Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
File: a49xoY3OxDR8x7TQK8h4TorCewA.mft (raw, json)
Hash identifier: akPMw+heKZONFR5dFMKnh0bf6A8j6HuG3eaz0Cvhqyw=
Subject key identifier: 2F:93:F4:AA:D4:11:76:64:86:40:22:68:DA:51:D8:3B:40:E0:32:49
Authority key identifier: 6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00
Certificate issuer: /CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00
Certificate serial: 019D273AECB508E9B8704D99A7AFFCCEE060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
Manifest number: 018C
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: LpNRmtsCoRjao-6dvwj2HPVgG4s.roa (hash: kvWzFrGBwO1uv+vNoO53LU8Aj/p6EPQlI2j6iM0S5QI=)
2: a49xoY3OxDR8x7TQK8h4TorCewA.crl (hash: pBrtI0UUrnySWSxNypxPo3jCO1WyVN0Wdr5q8a8UVE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ec:b5:08:e9:b8:70:4d:99:a7:af:fc:ce:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=2f93f4aad411766486402268da51d83b40e03249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:59:73:8f:83:0c:26:fb:a2:38:43:50:0f:
7e:43:c6:44:cc:71:52:a4:36:d9:7b:fb:87:9d:b7:
4c:1f:34:76:57:85:46:9e:8e:59:9d:d1:9b:30:bf:
fb:00:31:91:1c:88:c6:eb:07:79:b5:d9:26:90:f3:
63:ea:19:eb:54:bd:88:b4:04:77:1c:89:aa:72:e9:
76:6d:50:db:d4:88:75:a5:15:42:91:02:ba:25:b5:
a7:f6:a8:60:7b:c6:48:c8:e8:ea:82:0c:b5:14:d2:
35:e5:01:e2:6f:be:d6:a7:4f:ae:c0:55:74:ee:21:
84:8e:b8:b1:24:d7:39:e3:c5:56:7c:3c:fc:ed:6f:
6a:be:f9:d4:6c:9c:db:35:66:27:12:16:dc:68:48:
72:2d:57:0c:79:03:a9:8a:8b:5e:e8:37:cc:d1:db:
eb:5d:b3:0c:56:80:bf:51:7d:6c:7e:08:ef:3c:c1:
ae:85:a2:25:26:ad:83:f2:df:29:e1:b7:ae:74:3b:
5f:5d:37:5f:b3:ee:c5:f0:02:f8:1a:8f:d8:91:ed:
47:27:ab:03:7b:89:76:51:17:d6:6f:c4:83:2e:f8:
bd:a2:80:af:70:21:fa:aa:14:86:25:ff:d5:01:50:
7f:53:a6:80:99:60:c3:fe:62:62:2f:77:c5:3e:e0:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:F4:AA:D4:11:76:64:86:40:22:68:DA:51:D8:3B:40:E0:32:49
X509v3 Authority Key Identifier:
keyid:6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:94:b5:0c:55:d3:a4:09:88:f1:9f:8f:95:ca:01:30:b5:1c:
c0:49:93:ac:ed:80:1e:83:36:d8:43:22:fd:21:89:78:17:85:
aa:ba:06:af:b7:a2:50:ca:83:ae:2f:0d:0a:16:33:0f:91:b2:
54:b8:d1:ac:a0:4d:d7:a1:26:3c:13:1a:9d:f8:25:9a:bf:e9:
83:90:1b:9b:e3:a7:d6:23:d4:0f:82:59:4d:10:64:7f:97:44:
35:bd:d2:3e:e5:91:74:76:14:37:a7:a5:be:11:93:f5:b8:67:
1f:ee:e0:d4:5f:72:47:89:87:20:53:f8:d7:2c:a7:db:bd:35:
bd:60:8f:b9:4c:7d:c2:f0:7d:c6:fd:e4:7d:0b:8b:53:9f:eb:
bd:31:78:7b:88:52:48:30:04:7a:4b:7e:a5:c9:f7:28:03:72:
ea:b6:32:8d:29:9b:99:a8:00:84:de:de:10:c6:29:71:d3:10:
a9:36:46:65:c7:84:f8:72:c9:36:5c:c2:54:cc:ee:a5:ea:8d:
6b:27:ad:d8:18:0f:84:d0:28:a4:2c:d3:e3:53:41:1d:c5:05:
1a:f2:fe:fd:4e:82:96:5f:60:4e:fe:c8:37:61:36:79:b8:78:
ca:c5:d6:1a:d8:c4:07:f9:d1:d1:7a:b8:22:4a:7e:da:e1:e5:
3a:1f:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:48 2026 by rpki-client