Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: 4fYCVX8PuuDv9AgZr8qyL0LDJ7rceVhnvIF1JbMCOSM=
Subject key identifier: B0:FD:A0:20:81:DC:3F:57:31:89:64:81:C1:FF:D5:8D:91:C4:87:78
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019D2AA9E51A9E223CEF94AF59B8BB9B4EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0986
Signing time: Thu 26 Mar 2026 15:01:10 +0000
Manifest this update: Thu 26 Mar 2026 15:01:10 +0000
Manifest next update: Fri 27 Mar 2026 15:01:10 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: txgUV9TqE1Zep1ZGR32wFq8GnDo5mN5avV9nCACRy8I=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e5:1a:9e:22:3c:ef:94:af:59:b8:bb:9b:4e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Mar 26 15:01:10 2026 GMT
Not After : Mar 27 15:01:10 2026 GMT
Subject: CN=b0fda02081dc3f5731896481c1ffd58d91c48778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:af:9a:6b:b5:af:6e:3b:7e:88:33:13:c1:
1c:9e:b3:08:91:ec:46:98:e3:9b:10:68:da:61:a0:
4f:45:ad:29:d7:06:7d:12:df:c5:d1:f7:54:10:50:
bd:39:de:59:13:f1:b0:04:7b:37:ca:f8:20:a3:b8:
eb:90:73:1d:ff:f0:79:0e:16:5d:37:47:ba:55:0f:
40:fb:68:29:38:97:dc:34:2e:ae:97:35:a6:38:a8:
e3:75:55:5f:f5:67:8a:cc:b0:24:86:86:e0:c2:a7:
0a:38:8b:8b:e7:f5:51:a0:6a:4b:76:ee:38:a8:42:
f4:52:90:db:66:90:54:d1:a9:98:95:ea:0b:ac:cb:
de:f6:97:0e:50:14:8e:51:f6:a5:c6:3c:c9:bd:5a:
f3:9f:e6:0b:81:9f:92:d6:dd:bf:cf:4a:73:03:3d:
09:f7:63:02:35:7a:52:c0:48:38:e7:18:41:f6:a2:
12:34:90:8c:8d:ba:11:5c:8f:a7:79:08:ee:43:b4:
a4:a0:16:29:b1:17:cf:80:4a:ce:50:9b:4f:4a:12:
5a:ee:4a:c5:d7:4d:e5:a3:ca:26:c4:01:a9:ac:6d:
e6:ab:ed:5c:bd:c5:38:dc:1a:a9:cf:47:b1:93:54:
2e:d8:64:ae:54:cf:7f:3b:a3:e2:91:43:e0:48:8c:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:A0:20:81:DC:3F:57:31:89:64:81:C1:FF:D5:8D:91:C4:87:78
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f3:4d:47:5f:d3:17:f2:a0:e1:79:80:93:5e:b9:c6:91:77:
d4:f1:70:f9:27:04:ef:a7:d5:3c:a5:38:5d:34:4c:cf:84:c9:
01:36:16:33:e8:cb:70:47:47:ad:37:e1:30:05:09:2c:86:ec:
5f:29:c1:a4:47:aa:5f:27:25:05:ab:60:4a:e6:65:52:f9:a9:
c7:e5:75:1f:3b:c0:0a:d0:65:eb:bf:3d:d0:37:02:61:8f:c5:
71:5b:ac:70:53:d6:ea:60:79:23:73:51:96:50:e2:ee:89:b2:
ef:03:18:1a:9f:ec:9a:53:8f:20:0f:6b:0e:4c:29:7a:c3:69:
8a:da:7b:53:59:41:b0:fc:b4:36:f6:a9:e2:51:84:b7:d1:e1:
25:a7:4d:3e:ad:ce:74:30:90:af:96:5c:d0:2f:e5:aa:a9:96:
01:a1:0d:bf:f1:92:07:60:33:7b:bc:83:07:1b:07:f0:b3:bf:
1f:de:d9:09:62:6b:fb:4e:16:db:af:0a:f6:93:a1:0d:40:f3:
67:5a:38:3f:e8:78:f7:dc:c0:76:74:ec:98:60:9d:39:b4:19:
28:b2:c2:de:91:cf:45:c0:ae:dc:d5:c5:7f:78:74:d6:bf:b5:
68:1e:94:24:3e:1b:bc:a7:c2:8a:60:43:b1:19:ac:c4:01:42:
d1:4a:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:16 2026 by rpki-client