Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: uT51NLh+VnFFge19P890ebnFMLa+IqfeJ8Oh3srh0gU=
Subject key identifier: EC:75:21:E0:0B:34:F7:10:FD:04:4E:CF:A8:5C:A3:E1:9B:00:0E:8D
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 019CB625EA7E75B2B31252A4B60CAEC4EC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1849
Signing time: Wed 04 Mar 2026 00:01:04 +0000
Manifest this update: Wed 04 Mar 2026 00:01:04 +0000
Manifest next update: Thu 05 Mar 2026 00:01:04 +0000
Files and hashes: 1: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: dw442VlP76qmkUfCgwVUU9/zO1I48cGd57YrdEiwxzI=)
3: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:25:ea:7e:75:b2:b3:12:52:a4:b6:0c:ae:c4:ec:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Mar 4 00:01:04 2026 GMT
Not After : Mar 5 00:01:04 2026 GMT
Subject: CN=ec7521e00b34f710fd044ecfa85ca3e19b000e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:be:0e:16:ee:eb:e1:1e:b2:dd:77:82:ed:
c4:e6:f3:87:1a:94:ac:da:41:aa:2a:e8:c1:78:33:
a9:59:1e:35:32:e2:49:e3:33:6a:e1:f4:4d:37:8e:
12:e1:4c:c8:39:bf:a2:df:64:80:f1:05:dc:a0:32:
00:91:72:e3:2b:64:38:ca:35:df:30:bb:32:ad:8a:
36:3c:ca:52:ac:b1:39:81:86:62:c9:70:18:15:ee:
0a:21:65:17:05:e8:b0:eb:08:70:a6:e7:3f:25:fe:
5c:b2:4b:49:c9:e4:9f:da:7a:3b:fd:8b:6e:0d:28:
e9:b3:4c:4e:7a:37:fd:38:d7:db:e0:14:a9:1f:35:
fe:53:6b:fd:0c:35:2a:63:30:7f:df:f3:10:7d:e0:
7a:c3:4a:56:01:37:a4:30:67:22:a8:fc:66:41:72:
77:80:70:93:43:da:a2:cb:5d:ed:08:a5:5f:13:af:
39:77:d1:1b:0f:c5:dd:b4:bf:69:49:6c:6c:8a:19:
ae:ae:12:eb:9b:ae:ca:a6:b3:16:d6:f1:b9:ea:fb:
40:c5:01:8b:28:6d:a1:44:c0:8b:a4:eb:0d:60:86:
ce:be:08:ce:95:05:a1:d9:66:da:d6:67:03:22:fb:
68:05:16:9b:35:61:ac:ab:08:3e:10:e0:77:49:59:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:21:E0:0B:34:F7:10:FD:04:4E:CF:A8:5C:A3:E1:9B:00:0E:8D
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0c:ed:5f:6a:30:76:a3:b3:0c:8a:84:dc:a3:37:5d:fa:38:
a8:d9:ef:95:d8:58:b5:22:36:a8:62:a5:ef:b5:11:5c:cc:c3:
d2:13:e3:f5:24:98:74:28:c7:3e:a5:21:af:27:2d:0c:b2:ec:
c8:ff:0e:ab:cb:6d:1e:06:a6:d8:f3:6c:31:a9:d6:3a:5d:8e:
8d:83:6b:e6:2f:dd:8f:e0:8c:61:4d:21:d9:25:93:36:34:fd:
2e:86:02:f4:d8:e6:9e:c8:08:12:86:5d:76:06:93:ea:7e:b0:
64:85:eb:79:5e:65:9e:c6:c1:4a:ea:3e:88:be:7b:54:de:5c:
3e:14:9c:b3:28:b4:13:43:88:14:6c:5e:52:d8:bc:cb:a7:72:
0b:1d:bb:78:c1:1f:2d:d2:26:a1:f7:a0:84:3b:03:48:bd:78:
07:de:3d:b1:53:3a:f1:f8:11:a4:22:7d:6f:9b:95:15:bc:52:
ce:fa:c1:b3:71:b2:5f:b7:f6:70:75:1a:6a:90:94:7c:7c:13:
fd:88:a7:76:d2:1a:3f:28:29:87:09:70:1d:03:c5:0b:68:41:
f3:08:ac:7a:70:85:7b:b4:ac:29:0f:a0:5b:6e:11:e3:af:a9:
4d:6c:93:89:be:c1:3f:30:8a:71:51:42:58:e7:f2:cb:d6:0c:
c2:68:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 06:21:29 2026 by rpki-client