Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: JrxNYyBooVgTQDhw5sjCyRpF1vf+v5DVs0ILBwc2Jx4=
Subject key identifier: C7:10:23:65:D1:D9:0A:0C:7F:9A:1D:BD:B1:CF:74:E5:2A:B9:05:5D
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 019D27723C6EDD3D9D0208E97A701D9C22F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 10FC
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: _kecmz5wOrK7gIei5HshIFKgYnk.roa (hash: oq5fC/PMeXxhdzroEzJ+3bMsZ8OSQI5v+Sc2hvXm5Tc=)
2: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: RcmZH5LSNSsiKCD//CglaLZ99MitMffIOTXiz+MIcLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3c:6e:dd:3d:9d:02:08:e9:7a:70:1d:9c:22:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=c7102365d1d90a0c7f9a1dbdb1cf74e52ab9055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:7f:7f:0b:71:08:f7:59:a5:9b:ad:c0:fd:
86:62:02:46:d2:bc:64:10:93:a9:d1:b1:68:8f:f6:
52:7f:e8:c8:8a:11:17:28:4a:7b:88:46:9b:4e:31:
ac:6e:b2:f6:61:89:15:14:53:a7:f9:cf:4a:95:79:
81:54:83:b8:c3:34:56:e8:d7:26:40:cd:f0:24:2d:
f3:a3:69:a2:95:b2:61:3f:7c:78:28:fc:35:16:a3:
d7:9a:a6:76:89:cd:e1:42:09:a4:39:e2:cc:31:49:
60:c9:8c:4d:93:52:7c:45:61:6c:f9:0c:72:e5:1f:
f0:ea:d5:09:dc:a9:d7:48:1d:7a:38:fb:2e:56:45:
44:15:64:71:19:ce:db:bd:40:25:21:5f:8f:26:b6:
12:37:d7:53:cc:00:97:20:4e:67:8d:0d:98:1d:a9:
13:40:cd:2c:09:76:bd:45:c6:f5:7b:f9:dc:0e:b8:
a5:a2:03:38:fe:f2:34:8c:56:85:bc:36:a4:e7:d9:
bf:90:75:91:83:4e:0a:c3:94:87:27:98:1a:73:dd:
95:26:e7:e9:e0:7b:06:97:49:ff:04:b2:db:7f:a2:
1c:6f:0c:1d:ea:3c:ca:fa:37:43:b4:a5:e5:b1:54:
42:3c:3e:7e:c0:49:8e:97:4d:fb:11:01:38:c1:9d:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:23:65:D1:D9:0A:0C:7F:9A:1D:BD:B1:CF:74:E5:2A:B9:05:5D
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e5:ba:45:2c:c2:31:9a:17:76:c2:5f:11:01:5e:12:83:b2:
28:db:6c:2e:3d:1a:45:9a:cf:0b:13:00:31:fb:78:b4:bc:26:
1b:47:45:7d:fe:73:8b:35:88:2a:25:85:0f:3e:4a:3b:0b:87:
e6:a5:ec:7f:9a:3e:13:f5:db:49:50:7f:cd:9f:34:bd:8e:bc:
b2:39:06:1b:50:74:d6:0f:49:85:31:32:56:c0:ac:31:d9:bb:
02:d4:e2:9b:4d:b9:fc:bd:0f:03:b2:e0:f0:23:8b:81:f9:4d:
63:d6:32:8e:4b:59:24:67:89:77:d7:9e:2a:34:b5:47:c2:f3:
82:d1:4f:71:e3:ee:e3:18:35:04:9b:ce:49:a2:28:71:6e:09:
bf:3a:12:f7:9a:e6:02:5d:88:41:af:04:6f:ae:d4:c1:54:4d:
60:9e:3f:7b:24:1d:c4:e2:3f:53:ec:08:13:69:b3:20:4f:3f:
58:20:c4:f2:f2:9c:ed:29:30:b5:75:91:92:86:57:2b:00:b1:
c6:57:ed:e8:45:d6:bc:c9:a4:c5:a0:10:b6:cc:3a:36:4a:33:
66:40:a6:af:62:2b:f2:8e:24:3f:d7:34:06:3c:3c:ce:4c:7b:
09:46:e9:52:0d:3d:b4:11:82:6f:80:f2:7d:7e:d2:29:46:5c:
b5:67:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:16 2026 by rpki-client