Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: fuKEIm3hv0jrjsjt5xz4+hqnbNpjZFZosDaU74KFQ00=
Subject key identifier: E8:75:41:C0:F3:74:1C:06:D0:89:87:00:62:38:76:1A:F1:69:B5:BF
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D29CE3A433BE57A323437E752EEF01BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 18D1
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: QZ_9dSDQYledA3mZvzzU2XsR2W0.roa (hash: nZN1cE74YklriGKMRngm1fgmd4ilU9K/u2p2JG2cQ20=)
2: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
3: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: SLeKJgwfqEU7AFVPYuuT69TsPMH5FI7QRPhjKdtSkKU=)
4: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3a:43:3b:e5:7a:32:34:37:e7:52:ee:f0:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=e87541c0f3741c06d08987006238761af169b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:d3:ae:7b:15:67:6f:c1:5c:82:be:7c:88:
aa:f9:55:f6:d6:09:b9:ef:cd:a0:9e:c6:47:bc:7e:
d5:27:4f:5e:39:64:84:6e:a5:e3:9f:5e:38:8c:69:
cf:50:51:8b:a2:6a:c4:83:2b:86:f6:6c:fb:77:3d:
4a:97:3a:6c:5c:87:d5:b2:40:76:40:9b:47:06:00:
a1:f9:b8:c7:4c:2d:cf:34:a2:71:a2:c1:51:49:2b:
52:f1:3c:99:26:85:c5:39:3d:3f:28:0d:6b:64:02:
da:ca:44:0c:94:e8:28:d9:1f:16:80:14:13:32:7d:
7b:86:b1:1e:dc:88:c8:53:2a:85:c3:ea:de:14:c3:
d9:61:81:eb:b7:11:44:7a:bd:12:e7:e1:4b:e4:86:
8d:78:bf:17:00:b4:c7:56:b3:d1:1d:d3:d8:93:26:
0e:8a:9e:e7:3a:7c:e6:46:f3:7c:bf:2b:4f:ec:e2:
85:d2:40:c4:cd:29:55:e5:c8:c7:7f:e4:20:01:63:
6b:ef:30:66:1a:f6:64:b0:37:3c:fb:15:4d:ea:d3:
db:a2:db:2f:1b:49:c7:4b:43:58:49:2b:10:e9:15:
74:6f:1e:05:d2:8f:74:7b:e2:56:ae:90:d6:34:a7:
b7:1c:b9:34:45:82:7a:ca:04:a6:74:04:a9:f2:86:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:41:C0:F3:74:1C:06:D0:89:87:00:62:38:76:1A:F1:69:B5:BF
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:3c:1b:ab:2d:ee:0b:0a:ea:38:06:ca:69:61:ff:ae:0c:
4d:2d:54:8a:75:96:79:46:01:3e:0c:aa:a2:ec:fc:80:cb:fb:
34:3a:38:6f:a4:b9:c3:7c:0b:90:e9:07:ac:c7:71:3b:25:ea:
10:41:a8:71:9d:12:4a:2a:a1:48:8d:25:de:82:67:28:20:7a:
bc:8f:1d:6e:f6:34:3f:8a:d5:64:0d:11:76:8a:7a:fc:cc:d5:
be:83:f3:e5:98:bc:35:b8:ff:59:a6:34:f0:4d:74:0e:3a:ff:
5b:3e:b8:43:64:77:23:de:30:e8:bc:3f:eb:bb:f7:1b:bb:8c:
9b:01:6d:aa:2f:4c:83:f3:1c:22:31:09:dd:57:0c:5d:fa:74:
a8:30:db:d6:2a:14:9e:20:42:df:5c:4c:d3:ee:6a:25:99:85:
33:89:a1:a2:3a:aa:f7:3e:68:b0:e3:52:be:bc:79:c8:9b:6f:
96:7d:14:a5:46:ab:f4:0a:d0:3e:b4:1a:a5:0a:86:11:5b:bd:
22:aa:40:eb:df:61:88:89:c0:8d:17:13:49:15:35:9d:0a:9b:
d2:82:85:1d:d8:38:ba:97:d4:34:29:b5:c2:db:36:b0:77:f4:
df:24:2b:2d:86:ef:80:12:cb:65:7b:f0:e0:fc:9b:51:17:1b:
7d:12:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:38 2026 by rpki-client