Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier: 53FlXyTTULSyq+qM8QGl57WD80LJl/GG2liNiEoWqyM=
Subject key identifier: A7:F2:43:08:05:41:53:1B:48:33:A0:F2:94:73:A1:D4:5A:42:65:24
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 019D26CD25BB11157A7E7D23A24A6B5AD82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number: 14C6
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: BIbEENkk1VYHKgEjraLUKclwiTY.roa (hash: Xt3A7RQYaDzUTGNw8VMdtqurMB1YlizmqkVXb08fVNk=)
2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: By9qQK2LbZZ/5kBjhrFIbZWXM4KinkQj92k5+Ab7XQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:25:bb:11:15:7a:7e:7d:23:a2:4a:6b:5a:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=a7f243080541531b4833a0f29473a1d45a426524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:3a:2c:62:0f:02:23:18:9a:be:3f:1b:96:
21:f5:81:87:eb:c4:4b:22:06:6b:13:8c:d5:f0:a2:
44:cb:57:c5:63:dc:59:9b:78:cd:23:01:50:e2:7e:
e8:b4:65:91:2f:00:a3:90:49:14:6c:d4:22:65:a5:
ae:19:ec:60:73:a5:11:0b:dc:8e:af:d8:84:27:0b:
41:13:93:93:14:a0:aa:ae:54:12:8e:63:07:e7:78:
97:84:cd:3a:25:84:21:4d:ee:b0:fb:69:61:aa:62:
b1:01:8f:4c:44:8b:22:b7:a1:52:6c:46:98:0c:02:
c8:a6:d5:2f:b1:cd:d4:f7:fe:e1:31:47:f0:36:6a:
ce:89:25:a1:99:49:46:bd:ed:b9:d2:90:70:e1:6b:
0d:ac:ca:d9:f8:a7:15:cd:22:35:05:50:18:88:34:
de:48:fc:3d:d3:f8:cd:59:6e:3d:77:71:d0:0c:1d:
f4:c9:0e:74:d4:3f:11:cf:20:04:35:c0:7d:f8:c6:
f9:39:47:60:c9:38:c2:16:a7:07:91:60:73:28:3f:
71:cf:e5:75:c8:ff:96:58:73:b1:f0:c9:ff:76:7d:
78:4c:ac:02:75:1e:5a:7a:63:84:a1:fc:6c:71:c6:
4f:32:d5:cc:26:06:24:a1:4a:4d:0d:4b:83:54:3d:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:43:08:05:41:53:1B:48:33:A0:F2:94:73:A1:D4:5A:42:65:24
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:ac:83:13:87:b0:47:7a:fe:25:34:0b:c7:b6:5f:7b:01:
b4:b0:0c:df:3b:29:97:17:65:9e:36:ee:d1:b9:46:73:7d:e4:
02:6d:27:61:b0:d0:dc:03:62:e5:a0:44:45:19:ee:0f:22:c0:
fc:f7:9c:8c:4f:ee:ba:1c:06:e2:48:1a:15:05:38:67:5f:01:
b0:2a:f9:5c:32:17:1f:6e:1f:95:f9:7f:88:c3:61:6a:36:df:
f2:96:89:2a:74:81:55:10:1f:0f:7b:e1:4c:36:5d:db:71:f3:
a0:b9:5e:a0:b9:91:aa:ec:4b:26:3d:39:ca:9e:27:ff:77:cd:
8c:77:91:05:27:a3:3d:26:41:76:a2:9f:54:db:aa:1d:5c:3f:
16:79:73:76:d6:73:15:49:5d:eb:ef:c1:0d:5b:c3:d0:78:38:
ae:41:4d:7e:c8:aa:26:33:2c:4c:c0:cd:92:83:d8:67:e4:f5:
84:e0:47:00:d2:18:a9:fa:8e:2d:c6:b7:17:c8:0f:38:da:92:
80:52:c4:a5:c5:7b:3d:35:fd:72:1b:33:f3:69:29:07:e2:85:
0c:4b:04:5a:d2:2c:8e:b2:3a:af:b8:6a:04:86:5c:8a:1e:72:
77:ed:22:28:23:94:aa:7f:65:4b:43:dc:38:da:7d:65:f5:83:
24:b3:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:26 2026 by rpki-client