Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: KRcbRzTxYpL2cJ/54ulC+zYdvgSBm8AeCh0a2Bzwn74=
Subject key identifier: 19:32:79:8C:CA:CB:B0:A9:BA:64:E5:E5:D2:55:87:8C:73:FF:FA:45
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 019D29CE32A7883F430BC69681E579015745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 15D6
Signing time: Thu 26 Mar 2026 11:01:12 +0000
Manifest this update: Thu 26 Mar 2026 11:01:12 +0000
Manifest next update: Fri 27 Mar 2026 11:01:12 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: w1cRTZOiA8f4lMNY0n1yfGDfOHW9vgJuEnrqLauUSYw=)
2: BSVnXWVLQnFahxWR27R2hZyRLOw.roa (hash: zWXD1zdzQR6HCoxaZdLT2hwbNb0wnUHdkVZOay9qs94=)
3: iuyoeGHJ2HtKzNIRjDQXGF_P-CU.roa (hash: ZnVPMJXUndFPgr3XLqfOVPInWvP+3NWpUFJHhSkpQhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:32:a7:88:3f:43:0b:c6:96:81:e5:79:01:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Mar 26 11:01:12 2026 GMT
Not After : Mar 27 11:01:12 2026 GMT
Subject: CN=1932798ccacbb0a9ba64e5e5d255878c73fffa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8b:66:c7:e4:8a:bf:20:99:f8:cc:35:5a:8b:
78:8a:6b:54:38:15:9d:c1:3d:15:9c:ef:51:3f:0c:
87:af:80:34:53:e1:44:73:0c:70:a0:25:82:ed:10:
02:4e:b5:94:b7:52:1f:11:e9:f9:50:63:c8:1f:47:
f4:06:16:82:1a:de:7f:e4:88:cf:50:44:0c:0e:31:
04:e6:66:b9:9b:c9:52:c9:45:1e:9b:4b:00:ac:77:
d3:cd:c8:98:79:ff:8a:03:48:cb:2f:ff:36:a4:b4:
c1:3f:ce:e9:db:08:1f:c4:35:6a:c3:05:c7:de:a4:
ab:c6:b6:cc:05:9c:5e:78:89:99:a5:07:3a:9e:0f:
4c:22:13:db:34:af:83:f2:f8:f2:f8:bb:20:2d:6f:
4f:49:9b:1b:f0:3d:f6:0e:3b:d6:61:04:3d:cb:ae:
3d:fd:e5:a5:92:27:f2:d9:0f:1b:ad:17:d2:30:ff:
13:6a:95:dc:16:19:76:24:89:d8:7d:8f:35:15:c3:
b6:e3:f8:89:b7:86:19:f1:d6:5f:cf:59:3e:c8:fe:
2f:de:ad:08:40:b9:ba:30:cd:a2:39:cd:77:ce:7e:
02:2d:91:e5:ee:53:8d:f9:59:8b:1d:83:a9:16:f4:
f6:9c:d7:55:74:88:82:18:71:5e:a6:a0:4b:25:fe:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:32:79:8C:CA:CB:B0:A9:BA:64:E5:E5:D2:55:87:8C:73:FF:FA:45
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:20:91:26:f3:e1:ee:6f:cf:ca:3b:be:f2:7e:e4:4a:1c:4e:
3d:c5:00:3e:87:cb:c7:5f:74:71:e9:52:b8:ae:8d:a7:66:c2:
fd:cf:67:4c:2d:ac:8a:f1:c9:2d:a0:f5:14:8e:38:19:b6:e5:
a3:72:da:3b:d5:e5:9f:d7:22:36:58:e3:27:2f:34:69:9e:a1:
a0:ef:54:89:65:df:72:da:a4:b9:06:50:a1:55:02:c2:cb:96:
33:de:a0:9e:bc:28:4c:d6:64:a1:4a:11:c3:19:4d:7b:94:f1:
ac:47:b5:b0:b5:8b:ac:24:07:95:4a:0f:79:63:18:15:4c:0f:
93:87:5c:99:9f:e1:ff:52:1a:a1:98:b8:be:a5:cd:d0:f8:b4:
0f:b9:15:c4:02:09:e3:9c:f7:b6:a1:33:77:0c:02:7d:d9:62:
8f:4b:36:b6:ef:69:28:70:09:17:14:57:0f:cd:87:3e:37:5a:
2d:ad:8d:78:7b:cc:a9:4e:7f:f7:c4:38:a5:3d:1c:06:4a:9c:
b5:50:7a:70:53:56:a4:56:0a:41:a8:16:f7:86:ec:18:9b:46:
ed:55:a1:77:73:83:a7:0a:09:a3:19:f9:81:a9:cf:f4:25:37:
78:e7:54:83:af:24:65:67:9e:c0:1c:96:31:85:23:21:46:30:
7f:b1:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:28 2026 by rpki-client