Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier: +BaC9cuXUdyys4+SFR7eNV+4T7DAfT59yn/rghGEM4k=
Subject key identifier: 30:B9:D2:EC:72:FE:EE:2A:2A:42:C0:B0:31:9B:2D:85:76:F6:E4:73
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 019CABA1FE8AE3FC6AAB952DCB6864088A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: 0GY4sfqDm5oNRys4NMYCzyIRakmYSh2WmhIzusnpWjc=)
2: xkix9rxtRJKN9muc3A9znVU0wSY.roa (hash: qGsESUAEiY6Y+S9TBPbDTAxY1gqMsRCWWSHmRkuLruU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fe:8a:e3:fc:6a:ab:95:2d:cb:68:64:08:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=30b9d2ec72feee2a2a42c0b0319b2d8576f6e473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:7d:38:f4:c2:29:bf:00:4f:5e:19:a9:bd:
5d:d1:4b:37:66:3a:6d:58:22:5f:11:23:35:c0:25:
48:0d:83:38:84:39:8b:71:75:c2:18:dc:a4:65:01:
cb:d3:2e:44:65:0a:6b:fb:b1:fd:bb:79:68:27:d4:
68:b0:6c:83:df:00:9c:b6:02:53:e6:b7:2d:0f:72:
6e:ae:0d:e5:82:3c:97:44:e5:46:41:aa:52:b5:e4:
79:b2:b0:0e:11:f8:4f:ee:55:1c:98:11:d1:e6:3e:
5a:91:a3:56:65:f2:dd:b9:ed:67:96:58:99:81:47:
d7:f6:81:e3:69:8a:32:98:9f:aa:ab:0d:e4:ff:e9:
1d:a8:2f:c9:41:f0:f8:c2:10:7c:c9:9a:92:f8:63:
23:16:13:12:bb:f8:aa:07:09:f1:8e:d2:f9:02:6c:
a6:7e:b4:26:37:6d:15:78:63:9f:68:75:99:77:76:
43:cc:8f:0a:c5:9d:c5:05:e3:a9:7a:91:4e:1a:e3:
ba:fb:8c:01:db:f3:f2:e6:a0:1e:7c:e3:34:9c:01:
de:55:ce:ef:ab:c2:02:75:c1:46:84:e2:dd:b1:f4:
32:bd:d5:dd:4c:56:d6:7d:2f:7d:e6:9b:f7:d4:a2:
51:2c:7c:a8:d7:b0:8f:05:65:6f:4e:ab:38:fa:90:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B9:D2:EC:72:FE:EE:2A:2A:42:C0:B0:31:9B:2D:85:76:F6:E4:73
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4c:11:20:90:ee:9c:ba:a2:6d:92:92:b6:0a:a5:66:d8:8d:
39:fb:5f:85:7d:c8:0d:03:18:48:64:fb:e6:fc:bb:d5:b3:6a:
3c:72:7d:9b:2b:ec:42:46:43:7c:b2:06:49:1b:77:a2:fe:c8:
0d:62:9a:ed:52:80:7d:ee:cc:c4:d3:42:0c:ec:45:45:9d:a1:
76:98:5c:9e:f4:23:72:ee:6b:0e:20:6f:5f:9f:c4:b0:8e:31:
a7:5a:e8:c3:5e:a0:ad:5c:06:1e:bc:96:4f:48:0c:47:d4:da:
f6:f7:28:de:92:ff:ff:c9:2f:c1:7b:56:d2:4c:b5:06:44:7b:
df:a2:d1:07:8d:ba:d7:8f:f6:99:f8:fa:3a:ae:43:a9:2e:3a:
b6:9d:2d:f5:bd:5c:ab:4e:70:ec:3d:79:5c:c0:53:0c:67:4b:
e6:74:2d:96:53:24:83:88:c0:8e:b1:0f:5a:0f:d5:b0:db:d6:
af:85:eb:79:84:44:a0:eb:b8:de:9f:c3:90:4b:48:f2:11:36:
6f:12:69:93:9b:d9:64:da:36:8b:59:2b:e9:b4:9f:54:5d:6e:
08:4d:e0:ab:97:c3:c8:5e:d2:8b:c9:4c:12:e8:44:50:ed:cb:
10:dd:86:45:e8:04:45:5c:f0:9d:62:94:db:93:69:80:8c:6c:
2b:de:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:55 2026 by rpki-client