Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: MMqaZW19BDtZbdHVXQZPBjt6mVtkC9mKfdmgHSgZoPY=
Subject key identifier: DE:1B:B8:95:74:AC:AA:2A:38:CB:30:59:94:F0:C8:9C:F7:87:C9:55
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 019D33087B6A96136AE9461E3705402D7290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 06:01:26 +0000
Manifest this update: Sat 28 Mar 2026 06:01:26 +0000
Manifest next update: Sun 29 Mar 2026 06:01:26 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: 6IHF8ZrpgEUUwy7UI4VAyBr/L9q8z5vFJMkgHz2lOi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:7b:6a:96:13:6a:e9:46:1e:37:05:40:2d:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Mar 28 06:01:26 2026 GMT
Not After : Mar 29 06:01:26 2026 GMT
Subject: CN=de1bb89574acaa2a38cb305994f0c89cf787c955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:89:a9:9a:f0:bb:c4:d6:5b:09:f9:67:67:
bd:25:fe:ea:90:bf:8b:ec:d1:1d:7d:e5:98:6c:c3:
7c:3f:16:22:f9:45:a6:3e:df:80:21:b2:92:2d:96:
8c:54:b9:66:98:de:94:ff:5b:c4:52:eb:c0:a4:2f:
be:3d:ed:6d:7b:47:6b:01:cf:70:d6:2a:e2:1e:83:
84:71:8c:b5:04:8a:47:e7:a5:44:75:8b:f5:22:3a:
7d:05:92:3a:0b:1d:40:8c:e9:e2:91:76:59:20:f0:
a2:0e:1a:ad:67:14:ea:96:b4:24:c1:54:8e:91:0d:
e2:0a:84:f1:c1:bc:3b:bd:09:4a:b4:82:ec:06:c0:
ca:96:b0:ea:12:b1:b3:40:d9:64:f0:08:84:6d:7f:
a9:ff:e8:ea:d6:a8:fc:04:d2:e8:52:2d:a8:0a:19:
02:f7:6b:4d:50:79:1d:3c:1c:a3:f7:24:46:2d:95:
59:ba:45:a9:ad:c7:f1:8d:bd:b5:db:50:6d:b4:eb:
d2:ad:9d:05:8a:80:23:7f:38:de:50:c2:79:6f:55:
b0:7e:ff:24:cb:e1:5d:86:ef:60:37:a0:84:d6:e3:
f5:e3:00:33:50:dd:cc:d7:31:8b:27:12:d6:c3:13:
bf:06:47:2b:7c:45:23:4f:f7:b8:7f:40:e6:46:01:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:B8:95:74:AC:AA:2A:38:CB:30:59:94:F0:C8:9C:F7:87:C9:55
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:5f:64:49:f1:b5:44:6b:be:a5:3a:6a:6a:31:ec:39:0f:
9d:6a:f7:49:10:8c:78:a5:d3:f8:2c:40:73:f2:a3:b2:0b:f2:
6d:40:85:58:0c:28:48:f6:39:f9:f9:2a:2a:81:44:46:8a:69:
e8:6b:06:69:8b:cc:35:b7:e8:d2:37:fa:a6:64:97:6b:c3:3a:
e7:cf:4d:c0:07:34:d9:bd:99:33:e9:07:8f:b8:10:4f:a8:52:
f5:82:1b:8f:c7:7f:81:70:1a:61:82:57:84:50:d1:ae:54:12:
a8:be:e3:6a:cf:9b:9a:0e:a3:55:23:a9:13:01:94:32:a0:77:
ad:00:33:2e:3c:aa:46:d7:de:7a:ec:83:82:05:4c:e2:30:e7:
02:5a:85:01:11:01:63:30:58:5d:83:5a:15:da:e5:10:28:e3:
60:8a:79:a7:43:f7:70:49:60:2f:75:5b:e7:da:33:1c:83:f3:
bd:8d:24:e7:d8:35:7b:f7:01:3c:20:b8:1e:a7:58:39:9d:16:
f1:6d:25:2b:05:e3:cb:bc:f3:65:a6:fc:cf:a8:a6:fb:80:20:
c6:30:05:7f:53:74:73:07:33:20:2f:99:15:d8:08:dd:3e:bd:
19:82:42:bf:c9:99:ad:2f:a9:66:d1:3a:fd:ad:4a:eb:43:86:
c7:a0:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:23 2026 by rpki-client