Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: DxuW7qOdPsqGMlzafcAdFnVr4l6kHFHewJR7ZtQtpC8=
Subject key identifier: 6D:E0:51:A0:C6:1E:72:FB:B6:DA:58:38:22:5A:9F:EC:3B:02:BF:68
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 019CAD22565E860151DDA32BE5C767587DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (hash: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI=)
2: fjMubu-qV26IszBH3XWThUEp1jQ.roa (hash: nM6/+tL+EeUavkkSwnU8Z5g0dAyeEyJMz2lMeFc9xyg=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: LFPqMkklCr28csGO1jOJP64XnCZETqqWfZnxqile/MI=)
4: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (hash: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:56:5e:86:01:51:dd:a3:2b:e5:c7:67:58:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=6de051a0c61e72fbb6da5838225a9fec3b02bf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:b7:ef:81:49:f6:5b:32:a1:69:39:a9:85:
64:7a:74:9c:d8:3c:98:b0:83:db:75:55:cc:13:83:
b6:23:56:bf:4e:b6:4f:be:61:6d:d7:f4:b9:27:82:
f1:93:a0:e5:16:39:75:6f:d2:32:f8:6a:d0:3e:33:
7e:ab:fa:fa:ba:2b:83:47:7a:47:47:9d:7e:cf:a0:
3f:49:e1:85:52:1b:13:f8:ba:e9:5a:6a:6b:17:f9:
ee:17:b5:75:a8:9c:86:07:ae:52:11:93:0e:b9:cd:
ec:bc:22:8b:63:98:8f:8e:46:21:52:f9:fe:0f:5e:
d7:b3:06:ce:a7:7a:95:80:2b:62:4b:8d:63:91:5d:
36:75:40:e9:66:bd:06:20:cb:a9:1e:f2:99:d2:26:
77:13:9c:4d:fc:00:3f:5c:a4:e4:86:75:ae:57:bd:
e8:cc:6f:cb:f8:e8:bb:37:d1:f0:54:48:8f:b3:aa:
27:24:59:17:b4:12:85:ab:fc:b8:58:8a:e5:e0:8c:
11:61:82:d3:69:c8:e6:84:ab:a5:d9:1b:68:ca:27:
4e:46:f4:93:a4:19:00:f6:70:a1:40:4b:0c:44:8d:
f2:69:8d:2d:3d:2e:a2:d8:38:ef:09:53:f0:85:61:
97:5c:7d:b6:61:01:c0:c1:b5:be:25:9a:63:e8:30:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:51:A0:C6:1E:72:FB:B6:DA:58:38:22:5A:9F:EC:3B:02:BF:68
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:78:88:2d:89:5e:d0:37:5d:be:4c:d7:57:58:73:72:a0:35:
26:b9:38:36:4b:ae:43:81:cd:da:30:fc:f4:e3:01:52:9e:ef:
8a:61:95:6a:dd:21:c9:ab:69:6f:54:c0:eb:55:0f:02:b0:42:
c1:bb:a2:d6:2f:35:62:c6:a1:84:55:7a:9a:08:5b:fa:89:4d:
bd:cd:50:58:ac:13:d5:d2:40:06:09:f0:9c:f6:fa:b0:a7:c7:
0e:ac:94:60:6e:a3:4e:06:3c:81:22:00:23:84:ac:51:f4:8d:
6d:a3:a6:af:41:1e:47:91:30:d0:c9:79:41:7a:c2:f7:bf:87:
56:59:19:f0:03:59:0f:d4:fb:ac:79:ed:38:56:f3:f4:a6:c7:
cc:8b:ff:f9:0e:33:c9:b7:3d:05:6e:0e:ec:0f:dc:f9:cf:72:
c4:01:86:d4:7a:52:d4:15:24:59:d3:0d:36:a2:6c:9f:f4:19:
53:00:24:c5:3d:f9:b8:47:3d:06:c4:05:ba:d5:0f:f6:22:a3:
03:8a:a9:2c:8e:20:0f:8f:46:f0:65:b9:d7:2e:8b:0f:04:f2:
38:e0:97:eb:d2:37:1d:d8:a5:32:0e:e1:f5:4d:83:86:7a:4e:
d2:db:b3:8c:51:68:81:00:e4:96:41:5a:eb:dc:c5:57:8b:12:
e2:dc:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:14 2026 by rpki-client