:ca:
39:b7:45:c8:89:17:cf:51:a4:37:c2:b2:86:cd:a1:70:f8:ff:
8c:7c:c8:a0:7b:7e:60:0e:27:99:95:5d:c1:a6:7b:0b:ef:76:
e5:1a:20:ae:d4:9f:12:9d:d2:b9:48:b6:3b:8d:29:5a:58:12:
dc:fd:e6:9a:61:e3:d4:f2:68:ad:bb:5b:81:b6:dc:7f:d1:07:
59:a1:4b:50:2e:eb:3a:08:d7:25:2f:c5:05:82:aa:ac:9c:ca:
53:0b:de:e9:d8:7e:8c:aa:73:80:c3:16:c3:7c:d3:b4:5c:b3:
41:a7:97:3a:e9:f0:7b:52:96:29:4f:68:44:67:d5:2b:a8:2c:
4d:c6:d8:9d:e4:8b:b3:2d:19:b5:2c:ca:dc:6e:0d:b5:39:8e:
45:ad:a6:a7:e1:46:36:95:91:0e:e4:f0:e5:85:b4:19:7a:05:
67:26:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:33 2026 by rpki-client