Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: P0vzInOgYr+dSrEBGVZ5UGAbUyNj4yUtVmkKVPNSHys=
Subject key identifier: C3:C0:4C:2F:CE:10:2F:13:93:AE:24:27:4E:7A:3F:80:89:B2:7C:22
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019CBE16AA0C4A9F385A4B257CDD1B8AF481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 1853
Signing time: Thu 05 Mar 2026 13:01:22 +0000
Manifest this update: Thu 05 Mar 2026 13:01:22 +0000
Manifest next update: Fri 06 Mar 2026 13:01:22 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: jN5tB7JV+8I7F5nyLuCZQdmrPSB7SgQD2LR7vGqA9Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:16:aa:0c:4a:9f:38:5a:4b:25:7c:dd:1b:8a:f4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Mar 5 13:01:22 2026 GMT
Not After : Mar 6 13:01:22 2026 GMT
Subject: CN=c3c04c2fce102f1393ae24274e7a3f8089b27c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:50:5c:b0:fd:95:f0:9c:11:1a:a4:2b:a1:
b0:c3:6e:86:c1:2b:ae:a2:26:6b:e6:3e:f5:ba:a7:
b1:f2:dd:10:73:1a:54:20:47:d7:c9:8b:b7:90:47:
32:26:1f:a2:da:a9:be:9e:1a:8c:07:48:75:ee:4c:
36:be:16:e6:81:b8:2d:d1:0e:74:33:30:0f:05:60:
36:6f:d1:0a:0c:6a:f9:fe:f8:06:7f:58:5e:3a:cc:
21:3c:cf:da:f8:21:ba:1f:eb:03:f0:88:78:fe:9c:
00:66:a9:10:db:8c:d3:0a:af:a0:e4:7a:6b:90:6a:
e9:51:aa:88:f5:01:6f:42:d3:95:2b:49:47:4c:69:
81:f4:3b:9c:a7:84:dd:d0:da:18:5d:3c:da:da:22:
74:3a:9a:e4:ba:ea:10:de:6f:9d:44:67:b8:b8:73:
b1:ab:35:45:8f:23:25:5b:7d:bb:8c:13:65:55:d2:
73:1a:88:62:d4:97:44:7f:dc:37:d7:0e:59:9d:68:
3d:6f:66:f2:3a:02:9c:91:a4:ab:a0:65:57:1e:dc:
b6:44:a4:e6:01:9d:85:dc:21:75:c6:7e:38:69:bc:
8f:c1:56:e6:e3:d9:32:2b:46:ce:b5:6c:53:62:4f:
07:20:cc:47:8f:38:30:23:0e:93:f8:a5:cc:12:6d:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:4C:2F:CE:10:2F:13:93:AE:24:27:4E:7A:3F:80:89:B2:7C:22
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b8:25:ca:58:b9:cd:e8:5c:56:25:64:9c:87:96:b5:a1:ff:
48:bd:01:4c:e6:99:cf:01:16:c1:ed:a0:77:ab:7a:ad:3a:51:
d2:87:28:db:c2:9c:74:60:3e:11:bd:22:5f:72:df:3b:e6:12:
95:b3:bf:a0:37:28:c6:55:48:c8:34:6c:6e:db:05:ca:9f:f1:
42:e8:3d:9f:36:37:a7:81:6b:84:b7:9b:71:a3:7e:90:58:3a:
dc:15:5a:59:90:41:42:f4:3e:0b:45:12:7f:b0:54:cc:cd:b5:
e5:63:66:10:aa:38:dd:a4:92:21:b3:18:3b:4a:af:f1:7a:5d:
a5:fa:9d:49:78:b0:29:2f:af:d3:57:5b:23:e9:90:e4:c2:f4:
98:7d:ac:cc:4d:44:e2:6b:a3:9d:54:c9:8b:71:02:df:af:44:
70:09:ad:82:17:62:12:ca:d7:66:26:fc:a7:b7:94:41:17:51:
c0:6f:21:6d:b8:06:27:7d:d9:f8:9f:f0:4f:e5:10:90:ce:a8:
34:d8:eb:44:54:64:c9:68:e4:f6:d8:d1:0e:32:29:06:5d:6b:
28:74:d7:bd:52:55:5b:71:a3:37:42:bc:5c:3f:4b:05:94:35:
c9:23:b3:c0:02:96:94:66:22:4f:03:97:a5:07:60:bf:6d:9f:
12:dd:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:32 2026 by rpki-client