Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: ZtI7TIhlrqgNH2dpysIkuMwdBkNKV/Gi3McVWKE1wQE=
Subject key identifier: 60:69:50:11:3D:58:DF:D0:67:62:42:C0:B7:4A:63:4A:AB:5D:39:A5
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 019D26CD127E883983B8F80F0CA65E51F6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 1347
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: Alslx_oASGDhTgnk4VxtSFMgpMo.roa (hash: pyjVJGCY7h0uxXhNOv3Pu/XxJ3scX5SvQaxdIXBnRtg=)
2: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: 7XJAHtmuejudgZKT+mVLuiQhyux7hQ3kYcmbBaSOkEg=)
3: wzvlYmTV-9nsSGFn0dstmC1HmEk.roa (hash: kl+8hGqZ5wyjtFNiWYNpl45G6d3B4Xj29eq45toQRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:12:7e:88:39:83:b8:f8:0f:0c:a6:5e:51:f6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=606950113d58dfd0676242c0b74a634aab5d39a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:c7:6a:13:51:9f:9e:f6:d1:9f:b6:f6:38:
3b:05:df:bd:fb:db:4d:df:3e:a2:cd:f2:6d:a7:3f:
55:1b:b4:74:50:fa:e5:c3:30:57:e0:c2:29:7c:8e:
00:0b:a9:f1:2a:cd:96:fa:ca:a2:96:bf:56:8f:b4:
c2:0b:3c:b8:09:13:b3:0a:9d:a4:00:74:d2:ec:91:
4e:27:2c:0d:03:9c:55:5f:5d:2a:29:76:13:c2:2f:
b4:6f:3b:9c:f3:ff:de:13:22:94:f4:1e:7d:a6:a0:
f4:3b:2d:c5:0d:f3:3b:48:de:7e:ec:32:43:68:18:
40:90:77:b4:c1:8f:41:02:d5:e4:20:a1:84:d3:e5:
bc:06:10:a2:ca:64:13:36:a7:97:41:e2:83:e0:e6:
5d:27:b0:e1:48:f2:5a:1f:15:ff:3e:95:e7:45:8a:
f9:37:f3:0a:b9:79:52:bf:6e:c3:2a:1c:40:58:4a:
68:c4:2f:97:1c:67:b3:d0:26:b9:fb:38:7f:ac:28:
49:0d:2f:e5:92:6d:f0:da:82:6f:18:e3:1f:f8:f0:
f0:2e:18:08:bc:ac:ac:7c:c9:00:36:b5:91:38:4c:
1f:5d:ef:5d:52:d7:b5:4d:31:70:c5:9f:5a:68:47:
b9:1d:ed:11:01:bd:0b:a9:de:1d:fb:29:d4:d3:59:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:50:11:3D:58:DF:D0:67:62:42:C0:B7:4A:63:4A:AB:5D:39:A5
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:86:b3:aa:d6:e8:0b:c1:86:50:85:94:34:69:47:0f:de:
f1:73:72:ac:57:1d:34:6d:1a:7c:f4:e7:1a:2c:1e:01:60:ce:
1f:ed:f7:11:1c:51:71:a5:ec:db:7b:a1:41:07:68:3f:a2:d3:
18:ea:0e:9b:0e:38:7d:28:72:f7:24:a8:15:55:0a:47:bb:a5:
b2:8b:db:1b:db:e0:b6:47:8e:2a:86:d1:47:4f:93:9c:ea:68:
44:73:cd:37:8b:68:47:ed:35:71:29:50:dc:85:bf:eb:4c:db:
6a:de:7b:5a:78:92:05:a4:43:b8:6b:e0:5b:d2:95:3b:33:9d:
b1:ee:7d:79:a9:43:99:da:ab:0f:ff:c3:17:b8:f7:41:85:3a:
15:60:9e:07:22:cf:79:98:54:7d:d1:91:9e:2a:a8:53:39:36:
be:1a:2f:5d:34:cc:1b:60:8a:29:5b:a1:02:8d:90:1a:4d:a9:
de:55:ad:c3:2d:be:89:5d:f0:b3:ff:4c:3f:9d:a3:ae:a6:6f:
57:fc:b7:b7:ba:2b:bc:9b:b8:53:26:c5:13:50:91:03:0b:ea:
53:b3:f2:2c:f4:9a:69:88:b0:5c:ea:1b:bd:52:b6:96:b6:1a:
4f:ff:67:6d:70:73:59:73:94:65:ce:9d:18:5a:0f:15:ec:b2:
5b:3f:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:31 2026 by rpki-client