Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: dlFE7CVhZ1fWLoYWSyYba2TR84rO1JdSq6jbNnG3lro=
Subject key identifier: 94:C3:F7:BA:75:73:43:E8:06:7A:04:DA:8B:7B:7E:CB:EB:95:39:B9
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019D06D47B5C7DB470FACB7453EBD8C7D1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1878
Signing time: Thu 19 Mar 2026 16:01:21 +0000
Manifest this update: Thu 19 Mar 2026 16:01:21 +0000
Manifest next update: Fri 20 Mar 2026 16:01:21 +0000
Files and hashes: 1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: V71wZBFTl/O0BD2j/Ot63exUcJGd/LhEYcNvpBlGkUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:d4:7b:5c:7d:b4:70:fa:cb:74:53:eb:d8:c7:d1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Mar 19 16:01:21 2026 GMT
Not After : Mar 20 16:01:21 2026 GMT
Subject: CN=94c3f7ba757343e8067a04da8b7b7ecbeb9539b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:a0:76:50:c4:1b:86:f0:91:43:20:ee:03:
b6:75:82:3a:6e:72:13:8c:5c:46:c6:aa:e2:32:7e:
9d:17:bf:72:dc:86:32:97:b0:aa:80:7a:75:2d:93:
e4:29:2a:a9:e2:dd:3b:5d:44:85:e4:9e:45:19:25:
a0:0d:ff:1f:d6:b6:84:48:fb:be:6e:ae:24:d2:92:
ac:95:97:be:c4:54:8b:54:30:c1:93:54:df:fa:a3:
9a:6d:6b:81:df:1a:46:5a:ed:16:b0:9f:90:31:ec:
2a:ee:b7:1b:36:3c:bc:56:90:cc:7c:c5:d3:c8:bd:
00:5f:29:50:ac:62:a7:27:0a:e8:9e:1b:31:4e:86:
54:b0:7c:dd:de:2b:1f:70:03:5e:d2:15:26:e5:8d:
c1:7e:65:e5:1c:d8:31:93:2a:82:9c:e4:e4:4c:2b:
19:25:a7:d0:1d:52:0e:31:bf:dd:65:e2:4a:d6:54:
cf:00:f3:3d:1d:89:20:9c:ba:fc:35:2d:17:f9:e4:
41:2a:d3:15:0c:9b:5d:e5:c0:4b:f9:3f:cd:ca:7d:
0e:9f:f2:c5:a0:e1:4b:b1:5b:1f:08:e7:7e:f9:b6:
84:ce:10:72:78:72:93:0c:65:66:dc:b9:73:7b:5d:
76:51:a8:d7:71:c7:19:09:c5:dd:99:b7:f0:47:c6:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:F7:BA:75:73:43:E8:06:7A:04:DA:8B:7B:7E:CB:EB:95:39:B9
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7e:e3:23:85:50:5c:e8:a4:04:50:79:d3:31:87:eb:20:3e:
d8:c9:80:cd:16:6b:22:fe:a0:09:bd:f4:15:01:f9:86:27:18:
ed:87:39:17:67:d2:1c:e3:c6:f4:20:88:10:50:1e:31:25:4e:
e7:d3:0f:15:65:e2:8f:5e:8a:72:35:ec:ba:35:ea:77:3e:4f:
65:5b:0f:d8:2f:f0:c2:fd:7f:d3:c1:73:06:eb:f8:37:6e:09:
92:8b:80:0a:ef:79:90:d4:76:9c:0d:28:6c:ef:88:81:32:69:
b8:a7:87:e8:6d:3a:ad:cf:e1:2e:dc:08:ff:f4:a2:12:46:e1:
84:9d:4d:3e:67:e5:ef:54:b0:b4:d6:b9:f6:38:21:76:50:fb:
3f:9d:50:e8:ba:ba:c7:ed:d4:30:f9:dc:f8:cd:64:94:b3:a8:
04:a8:43:73:bb:6f:81:fc:43:d9:5e:e6:cd:93:1d:1c:ec:7d:
73:a1:2e:85:5e:4e:64:3e:b2:74:e1:01:82:de:c4:1f:14:db:
f5:11:9c:5f:b7:3d:3f:1d:1f:ea:e3:3a:44:1f:71:fb:bf:2a:
b3:c8:2d:5f:0f:84:23:1e:75:a2:42:a0:82:1f:23:5a:77:41:
e7:b9:81:e5:7e:b4:28:12:30:ec:a6:cd:e5:7a:38:0b:29:af:
2b:2a:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:13:08 2026 by rpki-client