Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: sM3aCcsQ/1m8l0L8GbT7qp0ucLkBs3EM+SoJIJn7MJw=
Subject key identifier: 3D:C9:9A:56:60:1C:39:E7:70:1F:A1:46:9E:93:A8:46:7B:31:DC:90
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019D25F0FFE0141035A5698DC5B2C44B7B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: 5n2TsyVa/Kzr8BNOJh5X1/M693DKk9nEgm0ktXYLolk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ff:e0:14:10:35:a5:69:8d:c5:b2:c4:4b:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=3dc99a56601c39e7701fa1469e93a8467b31dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:f5:bd:92:bb:46:a6:44:e4:56:5b:8c:8d:
b0:ca:32:77:af:d1:af:00:78:3d:0c:98:69:2e:c8:
a2:f5:41:52:63:7c:29:c7:b2:6b:a6:c6:a9:88:81:
db:2d:08:0f:bc:42:a0:f1:fa:eb:05:f0:b3:17:80:
2b:74:80:1b:da:30:ee:31:51:32:51:bd:7b:15:65:
e0:3c:f6:bc:38:73:49:b2:2e:c5:f2:b0:b5:d7:ae:
dc:3f:bf:d6:3d:aa:16:09:bf:29:81:65:9c:87:82:
7c:e8:3c:e7:5c:de:8d:2b:c0:44:8b:78:50:dc:b7:
b8:b3:46:49:9b:53:3d:8b:ce:11:84:9d:7e:5d:b6:
70:f4:35:e2:ef:72:e3:4c:ec:3b:71:e6:32:cc:80:
95:e8:1d:82:57:44:5a:f0:4e:8e:0c:e3:3d:9b:24:
4c:6e:0e:a2:98:b1:97:58:f0:21:a9:13:0a:fe:62:
90:0f:91:b4:52:a2:d1:9c:c3:58:2e:72:17:7b:67:
a5:dc:96:37:c8:46:e0:7d:e6:4c:ec:8a:e6:e5:e9:
1c:6f:38:6b:fd:52:9c:73:34:3b:58:82:dc:ea:4b:
af:5b:0b:5e:e8:f2:cc:f5:aa:9c:a1:86:ca:bd:03:
ad:3a:0b:cc:a3:69:f6:ce:c6:d3:58:d6:71:cb:5a:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:9A:56:60:1C:39:E7:70:1F:A1:46:9E:93:A8:46:7B:31:DC:90
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:71:1a:b0:b0:9d:23:55:78:fd:e9:db:2d:f6:47:f4:84:e3:
b1:b0:85:76:72:4a:9e:d8:43:bb:6b:4e:89:16:25:be:bd:9f:
60:27:ed:af:e4:a1:16:45:c4:12:2b:b6:29:ec:6d:1a:24:b6:
b5:a3:e4:2b:a2:db:28:eb:5e:9d:82:34:42:e3:eb:04:18:5e:
e2:89:00:ec:2f:fe:45:e1:a0:86:d8:aa:11:ef:96:e8:29:f2:
f6:eb:1b:57:13:28:3e:a4:89:8c:be:e8:5b:44:a5:ac:d0:b0:
6a:3a:ed:79:e2:9e:ad:c2:8e:0e:ab:3a:a2:99:a1:b9:8e:69:
e4:7c:ca:00:56:73:0c:69:07:48:f0:8a:b3:29:fd:de:67:70:
a9:a8:82:26:80:42:ae:de:f2:81:2d:ba:b8:f9:bd:20:c4:fd:
f5:c2:78:91:c3:46:12:94:d3:7f:1f:39:61:53:04:17:1e:00:
6e:c6:f2:44:80:f7:a8:d5:90:98:69:14:ff:f0:42:cc:6d:84:
05:b8:76:c7:db:fe:68:6b:e7:96:2d:af:ef:b4:a8:de:e0:1f:
7b:67:51:a3:42:c0:ac:b5:75:1f:45:14:92:ae:49:55:2f:f4:
aa:f6:e4:3e:75:26:ce:70:f5:fa:ac:0e:56:43:10:45:fd:ab:
72:eb:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:08 2026 by rpki-client