Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: VKbo/usygsBwHfU41LMk4M7D9ZV8sy+NeMKYgruOufU=
Subject key identifier: 04:EC:95:DD:72:DC:A9:F5:3F:2E:D3:73:BE:9D:87:E1:0D:86:94:BC
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019D08C343C023632BD02E8C25E8D0C59F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1879
Signing time: Fri 20 Mar 2026 01:01:47 +0000
Manifest this update: Fri 20 Mar 2026 01:01:47 +0000
Manifest next update: Sat 21 Mar 2026 01:01:47 +0000
Files and hashes: 1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: 7xygnYna6MYuAVck64VyJrsnnxKzyfsPPhXPZw8wKSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c3:43:c0:23:63:2b:d0:2e:8c:25:e8:d0:c5:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Mar 20 01:01:47 2026 GMT
Not After : Mar 21 01:01:47 2026 GMT
Subject: CN=04ec95dd72dca9f53f2ed373be9d87e10d8694bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:2f:97:0a:d3:dc:25:c7:17:fd:61:75:f8:
15:93:87:08:c6:43:a0:06:72:f8:7b:4b:6d:e2:a0:
47:ac:59:d8:b4:d7:5e:4d:e3:24:9c:54:cf:1f:52:
1f:b8:ec:14:28:1b:3e:e8:fe:33:3b:5d:be:6c:d4:
97:1d:79:13:1f:ea:bf:26:20:20:43:b8:56:bb:0a:
28:04:d4:7f:8b:19:af:c5:b4:b8:61:ac:70:12:6d:
9d:a6:03:ed:42:00:72:c4:ee:07:99:29:a0:5a:07:
a7:e6:76:97:71:ad:01:f3:5c:62:11:b6:9d:b4:b9:
e7:34:1b:de:41:94:f0:ba:28:a1:cf:0e:b4:4b:67:
d7:1b:a2:6b:45:86:d5:1e:75:14:31:2e:a0:ef:a1:
c6:73:4b:74:34:1f:1c:70:d3:17:c9:a4:d9:8f:df:
b1:e5:c2:29:74:8c:59:57:38:e0:81:a6:32:1d:b7:
87:15:b9:e1:d4:5d:f5:65:23:c8:ea:a1:0e:70:d6:
be:39:cb:93:ee:43:88:3c:95:15:f7:8b:f0:86:05:
e9:51:f0:92:c6:a4:80:71:58:29:f7:5f:b2:b1:bd:
d8:a0:0a:27:a2:5b:0c:c1:b0:59:0b:c3:43:69:09:
28:8f:44:f8:88:f9:fa:76:b2:5a:02:be:de:6f:73:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:95:DD:72:DC:A9:F5:3F:2E:D3:73:BE:9D:87:E1:0D:86:94:BC
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:b9:b1:96:7f:7e:50:78:a1:37:f7:4d:92:ac:3d:0e:bd:
1f:a8:2c:e3:74:ac:9a:0d:df:db:01:b4:e3:5d:a2:14:bf:8d:
60:e0:cb:c5:58:9b:d2:2a:b4:29:25:14:31:51:8b:86:23:ba:
78:70:41:18:d8:09:2d:ea:38:58:c4:11:0a:ff:e6:8b:1e:32:
d6:79:de:b9:8c:3c:e3:e7:e4:7d:cd:6f:eb:a2:51:31:37:c9:
51:de:8b:d6:30:ea:17:8e:85:fe:dc:42:cf:26:a9:fa:19:2a:
a8:2b:a2:4f:cd:2c:09:a8:45:0e:c1:76:1f:ff:d3:2c:58:de:
8e:ce:bb:39:d5:76:e1:bc:b0:ef:c7:dd:64:20:97:dc:27:60:
19:a8:34:5b:62:28:83:f5:75:5d:5c:95:f6:c7:16:45:05:9a:
10:64:e7:bf:b0:d3:58:06:44:a2:22:59:1c:c3:83:a7:65:fa:
43:dc:87:41:2a:32:af:37:62:49:d8:54:13:e0:5a:52:a6:ad:
cc:84:87:6c:fa:43:3b:1e:e4:6e:23:a7:10:1e:6e:93:68:3e:
49:1d:80:72:53:e2:3d:e1:48:c1:99:c6:0c:a2:88:d6:50:44:
42:00:54:9a:26:5d:b3:c7:8a:32:84:37:43:41:11:ff:0f:d0:
c9:8a:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 03:56:18 2026 by rpki-client