Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: a4aohpf4FzMfOqWv0xkwhiGmWjDOmpDK6HMZ2/eqGRY=
Subject key identifier: CC:EF:00:E4:B0:12:BD:7A:36:06:FE:3E:94:81:5E:75:56:3A:BE:6F
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019CAC0FDEB7FEAA484570070640444E06F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (hash: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: 56llOOSGdqvtWnVv81dvnnA9LAtbOq1SlvQz1uy8Avg=)
3: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (hash: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:de:b7:fe:aa:48:45:70:07:06:40:44:4e:06:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=ccef00e4b012bd7a3606fe3e94815e75563abe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:54:f9:bd:40:24:7d:30:07:1d:6f:ec:c5:
18:ea:9e:db:ec:94:28:89:d7:81:83:b1:66:d4:9c:
1c:80:e4:e0:0b:97:7b:32:85:a7:94:b4:fd:9c:ad:
40:22:a0:59:c5:32:cc:6a:4b:e3:90:86:63:06:5a:
15:3a:b8:75:a5:f9:04:10:fd:51:de:25:22:63:3d:
50:e2:16:60:10:02:2e:bb:4c:73:2d:01:ed:f4:4d:
35:9d:5e:99:9d:e2:ff:0c:c7:11:85:c6:2f:57:00:
07:c6:0c:7f:b2:75:b0:84:d5:ee:83:c4:95:98:03:
25:c3:21:e7:10:94:46:a3:51:75:22:b0:6f:36:9b:
73:ca:27:43:73:e3:42:fd:ec:5f:b5:4a:9d:37:57:
b1:fb:63:1c:a2:e5:df:94:95:d9:37:d4:ee:b4:62:
f3:5c:97:a4:6e:59:da:3a:18:93:41:1f:ba:04:4a:
6a:5f:bf:84:0b:d3:37:96:53:a9:3b:72:bd:e0:e8:
58:65:44:de:0c:6b:f3:69:81:a4:40:9c:25:31:c5:
60:4c:26:15:7c:e6:5d:5f:ca:57:a4:e0:4e:af:b8:
5e:e3:01:b5:06:35:40:4f:90:1a:01:b8:5a:aa:9d:
3c:d3:f7:97:af:f9:3d:44:b7:f5:13:82:35:6d:b3:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:00:E4:B0:12:BD:7A:36:06:FE:3E:94:81:5E:75:56:3A:BE:6F
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:fd:2f:f5:e1:46:c6:b8:c0:cb:49:19:67:31:86:f4:cc:
23:75:54:66:b9:9c:0d:c9:95:84:61:e9:3c:86:1e:05:16:22:
1b:27:f9:ac:34:05:99:23:be:e4:23:d5:e5:b4:62:46:dd:2d:
b8:84:d6:f8:b7:53:f4:1d:77:8f:cd:bd:3c:a7:80:ba:4b:d6:
2a:09:23:42:d4:a5:8b:6c:75:82:61:cb:c7:71:16:4e:3f:b1:
05:e8:25:89:0e:1e:c0:86:c8:4a:87:ff:a0:08:cd:5d:20:30:
a8:61:dc:2c:32:1b:d2:05:01:8f:28:c5:42:a5:b1:fc:2e:72:
b8:6d:d6:18:ad:3c:ad:85:90:55:29:7f:e0:b7:61:34:5c:1b:
fc:42:eb:92:9c:61:71:5c:3b:fe:c6:4d:6a:cc:4d:03:bf:ad:
bf:06:6e:7e:d8:cc:7d:40:5e:e5:4c:47:be:c2:2a:68:65:15:
e8:cb:93:eb:ba:28:0b:3c:24:1c:bd:f5:2b:7d:1e:6e:53:bc:
34:64:6b:5e:50:b0:3d:3b:0c:f8:0a:43:ea:07:b8:37:b6:7f:
ef:d1:c9:3f:76:02:70:7d:f0:56:a8:be:f2:99:fc:ac:1b:ba:
79:5c:d6:94:4e:0f:51:aa:3f:7f:24:74:d3:28:02:cf:17:b9:
1b:79:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:16 2026 by rpki-client