Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: sOgO2c40YCiqdhXlhHRBa7hGPprHLvY1m3SeU8QemVo=
Subject key identifier: 92:60:5B:9D:F7:2A:1E:48:A0:1C:C9:85:1C:16:9C:7C:4A:2E:3F:A7
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 019D27DFAA964FDD8340AA3A920CAD11C367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 08AE
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: 1D6YY4AfNvV2NepuuxtkGVV-rLg.roa (hash: LNZLVcujqagQzwW2q2V4qRkT/sBDkvN16A/NWVzLzWU=)
2: HOYPj4fxlJpMEgvz-DEwT478Zw0.roa (hash: 7P50ZlqJyO8nhGQCGcuWiJXDncM9pWzrp0URwjErvl4=)
3: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: f7HNS3vMCtg2WPdZZvSghmfzJrvBnB2ijGwUvjPR/IA=)
4: UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa (hash: eu9hciCdi48z/WHUFfgsqnitXTRgtMV120uloxDdTDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:aa:96:4f:dd:83:40:aa:3a:92:0c:ad:11:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=92605b9df72a1e48a01cc9851c169c7c4a2e3fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:59:e0:25:67:d4:4e:29:6f:91:d3:f2:47:
28:da:06:78:88:0c:13:2a:9e:7d:67:55:d2:26:51:
36:08:7c:4e:f5:d5:c0:ff:ef:cc:91:fe:5c:64:e2:
44:a8:fd:05:df:26:64:f3:89:20:1a:ef:31:50:3b:
4d:b7:26:08:7a:c3:f8:e3:e1:09:11:0c:46:0e:3e:
ee:aa:ab:68:e1:c0:32:46:17:68:c8:b0:2e:a6:c3:
f9:66:12:e5:d1:19:bb:e3:09:43:b6:0a:84:d9:90:
ac:03:47:0c:78:4c:1b:37:d7:a2:73:20:0e:a0:cd:
d4:70:7b:44:28:79:95:45:59:5c:56:25:ff:3e:c4:
1e:1c:c2:81:66:c2:99:47:e8:23:02:c4:7f:85:58:
4d:fd:57:19:9b:16:48:27:bb:fc:cc:63:50:ff:51:
eb:a0:56:88:a0:71:6b:dd:d5:a3:36:b4:cc:c3:2e:
78:72:b8:eb:de:82:47:15:fa:3e:c7:fe:55:dd:e8:
1f:23:80:76:dc:54:13:91:26:2e:82:92:ee:07:3e:
7d:41:46:46:3e:fb:0f:2e:0b:ef:df:83:23:ba:75:
e6:4e:42:6e:ac:69:35:b0:e5:45:a5:82:dc:9a:98:
81:e8:76:85:aa:8b:26:45:6a:fa:2c:11:c3:ba:a6:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:60:5B:9D:F7:2A:1E:48:A0:1C:C9:85:1C:16:9C:7C:4A:2E:3F:A7
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:36:ca:96:6b:26:11:56:85:f7:9e:8e:13:01:61:ba:92:
58:f5:4f:0f:aa:db:62:75:65:e5:13:0f:a3:fc:76:48:60:68:
a8:c1:57:6d:54:d2:76:8e:7d:ab:93:26:90:13:cf:ec:36:4f:
76:91:d3:f2:f8:ee:7f:dc:b5:88:b0:74:82:72:78:e1:80:ca:
b7:eb:e0:22:01:ab:67:d6:1f:84:61:db:9f:a0:92:83:51:52:
af:44:00:96:1b:f2:78:0e:db:39:97:71:c2:f2:0e:57:c8:ea:
3e:66:3e:55:7a:6a:16:3f:c6:be:76:33:b3:c0:d9:ef:3c:79:
66:89:54:da:23:97:32:c0:a7:b7:07:9f:cf:97:15:1f:70:a9:
f8:dc:c9:8a:fd:f2:75:4f:c2:96:c7:48:11:89:c1:b4:a5:cd:
44:e1:06:a9:21:d4:2a:b8:fd:06:b7:4b:67:b4:e2:40:4a:71:
d4:7d:9f:ac:fa:3c:22:e2:d5:3b:42:62:28:07:2d:e9:ba:dd:
ef:20:69:2b:3f:d0:e1:ab:61:8a:80:11:a3:f2:9a:a9:d9:17:
05:03:70:ed:5b:47:67:14:b2:87:4d:88:19:c7:6c:df:33:33:
dd:97:4f:13:d5:e1:b3:35:1f:99:b7:68:6a:7a:ef:e9:f0:42:
b3:d1:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:29 2026 by rpki-client