Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File: M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier: ICyz0T9p2kM1BcdrghPv2lDKN05e8yfyEwREkzJzpjs=
Subject key identifier: DC:4E:29:FF:37:7A:34:1A:9E:12:5D:37:D1:8B:0A:AE:3E:AE:87:D2
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer: /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial: 019D2929918CD100812C9E018F76725D9FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: lD58uu7k5p9EQrn105MK+PhApQkG0eP9DXeDsA2F63c=)
2: sbdmVuFID9uQRYJtZJ4fWH3G57k.roa (hash: 9b8Tb0KDChimmsKiC/A+gQbmV4xXpq9nJ9Cvm1zmBBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:91:8c:d1:00:81:2c:9e:01:8f:76:72:5d:9f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=dc4e29ff377a341a9e125d37d18b0aae3eae87d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:01:6f:25:84:b0:21:aa:2a:26:e4:55:e1:
c0:e0:3c:fd:65:ca:19:08:40:5e:75:3b:8b:f4:45:
c2:96:b4:56:61:94:b8:70:d8:17:d3:6a:7d:a6:4e:
4e:24:72:02:fd:27:6c:46:9f:ef:56:f2:f0:0d:73:
6a:3b:8c:e7:e5:5a:48:ad:32:5a:53:31:c0:f2:f8:
a9:bd:bb:6a:0d:5e:01:ac:4d:62:38:4a:90:a6:c8:
43:23:c2:5c:b5:d2:1a:94:b0:af:6e:99:fc:28:22:
85:ff:2c:9b:e3:81:0a:5b:14:b3:60:e7:f3:f3:9e:
0f:82:df:a6:f6:b4:02:77:f2:c2:32:d5:6a:67:72:
ac:5e:9e:47:8a:98:84:3d:b3:40:10:e8:6e:84:e3:
bb:09:7f:28:ee:83:f5:02:30:ce:03:93:0b:63:a4:
d8:2e:7f:c9:bb:b9:9b:45:03:57:13:c4:c0:2e:22:
41:76:e4:62:ab:e3:e2:d2:2d:fc:11:2e:41:9e:5a:
18:39:2c:13:13:1a:ad:a7:a9:97:a3:93:14:4c:41:
f9:7c:3f:2a:16:25:fd:13:c2:14:79:d4:23:7b:d9:
6f:76:de:61:d8:05:1a:f0:68:3d:b4:a1:6f:a0:bb:
89:37:f6:3f:10:aa:2b:95:f4:7b:a4:70:55:16:44:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:29:FF:37:7A:34:1A:9E:12:5D:37:D1:8B:0A:AE:3E:AE:87:D2
X509v3 Authority Key Identifier:
keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:85:a2:2d:6a:f3:83:4b:18:d8:f0:cf:1a:72:d1:63:eb:74:
a5:03:b3:6e:d9:eb:eb:6f:f3:6e:b5:1d:34:ec:bf:23:5e:12:
22:09:7d:0d:81:3f:f9:3d:d0:58:56:e1:c7:35:be:68:ef:11:
61:e9:be:e7:f0:56:68:1f:e2:27:db:42:d1:62:ef:29:91:00:
e5:00:18:b2:f5:17:4d:3e:1d:e6:cd:8e:60:09:f0:60:aa:4e:
51:e0:3e:39:e1:98:99:6a:db:52:97:50:80:19:53:db:b7:69:
ba:3d:2b:6e:df:15:25:7c:fb:d1:f4:8b:c3:92:98:97:35:ff:
13:e4:cc:52:87:a8:11:4c:17:3e:11:02:36:90:b4:33:b3:19:
c2:3e:25:d1:ea:19:5a:f6:9e:4f:1a:b6:85:a8:af:f7:94:5e:
d5:3d:3e:a1:6b:e5:38:26:6f:6d:ce:67:0c:01:6e:59:99:ca:
78:8a:89:a6:7d:29:95:25:97:80:6b:cf:5c:5e:12:90:b9:0f:
e5:31:47:96:89:ec:35:0f:49:f8:90:2f:e6:82:7a:1f:35:2e:
51:31:45:70:1d:4a:34:a7:d5:4e:ea:44:02:0c:6d:a6:f7:fe:
d3:31:04:c2:f7:65:73:db:d0:df:8d:84:b7:13:4f:07:67:cf:
69:27:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:12 2026 by rpki-client