Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File: M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier: bm525Q5YwLcoUDm0wnMSD6fFiODKgHYMjMn/MbiSv0o=
Subject key identifier: EF:A1:D7:9D:7D:BE:DF:91:F5:90:01:65:B6:A3:F4:C8:15:B0:E8:88
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019D29CE4951851AD5F91CE3889483BD9F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number: 73
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: SEGZ8FddEcNK9hirz9ZkeiDtvww1HdFPSpjI0fbD83A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:49:51:85:1a:d5:f9:1c:e3:88:94:83:bd:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=efa1d79d7dbedf91f5900165b6a3f4c815b0e888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:ac:96:b0:26:3b:05:b7:10:62:81:18:ac:
2a:58:c0:ac:71:84:fa:5f:d3:44:cc:ae:ec:c7:5e:
d3:3f:67:9d:d7:f3:4a:e4:f2:77:29:c7:73:7f:92:
ca:d3:31:53:00:5b:c3:be:da:ab:a6:65:3e:68:86:
64:5b:89:d1:42:55:e6:4c:c0:fa:37:87:5c:8d:07:
72:a3:45:f4:0f:70:0a:fb:b3:74:ba:6d:a0:a8:db:
2e:81:38:db:96:af:f3:79:7e:8e:fc:a3:4f:f3:ca:
71:bd:88:18:1d:be:e2:24:20:07:f9:fb:ba:0f:a7:
1c:ea:56:3b:b4:1f:3a:ab:94:28:ab:30:e7:17:81:
46:16:a2:c9:ef:45:88:37:a3:4c:25:66:bf:87:69:
ff:a1:db:6c:61:a4:93:c6:55:72:38:e3:d7:a8:28:
c3:99:7d:ee:f2:b6:5b:77:0b:3b:52:fc:3e:6c:dc:
12:b2:15:27:98:f9:2d:3f:f3:50:f2:1a:29:c6:ff:
d8:38:3a:9b:ca:d7:b0:1c:bd:e5:a2:21:5d:3b:ed:
95:5f:53:b9:97:bb:87:89:2e:ad:63:11:68:34:e1:
c3:91:6b:4d:03:d4:8b:1b:c6:da:43:05:ac:a2:69:
fc:b3:d2:61:85:4d:d8:d7:56:a0:05:61:19:10:2d:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:D7:9D:7D:BE:DF:91:F5:90:01:65:B6:A3:F4:C8:15:B0:E8:88
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:af:f8:87:8e:7d:72:0e:3e:6c:cf:41:a6:de:4c:a6:be:
0c:f0:89:54:a9:d4:ef:3e:bb:a9:85:d1:9b:2b:25:68:11:f2:
2f:1d:f3:52:0f:dc:83:bd:2f:f4:cc:d9:5f:e7:82:a6:e8:76:
13:54:69:f4:74:12:88:27:93:1d:7d:5e:2d:91:b3:c5:f5:dd:
46:ee:18:0f:a5:f9:da:c9:45:53:70:1f:f5:f2:5a:06:ad:e5:
6e:4a:39:a7:77:0d:36:0b:e5:91:b9:48:36:82:db:3b:38:08:
de:ca:74:41:9a:b7:62:14:31:85:54:ba:84:84:8d:92:e0:ae:
3f:ba:3b:91:45:6c:9e:6d:b2:a9:9e:eb:2e:16:0a:9e:48:21:
ef:0c:87:9f:b0:ef:ad:ef:ed:a7:20:51:84:f7:ac:e4:06:53:
90:4e:06:6b:9d:4d:83:97:b8:4a:1a:de:3b:b4:e9:70:da:b6:
58:59:3d:26:84:3e:ac:7f:62:94:c0:28:d2:b0:b6:55:47:f3:
46:a1:0e:2f:fe:a0:53:6c:01:7c:2f:1f:08:d3:6e:e3:38:1b:
dd:aa:b7:bd:f6:3e:41:61:9f:a7:7f:a9:8c:fc:d2:84:a7:d1:
04:5e:ae:1d:c8:73:8e:60:c3:ec:8c:49:9b:5b:39:86:7a:72:
0c:9e:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:11:14 2026 by rpki-client