Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
File: mT6BRnbzLyZHccetdnpN-H08Y-I.mft (raw, json)
Hash identifier: JPcu+7dRpuFT9yV1Rm4I4lA1ovlKsgNT3xp9ThgU75Y=
Subject key identifier: 41:B2:5F:B8:64:0B:FD:5B:D6:77:05:C0:4D:72:0B:BA:3F:C1:35:BC
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial: 019D28F25D6FA26D6FD28B5AB0A73A8B2CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
Manifest number: 0118
Signing time: Thu 26 Mar 2026 07:01:05 +0000
Manifest this update: Thu 26 Mar 2026 07:01:05 +0000
Manifest next update: Fri 27 Mar 2026 07:01:05 +0000
Files and hashes: 1: mT6BRnbzLyZHccetdnpN-H08Y-I.crl (hash: 0ngeKZrjVh6uTjQCV6IS1g7mUJs7h4J0UFk8eddk/HE=)
2: o0QAPM1ESuNP2J0PU6laacOjs-Y.roa (hash: KnHtoHGfNF+Yd+wrjg38jV7CFUUuu9lVP3v5WBtPzNA=)
3: wzhvVBisYwpfDxdiNkmYJjywz5I.roa (hash: vkonNhWWhUvXolDJXrRgZMBJWgHtThs0/Uh8jZJo5Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5d:6f:a2:6d:6f:d2:8b:5a:b0:a7:3a:8b:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
Validity
Not Before: Mar 26 07:01:05 2026 GMT
Not After : Mar 27 07:01:05 2026 GMT
Subject: CN=41b25fb8640bfd5bd67705c04d720bba3fc135bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:58:56:47:55:50:1d:1d:61:a8:0c:01:e5:
bd:d0:06:ea:8d:8d:ca:e2:c7:9c:2f:b2:44:ea:4e:
30:5c:7d:bb:7f:16:30:79:ad:c2:94:18:21:d9:d8:
03:cd:b2:4f:8a:0c:61:71:88:db:6e:03:0e:e4:ea:
49:ef:65:ce:28:fd:2e:ac:7d:56:f2:19:82:1d:75:
5c:1e:85:dc:ba:15:78:e0:3e:62:1b:2e:2f:be:68:
0c:b3:93:65:b8:7d:30:be:1b:53:6e:3b:58:4e:68:
0a:0e:36:57:7e:6c:a4:cf:9d:9e:04:89:04:0c:6d:
38:6e:44:4f:ad:19:ca:30:4e:9d:fb:a6:b8:84:ac:
cd:e0:6c:74:bc:9c:63:cf:ea:04:08:ed:7b:18:e4:
dd:c2:6a:86:af:e5:98:9f:a3:33:29:84:51:2e:88:
77:83:ac:6d:f2:4c:91:63:40:93:e8:ed:78:71:f5:
1f:ce:b5:1b:37:34:23:cc:df:b5:bb:24:62:3e:27:
8f:3f:e3:09:c8:8f:54:21:a8:f9:84:6f:87:5d:4f:
a2:a8:bf:bd:71:a7:87:b3:41:71:dc:fe:b5:14:c2:
fa:7c:0f:b3:42:65:33:7b:b6:0e:e1:34:9a:de:49:
65:fe:08:6f:4f:dc:ff:c9:80:73:60:12:28:9a:b4:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:5F:B8:64:0B:FD:5B:D6:77:05:C0:4D:72:0B:BA:3F:C1:35:BC
X509v3 Authority Key Identifier:
keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:dc:1d:0a:32:fa:db:c8:b1:fe:7c:8b:5e:3f:51:23:67:79:
63:e0:88:ba:29:aa:12:49:96:b0:6f:56:07:db:3c:ed:8e:13:
6c:7d:cd:f9:6d:60:c5:7a:82:72:11:24:1d:33:ee:0e:96:47:
25:e5:2d:b6:f7:51:66:9d:a7:96:f8:5d:2e:bf:30:c7:54:19:
c2:eb:96:60:67:f0:0c:15:a4:59:af:84:c8:5e:2f:c2:5b:e2:
57:04:15:ff:d6:5b:0a:4f:6e:63:ed:bf:2c:33:2c:05:10:7b:
06:34:85:1c:28:09:76:61:4e:52:99:e5:e3:97:d5:97:6d:db:
ee:f7:d7:8a:9d:a7:6e:d4:be:34:47:ec:81:61:29:31:20:c4:
eb:c9:15:1d:f0:66:16:29:ca:fe:c4:cc:fa:4d:a2:cd:4d:99:
6d:75:9e:d6:2e:42:87:a0:54:8d:35:ed:30:1d:eb:af:0a:64:
e2:ee:46:29:62:28:b0:32:1a:55:c1:87:3d:de:3d:6e:5a:70:
e1:f9:5d:b7:34:42:73:c3:e5:48:21:0f:6e:50:c8:64:1b:83:
d7:eb:74:f5:c1:5f:1b:e4:0a:e0:16:4c:2a:19:d8:08:b5:d7:
7b:72:46:ed:3f:e9:ff:2f:0c:33:86:9b:90:7c:a0:10:d8:16:
1d:b2:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:42 2026 by rpki-client