Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: wjsWP1WIOpgnXFzTR7eI9pki3BHKH3Vh+rPYO8j7jlY=
Subject key identifier: EA:2D:13:54:11:61:19:7D:FA:0A:BC:24:BE:FC:09:D1:9D:EB:99:A1
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019CEBCAA86941C87A5B01310EF4C80CF5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 186C
Signing time: Sat 14 Mar 2026 10:00:52 +0000
Manifest this update: Sat 14 Mar 2026 10:00:52 +0000
Manifest next update: Sun 15 Mar 2026 10:00:52 +0000
Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: 831xUc7O9MQSx6G5hV6XDFfIBzpHokxxvLYCUfOgSpk=)
4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:ca:a8:69:41:c8:7a:5b:01:31:0e:f4:c8:0c:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Mar 14 10:00:52 2026 GMT
Not After : Mar 15 10:00:52 2026 GMT
Subject: CN=ea2d13541161197dfa0abc24befc09d19deb99a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:d7:88:cf:f9:0e:c2:d5:67:e6:65:97:d2:
11:3d:60:ec:40:cb:9f:28:41:05:91:de:0c:05:36:
46:2b:d9:30:53:31:eb:44:86:e5:7c:1a:87:f8:3a:
05:ed:b4:ed:4d:87:16:b2:d3:39:e8:8b:e8:25:49:
ba:cf:9e:12:e4:f8:ca:4a:1d:a8:fb:d0:8e:9b:64:
25:71:da:28:93:59:cf:a0:6a:99:c1:c9:9d:b3:46:
8f:29:93:c7:d4:a7:6d:49:1f:8a:d2:ca:56:40:c0:
8b:a2:5b:a4:73:82:c3:26:61:4f:f8:0f:2e:20:e9:
da:43:63:33:e8:bc:df:3c:6e:4b:ef:1a:8d:00:b7:
56:3d:89:93:b4:de:bf:fc:57:22:20:e0:80:cf:16:
93:e3:b2:9a:c1:e6:db:db:84:17:8b:dc:2d:9c:84:
36:aa:26:a8:cb:72:7b:ec:be:2d:29:d0:51:01:13:
27:eb:cb:72:d1:6a:f5:9a:14:17:10:ee:42:50:14:
92:02:30:81:39:47:d2:c4:71:af:ba:7e:04:a8:a3:
0c:78:fa:0d:8a:98:70:2f:15:19:26:4e:f3:d0:74:
cd:95:79:20:73:e7:db:54:0f:5d:fc:89:d6:ab:6d:
a5:af:56:0f:71:f2:26:47:7d:ed:74:d4:5e:b6:97:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2D:13:54:11:61:19:7D:FA:0A:BC:24:BE:FC:09:D1:9D:EB:99:A1
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:5d:2e:cd:e7:fb:20:dd:d0:3f:7f:0e:c6:d6:6b:97:28:
95:ca:88:89:29:08:a5:03:3d:18:46:86:04:8e:e2:e7:49:32:
33:5f:03:c5:85:43:b6:92:d2:b4:a5:ab:c1:eb:1d:92:12:45:
94:0f:d4:f5:e7:65:fe:c1:a4:af:0d:8a:f3:ec:e7:05:f9:27:
bd:9f:18:5a:ed:90:82:b3:ef:a3:aa:a7:eb:7a:11:88:0c:da:
0e:c2:66:07:41:b4:e2:61:76:d6:72:c6:60:59:8d:81:07:2d:
9d:0b:8e:f2:4c:f7:6c:4b:e9:2f:0a:10:61:99:45:c4:26:c9:
77:1f:ef:e5:76:5d:7d:d1:e8:9e:51:f5:8e:9e:0d:7e:7a:7f:
a9:00:f5:b4:70:ae:b4:a4:f1:56:ad:c6:fd:8b:cc:3c:5f:e8:
0d:32:7c:5d:7a:00:94:a6:9b:2e:1d:61:50:17:06:2d:08:c2:
b6:80:62:5f:3c:ad:21:66:40:46:12:c8:b7:75:50:cf:1f:95:
b6:73:a8:c7:b2:65:14:06:da:09:5a:e1:84:8c:e1:f5:f4:fc:
c4:16:ee:b8:46:08:e5:c9:b9:6e:73:29:4c:9b:46:37:93:44:
01:fd:4b:68:7e:60:fe:44:a4:f8:78:91:54:ae:35:dd:7c:3a:
8a:3b:c4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:19:49 2026 by rpki-client