Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: Ym9sMt+6hot/fEU0Fswy4u4KSPYUU3GEhinERtI6Gds=
Subject key identifier: 0F:D7:0A:33:AE:69:1E:45:01:0B:B0:FF:55:8D:4A:1E:BC:CD:85:62
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019D25BAB2893B37BF87C08047389EBF0665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: cYpREYWpagcPkfdogD3R8pQFqIyCRvfdFRgkBhG0mgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b2:89:3b:37:bf:87:c0:80:47:38:9e:bf:06:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=0fd70a33ae691e45010bb0ff558d4a1ebccd8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:63:5d:64:ca:33:b7:55:52:4b:fa:ec:82:
e8:e0:e0:ab:2e:2a:59:cd:45:a2:a7:20:49:f8:4e:
ce:9d:3b:c9:91:be:06:99:10:05:80:4a:fa:f1:9d:
01:93:49:25:a0:03:ab:28:cc:49:a9:a2:ab:d0:67:
90:d6:87:1b:24:f3:a9:37:33:5c:cc:fe:b2:ad:e0:
e8:b7:6c:78:c4:fa:61:7f:a8:82:5c:b2:13:bc:f9:
e9:7d:3a:80:94:bf:5b:0a:ab:5a:23:cd:32:89:37:
e4:75:7e:32:22:b9:3e:60:a9:db:9a:80:65:6a:aa:
3a:09:6e:dd:d6:10:ab:23:cd:4a:60:7d:c3:0a:29:
47:2e:71:16:81:af:8c:d1:99:9d:26:e1:79:49:34:
0f:a1:ea:b8:e7:6e:d3:c0:08:e2:81:da:f1:96:c3:
78:70:78:b4:a9:75:a1:4e:54:81:37:9c:c9:de:85:
b6:82:1d:2d:05:92:88:69:f4:44:f2:bd:3d:21:43:
1e:9f:96:ff:5c:82:31:b3:73:c6:96:a1:52:2e:a7:
c2:22:2f:5c:a9:bd:96:fd:10:f7:f6:d5:e6:6d:83:
0f:18:84:30:fd:17:2f:12:0e:26:cb:2f:10:9f:a4:
7a:08:68:e4:4e:f1:bd:28:a7:18:59:70:62:8a:69:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:0A:33:AE:69:1E:45:01:0B:B0:FF:55:8D:4A:1E:BC:CD:85:62
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:53:7b:f9:6f:f3:91:73:f8:95:b5:ab:db:8e:86:96:d8:9e:
45:52:b2:6d:47:f6:52:95:f3:06:0d:ad:fb:88:25:e7:6a:9e:
52:de:a4:e4:8b:94:55:bc:ca:dd:d0:a3:cc:4f:1a:62:58:02:
20:7b:99:dc:90:36:a6:00:b0:97:70:36:af:3d:88:6a:9b:d9:
1e:2a:c4:a2:04:8c:bf:16:e2:b4:9e:86:00:ab:a1:83:f3:43:
34:11:4d:ab:60:d1:df:94:7f:5f:15:8a:7c:81:f5:74:f4:1d:
1b:b9:6f:80:28:43:4b:9a:4f:70:ea:ad:d7:2b:7a:81:68:a9:
f1:1a:1b:0c:21:8f:98:93:56:13:21:15:a7:94:d4:5f:0b:b3:
96:78:0e:6f:b9:b7:02:07:b9:eb:13:fb:6b:3c:7e:62:9e:24:
39:2c:8b:45:ff:9d:be:f2:ec:98:d9:fc:c8:0a:bd:19:fb:33:
14:78:e5:05:37:42:b4:74:85:f1:aa:a4:dc:e9:e5:de:a8:73:
15:f5:7c:18:63:79:56:63:f1:72:a8:58:62:a7:d9:c6:b9:45:
73:38:e6:0b:d4:a4:bb:a3:7c:72:81:86:be:68:6e:92:ac:b8:
dd:52:40:01:8d:d1:66:db:12:00:14:33:0d:90:35:d4:d8:03:
98:cf:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:24 2026 by rpki-client