Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: llcOr1LXWPpqpY6rZMuhHrkzQGKD+bnD4GbuqoeOjgo=
Subject key identifier: 2F:62:B4:37:04:CB:5C:1E:DF:8B:C0:44:22:DB:B2:F8:CE:B9:BD:82
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 019CADFEB813BA1036DCE0106E915A9FE942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:01:17 +0000
Manifest this update: Mon 02 Mar 2026 10:01:17 +0000
Manifest next update: Tue 03 Mar 2026 10:01:17 +0000
Files and hashes: 1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: HVbjBpw9UetlsfNH77OTHAsxCZa+Gf4qXBPfj5GYUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b8:13:ba:10:36:dc:e0:10:6e:91:5a:9f:e9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Mar 2 10:01:17 2026 GMT
Not After : Mar 3 10:01:17 2026 GMT
Subject: CN=2f62b43704cb5c1edf8bc04422dbb2f8ceb9bd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:af:2a:50:69:92:3f:84:f1:ec:e3:a2:f4:
b0:06:11:72:88:db:2f:93:1d:c2:7d:12:b7:bf:ed:
9b:74:d9:8f:e8:af:89:51:7d:d5:16:71:5a:93:bb:
21:bd:a5:5f:fc:2f:09:cb:1f:0f:7e:95:fc:48:15:
55:48:a2:bd:62:03:b0:c2:f4:be:19:76:7a:1e:6c:
27:c4:a1:7d:65:ee:f0:7d:7e:11:7d:0a:03:ed:88:
06:dc:11:57:f3:48:8f:db:35:f3:cd:a9:97:5c:a4:
46:66:f1:cf:45:3f:5b:bd:02:6e:3a:cd:1a:47:59:
62:e5:dd:70:2a:e5:de:c8:3c:02:c1:fa:55:10:18:
bf:0e:61:b3:05:ac:4c:26:d7:2b:7b:95:dc:d9:55:
76:3f:8f:6a:e4:e5:c0:b2:b1:71:45:73:23:ea:0a:
d1:c3:5e:f4:62:5f:0e:ae:90:cc:d6:8b:de:46:7f:
05:b3:08:69:71:c0:05:e7:d7:c1:62:4e:9a:44:5d:
0e:e3:fb:2a:b8:21:1d:46:e8:36:19:fc:e1:02:e0:
50:09:3a:c0:03:cc:4a:ec:ec:fd:8f:6a:26:03:d7:
b4:0e:ac:af:0b:64:23:ac:dd:af:6e:17:b5:78:a4:
b9:01:a1:1f:cf:f1:f7:e6:c6:98:d1:34:50:35:1d:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:B4:37:04:CB:5C:1E:DF:8B:C0:44:22:DB:B2:F8:CE:B9:BD:82
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c1:f2:8f:73:5e:ee:5d:4d:9e:a6:18:34:a2:bf:78:08:86:
02:4d:4f:3b:d9:54:d1:5c:96:93:67:8d:1b:4d:73:6b:8c:16:
71:ae:be:c3:79:f9:00:56:31:06:47:d5:27:94:ac:f0:a0:9f:
87:e1:30:8a:4a:d8:aa:ea:ba:fa:d9:ab:d0:27:cf:fe:39:69:
de:f6:17:b6:54:12:45:b0:47:ef:2c:9b:c5:2f:c7:15:39:aa:
4c:d7:b9:f3:98:a0:9d:2e:35:c8:26:8a:b1:a0:86:d1:3b:f9:
72:b6:58:cf:f8:0e:62:42:ea:63:51:00:f9:73:88:29:aa:e0:
53:1c:c8:19:1a:9c:b3:b8:e8:43:c0:ec:0e:02:f8:04:91:e5:
eb:56:50:ed:3b:14:42:2b:a1:b3:cf:d9:60:d3:50:17:4a:28:
21:20:e0:e1:cf:20:b0:14:7c:11:36:7c:0a:09:b6:b9:ba:f0:
1b:7f:15:f3:cf:48:19:61:b4:1c:a3:15:2e:72:72:c4:c7:dd:
21:54:d8:df:77:02:f4:e5:e5:ed:f9:be:67:f8:cf:2c:aa:26:
37:9a:d8:64:af:e8:e4:d2:18:62:a1:e9:f3:1d:e1:d0:2a:32:
44:63:b4:f6:a6:2c:de:18:f9:44:c2:d0:64:3d:2a:22:23:0b:
d9:3d:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:53 2026 by rpki-client