Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier: 0aEIPn+ForZwW5jwncLXdh5XGrj8mqUyQgyOXVT7hVg=
Subject key identifier: 96:98:04:CA:72:CE:6A:E8:3B:CB:E3:7A:A6:7A:23:09:0A:84:CE:02
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 019D273B1A8AD589642CCB1D6A9C98F8E8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: 635MGwdEljrlIISQvssqee5brWRFFP1T1bLXTDnXX0M=)
2: xkix9rxtRJKN9muc3A9znVU0wSY.roa (hash: qGsESUAEiY6Y+S9TBPbDTAxY1gqMsRCWWSHmRkuLruU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1a:8a:d5:89:64:2c:cb:1d:6a:9c:98:f8:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=969804ca72ce6ae83bcbe37aa67a23090a84ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:9a:e9:07:70:c5:bd:c1:e3:bb:74:b4:01:
a3:f4:66:79:e9:64:ea:2d:73:72:4b:8c:7b:c1:88:
04:26:59:76:0f:1a:e0:f2:5f:92:c1:8b:dc:e4:a4:
c5:4d:a5:0d:27:f1:b1:15:8d:67:74:9f:f9:94:6e:
5e:b6:97:bd:c0:1f:77:89:ae:d1:cd:43:e7:56:a1:
86:da:96:58:fe:f2:8f:bf:63:bd:11:fd:2e:2e:55:
44:85:5d:70:f4:f0:43:d7:f9:0a:76:1b:f7:11:83:
86:24:42:fd:e2:26:a9:52:c3:9e:6d:fe:8f:5e:26:
75:c7:ef:ae:52:d3:61:d9:29:df:aa:39:52:e8:e9:
f5:b6:e4:c4:af:d4:ae:3b:24:6d:dc:df:0f:04:09:
12:09:da:27:fa:c7:46:c0:fa:81:f1:fa:b7:bd:37:
95:c0:67:d3:e0:ef:ea:89:0a:c0:75:2a:2a:71:3f:
c1:be:8f:f3:8a:8d:60:1c:56:0c:ca:48:de:8b:a7:
2b:a7:dc:ff:1f:99:61:d5:dd:73:d3:2e:04:4e:78:
03:16:4b:09:43:ee:81:ac:12:25:9f:7b:19:26:84:
e1:99:83:4a:21:b2:1e:b2:20:d6:c6:04:38:ab:ec:
ec:0a:11:7a:98:27:27:c4:a2:4d:07:f6:4d:0e:b7:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:04:CA:72:CE:6A:E8:3B:CB:E3:7A:A6:7A:23:09:0A:84:CE:02
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:cd:7a:02:e0:9c:4d:47:63:ab:e6:0c:42:7d:0e:8e:7a:
fb:a9:e6:c4:db:ed:91:f3:8f:87:ee:88:a6:73:c1:87:28:a1:
45:a5:0c:86:a7:ca:13:e3:9d:f8:dc:1b:17:fb:05:1b:8a:ff:
91:88:59:1f:b9:41:7d:9b:c9:ae:d9:1d:15:42:4f:bb:b2:9c:
99:80:56:7f:16:89:f4:00:1f:17:bd:03:ac:d0:66:e7:ee:07:
5d:cd:65:07:28:ba:7c:7c:67:76:09:ef:be:5b:42:45:d5:33:
9e:b5:72:3a:82:00:9f:fc:2c:3b:a2:bd:ec:a0:f2:db:02:ae:
d8:5c:68:36:67:4d:c2:33:cd:d8:ae:0c:c4:31:22:6b:04:4a:
46:84:87:35:a1:e2:5f:b4:ed:de:93:57:a4:7e:41:22:fd:ca:
6a:36:8b:d0:a4:01:41:f0:00:cd:63:d8:71:2e:78:9b:0e:89:
17:b8:d1:0b:69:4e:33:67:a3:52:a7:af:59:d6:a3:15:f5:ba:
43:d5:99:dc:c7:45:99:98:63:cd:2b:7c:b6:98:43:21:85:a9:
fa:71:98:62:9d:4c:86:97:0a:90:bb:25:78:05:57:0b:97:35:
de:1a:84:55:e8:7b:26:47:25:06:d6:de:53:8d:a3:67:23:11:
02:59:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:48 2026 by rpki-client