Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: d6Gko1yisfCApnj4JFlGlwWI3BwtrNir5hLjzP5v8Cw=
Subject key identifier: B4:45:F3:64:77:1E:75:F1:AF:59:AA:A1:F5:2B:39:30:7A:50:87:C9
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019CAC477F122D13A7C35220BF254FEF3553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 05EB
Signing time: Mon 02 Mar 2026 02:01:32 +0000
Manifest this update: Mon 02 Mar 2026 02:01:32 +0000
Manifest next update: Tue 03 Mar 2026 02:01:32 +0000
Files and hashes: 1: 1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa (hash: PVKqYKVsrFFdzBy/HzOODB+3DNbkSFcoEgOpBYpqHGA=)
2: CqH1FECBpIHfp2xhFgzsj89DsXQ.roa (hash: FwLSU2137U6zawDtXqOxsfLW/s4zSGCVB1UE9CXia1Y=)
3: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: hOOgWWquEnBoKc0q0bMnGMbMZT3o63wkJB0+J1dTbQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7f:12:2d:13:a7:c3:52:20:bf:25:4f:ef:35:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Mar 2 02:01:32 2026 GMT
Not After : Mar 3 02:01:32 2026 GMT
Subject: CN=b445f364771e75f1af59aaa1f52b39307a5087c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:bd:4f:16:23:84:ee:6a:fa:e9:03:b4:a1:
27:0d:98:c2:24:5d:f7:dc:03:51:93:c0:43:eb:6c:
d0:db:7a:93:15:b4:78:5f:80:22:6f:32:3d:5a:60:
01:9a:e5:d2:40:7a:17:48:f5:8d:95:f2:18:5f:cd:
6d:6a:f9:10:e6:ef:7f:3d:d1:b1:28:cf:51:2a:38:
51:27:73:11:02:3b:0e:43:5d:0e:b4:e5:47:e5:f7:
31:22:c0:d2:65:9d:1f:68:82:3f:7d:dd:d3:2c:e0:
3f:14:9f:e5:e8:df:19:5e:cc:63:4c:97:84:39:38:
da:f2:2b:a8:4e:09:7c:f9:13:04:c4:ff:f4:95:a4:
7c:0d:e2:1f:44:16:20:04:e4:83:e0:fd:7a:1f:c8:
ac:33:47:41:ec:ba:39:8e:cb:35:a2:97:7e:ce:3f:
52:87:9d:5c:34:61:c6:b2:93:fa:fa:59:e7:6b:59:
99:fd:03:ce:5f:1e:fa:46:c8:eb:50:6c:28:59:a6:
f0:91:52:57:1e:55:4d:11:15:55:fa:31:5e:e8:23:
dd:bc:d2:8f:be:03:1e:c8:ab:86:35:3a:86:5c:e9:
27:75:52:c7:b7:3f:4f:3a:7b:37:23:fb:a5:b7:22:
9c:3f:7a:26:4b:26:a3:e3:c7:75:12:28:49:64:2c:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:45:F3:64:77:1E:75:F1:AF:59:AA:A1:F5:2B:39:30:7A:50:87:C9
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:34:4c:60:53:8e:4f:de:7c:2c:e7:30:9e:ec:ff:d3:91:fd:
c6:a5:da:08:19:da:05:94:68:e1:01:a4:44:91:2e:c0:ca:2b:
39:e4:c1:89:3a:51:ec:b5:0e:c2:94:5e:ae:93:12:c9:cd:8c:
88:0f:30:7c:cd:e1:fa:02:c9:25:55:2b:67:28:cb:0e:c4:29:
85:79:ed:f0:ef:b2:05:7a:2d:f5:e7:c3:38:71:62:9b:a0:10:
29:f2:00:a1:19:f8:9e:9d:73:9c:c1:d7:88:5e:77:9f:b5:c9:
0a:42:3f:71:af:02:c9:a4:21:42:ce:03:cf:46:bc:dc:40:6f:
94:32:db:ab:19:65:13:a6:34:4a:01:bb:f7:78:3b:58:c5:09:
21:f4:d7:7d:4d:a5:fa:8b:eb:c9:3b:ec:a7:3a:54:6a:40:2c:
b7:fa:49:4e:b7:9a:c2:30:95:d3:9b:f3:73:de:d3:33:03:c3:
b4:58:94:42:20:06:ed:26:36:a4:b6:71:54:40:85:2f:12:89:
81:40:c8:d1:3f:e7:83:26:52:4b:2a:4a:49:7d:0f:89:56:84:
58:ed:9a:77:a9:c5:fc:24:99:94:29:01:a6:ce:f2:fe:15:bc:
82:4c:af:23:a2:28:6f:8e:ea:07:1e:7d:d0:7c:22:07:a1:33:
f0:b2:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:18 2026 by rpki-client