Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: By3w7Fcvcj1oxwTFz7e44q/SGh7RLLzcMP9wObtxI5I=
Subject key identifier: 92:BE:40:40:65:19:62:3B:3D:45:95:5E:FE:ED:B2:7B:47:7D:EF:C9
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 019D28845183F3D359CB5DD71416595A877E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:53 +0000
Manifest next update: Fri 27 Mar 2026 05:00:53 +0000
Files and hashes: 1: q4rzKSXLMYHtnn01lh-3_0miwBY.roa (hash: 4WFeJNY2dZdjFO09kUagttduuFT2UApeU+WXW0RnoeI=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: nJwtFVgHKheHjyf+7IIyrbsyyt3oyHONXaZgkaKLgaU=)
3: ySrRvQm3X3VhVYttkpxQWZYbXdQ.roa (hash: KzWiwoTTJ9AdrcEw0bbtPCasz1IP6A360CxQeB6+VbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:51:83:f3:d3:59:cb:5d:d7:14:16:59:5a:87:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Mar 26 05:00:53 2026 GMT
Not After : Mar 27 05:00:53 2026 GMT
Subject: CN=92be40406519623b3d45955efeedb27b477defc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:33:df:40:69:64:84:87:be:f1:2f:45:5c:
90:5f:a8:1f:8a:53:89:37:bd:1e:ec:89:ff:1f:25:
f1:83:20:14:7f:d7:ee:9d:a9:48:25:47:94:4b:bd:
88:16:c4:79:f5:40:00:0a:fc:7e:10:5f:a4:45:57:
39:83:19:c5:53:d1:b4:4a:fc:f0:36:8d:cf:0f:e8:
77:55:86:92:ce:77:e8:5d:6a:e7:80:35:58:a9:3d:
89:49:e8:cf:f6:c3:0c:5f:16:f9:af:0c:5a:37:e0:
22:61:e5:7f:cc:9f:0c:e3:69:11:4f:78:1e:7e:a8:
63:ea:c6:c3:2e:30:35:29:73:8d:84:e9:0a:d4:0f:
c7:23:ee:46:3f:3f:10:bb:ae:b2:37:8e:44:f7:9a:
93:a2:f2:59:5c:cc:91:0f:f2:bd:f8:eb:6d:55:b7:
10:63:40:80:12:f2:0e:1b:e3:96:58:d0:97:2b:3e:
64:56:2d:dc:c0:69:79:04:73:1f:41:f4:e4:91:d8:
3d:d7:d8:b5:77:1f:37:89:4f:48:56:e4:c4:f9:32:
ab:23:b2:c4:27:3e:76:6d:87:f9:c5:b5:05:83:16:
49:fe:48:be:69:09:39:e8:2d:fa:27:6d:84:e5:6d:
4e:3d:5a:a4:04:b8:d4:ff:b6:04:84:4e:92:81:50:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:40:40:65:19:62:3B:3D:45:95:5E:FE:ED:B2:7B:47:7D:EF:C9
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:b2:3d:2b:4f:1d:ba:01:31:83:0a:85:fb:ed:ec:9d:44:
6b:48:2f:97:9e:33:03:59:2e:21:15:6f:e2:4a:fc:7d:27:c5:
9d:2c:99:40:64:cd:32:0d:f6:68:40:f8:cb:1d:8f:46:1b:3c:
be:e2:f5:55:9c:ae:39:3f:62:38:14:fd:02:fe:16:95:15:77:
bc:fa:7f:79:bf:17:31:39:4a:6b:b5:d4:19:59:e4:88:56:d9:
e8:37:eb:e5:e9:3f:51:0f:22:06:cf:16:1a:d0:70:bf:7c:ed:
67:45:f8:2f:2c:ea:ad:5a:40:7f:f5:03:b0:6a:bc:a8:6c:16:
b1:e6:2c:5e:5a:20:39:9d:79:08:b1:d5:06:d3:2e:26:ec:d8:
59:25:af:83:4a:b5:c3:72:ad:d4:89:88:ee:ad:c4:bc:a2:c0:
0e:02:0f:dd:d8:45:3f:e3:fb:92:a0:10:d9:de:c5:3e:45:e1:
64:97:16:54:e9:bf:8a:c2:d6:9b:ef:6e:88:80:a4:4b:fc:e2:
27:62:27:1d:df:3b:f3:69:f0:a6:45:c9:46:72:9e:f4:9d:98:
45:b7:64:6e:a3:16:5f:e9:02:a7:10:1e:96:7c:2d:4e:5d:a8:
48:07:2a:0a:01:51:02:3c:3c:a8:1e:db:72:88:ba:2f:bc:e7:
58:13:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:07 2026 by rpki-client