Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File: M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier: l6Nz0dwNPRzHVEQdCo4kKgcWWYn0s+WyqxKqclGmBW4=
Subject key identifier: D0:20:BC:BC:3A:13:D2:D7:EB:13:F3:93:C0:A1:19:89:C3:73:25:C1
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019C7DEE5BEA3AEAE1F45A1C7FFFC968D186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number: 1A
Signing time: Sat 21 Feb 2026 02:01:38 +0000
Manifest this update: Sat 21 Feb 2026 02:01:38 +0000
Manifest next update: Sun 22 Feb 2026 02:01:38 +0000
Files and hashes: 1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: 2Y1bMVizsHcA6I5qy9aJ5ajouOH3YBuuo2VyyQMiBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:ee:5b:ea:3a:ea:e1:f4:5a:1c:7f:ff:c9:68:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: Feb 21 02:01:38 2026 GMT
Not After : Feb 22 02:01:38 2026 GMT
Subject: CN=d020bcbc3a13d2d7eb13f393c0a11989c37325c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:4f:c4:2b:8e:27:34:78:fa:0d:40:39:8d:
c5:0d:28:89:f8:41:c1:1d:2c:8b:fd:1f:07:b8:c2:
bf:e1:9e:b3:0d:10:0d:74:1a:a7:f9:3a:f7:00:11:
fc:f4:d0:ce:70:1d:3f:f8:c1:63:e6:55:e1:16:81:
86:46:0d:97:87:a5:cb:ae:24:d7:28:15:0b:dd:9b:
ec:20:2e:40:20:1f:d5:98:36:a8:b7:e4:d7:99:b7:
65:0f:6a:94:06:41:50:7e:ca:40:46:5e:d1:c1:ed:
b7:a4:a4:89:64:28:1b:41:7a:5c:fb:de:dc:b8:e7:
a2:87:30:17:34:3a:79:7d:4b:64:0f:e8:a9:55:48:
55:f8:15:56:fd:e0:38:a6:f4:8b:a9:77:10:a0:c8:
b2:7a:bc:fa:56:08:81:71:6f:d4:f7:57:2a:87:2c:
1a:9d:e4:42:10:69:75:6a:d7:4f:f9:08:1d:90:0b:
e1:6c:b9:5c:8f:59:ae:04:14:dd:5b:21:11:9e:51:
a2:05:72:f8:7e:72:3a:57:69:46:b7:7b:49:29:8f:
1c:0f:b3:b4:10:c1:7a:5a:00:15:6e:2b:0c:d8:57:
bd:c0:1e:bf:42:99:ab:17:22:7b:13:54:fa:e6:97:
d0:4a:78:d4:87:5b:c1:d1:97:b6:2a:21:b8:8a:c8:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:BC:BC:3A:13:D2:D7:EB:13:F3:93:C0:A1:19:89:C3:73:25:C1
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:e1:38:ce:56:e7:96:d7:c7:46:9f:e6:4a:8c:9a:ed:1e:
6d:bc:94:00:6b:f3:a1:7a:54:54:75:39:d2:de:6f:0a:54:09:
b2:b8:ad:ec:89:e8:fa:3d:22:21:56:3a:e9:06:bb:47:d2:89:
99:98:ee:da:a2:5b:28:3a:ba:10:16:d7:aa:ab:c8:6d:59:02:
36:05:27:bb:4a:9b:0c:74:ee:fe:1f:f1:a6:e7:79:56:dd:4c:
01:4e:64:85:64:9d:0f:58:8b:92:0f:32:73:50:2d:b6:66:a1:
df:e2:c2:98:1e:2a:02:b0:38:ca:b5:e3:6b:76:69:2b:86:9c:
c4:c5:57:83:55:8d:85:4d:43:40:27:41:0f:4f:5a:8b:83:bb:
9a:71:ed:a5:5f:d3:1a:11:44:01:fa:25:b5:bf:07:12:c1:42:
31:45:7e:64:c2:92:f3:69:6a:e5:56:da:d6:51:ad:cd:45:e2:
e0:bc:b2:70:47:07:a0:6d:38:92:f3:92:7f:6d:ba:43:cc:61:
8e:8d:51:fb:26:31:8f:70:a0:29:8a:95:c9:ae:c6:cc:db:10:
3f:ff:44:e6:26:30:14:8c:f9:22:60:2c:5f:9c:5f:6e:52:a4:
f1:ae:e0:5d:b7:ce:d0:ca:cb:be:a4:49:0b:43:01:59:a7:54:
0a:3e:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:37 2026 by rpki-client