Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 0GzvXCBTotoQlKcgX/pxUtNAZRPdRuqe68WLFFriDZE=
Subject key identifier: CE:D4:8F:32:2C:A0:D0:87:A1:B0:4F:9E:43:C0:61:89:C9:87:2F:FA
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019CAAC69EEAFC8EF5253E0558D86F8CB5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 1149
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: 6u/z0iuEwro9slcYkIrmH97uQL4v6LJjShhoIVzLgIc=)
2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9e:ea:fc:8e:f5:25:3e:05:58:d8:6f:8c:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=ced48f322ca0d087a1b04f9e43c06189c9872ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:20:e9:8f:b1:c8:19:33:7d:09:a7:c2:f9:
a4:2a:e9:8d:aa:8d:29:89:2f:ab:5b:18:24:e3:cd:
83:b8:5e:55:08:b0:69:4f:05:5a:72:17:bb:49:22:
05:8b:df:94:e6:d6:e0:8a:11:47:7d:6c:bb:de:26:
ee:32:75:68:fb:50:16:cf:4d:b2:e9:af:3c:8f:b6:
44:9b:bb:bb:b7:70:ef:ac:94:d2:a7:82:c6:33:b6:
05:e8:43:03:79:0f:77:ae:9e:ae:2f:39:d1:36:aa:
75:b0:07:90:e4:1f:1f:23:2a:c3:55:fa:ce:ba:cc:
a8:b2:eb:43:42:88:0a:6d:5d:fb:d1:9d:ab:16:fa:
67:86:67:c3:15:37:27:0f:a3:6a:aa:75:e1:fd:2d:
81:f3:19:3e:5b:0e:e6:86:c1:a3:82:3f:65:f5:37:
bf:f4:db:88:f9:85:a7:90:41:52:cd:fc:a9:79:c0:
5c:01:c3:9c:3a:45:7a:69:fe:44:c2:93:28:a5:9a:
a7:c2:1a:f1:39:01:19:57:99:7b:2c:d1:c7:22:e0:
f6:77:0b:21:bc:68:2f:47:65:72:c9:a0:74:d5:34:
06:70:4a:21:49:b2:3b:d8:34:a3:fc:85:3f:1b:4e:
01:36:a5:c2:84:2d:05:c0:52:b4:85:f8:65:9a:f9:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:8F:32:2C:A0:D0:87:A1:B0:4F:9E:43:C0:61:89:C9:87:2F:FA
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:d0:ca:2d:22:8b:16:50:36:1f:43:ea:74:39:b3:c9:52:
10:d2:ae:30:2b:3b:20:8b:03:9f:7a:64:18:96:60:86:11:2d:
33:a0:b6:86:1f:2e:5c:8e:08:79:22:b4:0e:4d:6f:2a:0b:20:
77:d9:3b:d3:e5:28:e5:ae:4f:62:0c:34:1c:74:7f:d5:41:8e:
5e:bb:42:78:66:cc:11:46:9e:8d:85:80:3b:dc:13:88:92:03:
b5:72:63:c0:fc:74:ab:10:dc:7d:3d:65:a4:d3:4f:93:ec:2c:
0f:93:63:02:04:64:a7:96:89:e8:74:a2:e3:87:22:31:4c:de:
f3:b4:dc:1c:88:63:5e:42:6e:bf:4f:4d:3c:28:b8:f6:3f:1b:
54:5d:7e:77:fa:69:8b:0d:c1:42:5a:1d:d5:9e:57:85:29:38:
6c:72:a7:21:52:5f:c8:6f:26:61:e6:df:d5:82:15:0c:09:e7:
8d:1a:bd:69:83:e7:1e:89:3f:7e:4f:b1:40:e4:e7:93:ce:34:
f3:70:11:e5:06:1d:be:b6:90:27:4b:0e:75:6e:43:00:bf:0c:
9e:b4:3c:ac:1f:00:23:25:8e:3f:bd:d4:67:b2:98:8b:a1:b9:
d3:16:73:de:61:86:64:11:a5:1b:72:ed:fb:76:89:2b:2b:84:
ca:76:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:14 2026 by rpki-client