Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: LJynfKC2brLCKenui9UmwXrTsjbNQu+gY1NBFvqphLs=
Subject key identifier: 09:4A:D9:AD:94:79:E8:7D:BA:28:DD:ED:62:2A:21:D0:6E:AC:4B:C5
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 019E1CB513BEDA3C98D947531116E9A21CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 15:01:29 +0000
Manifest this update: Tue 12 May 2026 15:01:29 +0000
Manifest next update: Wed 13 May 2026 15:01:29 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: v0PQ5EzkvNq6IWUFi/RgKUIR+GxrFFhHFUy3eJ19ooY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:13:be:da:3c:98:d9:47:53:11:16:e9:a2:1c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: May 12 15:01:29 2026 GMT
Not After : May 13 15:01:29 2026 GMT
Subject: CN=094ad9ad9479e87dba28dded622a21d06eac4bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:54:5a:5d:3a:b5:70:dc:d8:51:3f:7c:96:
c9:4d:35:c6:ae:b7:f2:cf:0b:6d:a2:05:a7:61:41:
dc:85:a8:2e:3c:2b:af:3a:71:4b:69:a0:a5:ee:c1:
3e:e0:10:e7:7d:03:f6:fe:d2:7d:b1:f6:8b:f9:2b:
2c:09:a1:32:62:48:e4:97:74:86:23:56:1e:66:4e:
72:6e:78:b9:a1:fa:3a:c6:78:f0:25:77:5f:8e:f1:
d8:e5:69:87:57:80:bd:e6:e7:6f:0b:d7:46:69:82:
ff:1c:46:b8:66:80:64:16:f4:e3:f3:ec:a2:f1:f6:
a9:6e:e1:f7:e2:c8:2b:d2:ad:35:5c:8c:8b:54:c3:
80:40:68:ac:87:10:d9:10:f9:a0:6e:5b:e3:5e:22:
82:c6:84:90:b7:e0:58:6f:c8:d5:5a:9d:2a:73:17:
c2:10:b2:d7:52:31:e4:fd:be:50:5a:05:81:e1:9d:
7e:9c:88:85:a7:78:93:e0:05:ad:0a:2d:89:ff:2b:
5b:47:63:4d:dc:ec:99:38:f3:17:25:d3:f2:1d:bd:
92:70:88:9c:49:be:61:49:a9:cd:3b:f4:5f:96:91:
b3:b2:e3:cc:db:12:b5:a3:95:f5:17:6b:d1:f9:5f:
4a:0c:e4:33:73:f7:c6:5c:97:10:23:e8:53:67:d1:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:D9:AD:94:79:E8:7D:BA:28:DD:ED:62:2A:21:D0:6E:AC:4B:C5
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:3d:a5:9f:c0:85:b2:7a:d4:93:d0:36:6a:21:e6:54:48:
e0:fb:e2:d0:00:44:97:0e:34:ee:ac:8b:8f:40:22:0d:49:8c:
cb:1c:71:97:24:1d:18:64:00:e9:60:35:f1:78:e3:ba:3a:ba:
de:db:ce:27:7d:e7:60:eb:36:31:9e:3a:09:f3:99:47:b2:8c:
d3:67:2a:9c:2d:5a:41:6b:fb:2c:22:5c:c0:c7:47:b5:54:44:
62:b6:5d:43:52:06:98:10:25:f9:fa:49:56:d3:d2:8d:d9:73:
4d:21:43:47:af:ca:69:e3:c7:be:2e:57:0b:ec:c6:5c:76:8f:
5b:51:0c:76:b2:bd:ba:73:ae:ec:19:e2:66:e1:5d:5a:5a:33:
9e:c8:d8:e5:f5:04:da:41:59:a8:a0:af:49:ee:5c:2b:a4:28:
49:c3:46:df:06:18:e4:e5:b6:90:4f:61:89:23:83:20:9a:77:
47:41:b9:7f:d8:5b:a7:b1:63:7e:13:9f:5a:a1:9d:71:36:fd:
c5:31:0f:ea:f7:ff:1d:d8:cc:e3:f7:f3:63:ab:cf:de:a4:d6:
6c:77:5c:7d:00:e2:2b:4e:80:72:3e:75:8c:0f:0c:5c:df:59:
3e:f4:6d:ee:d8:75:ca:c1:7f:d1:2e:2b:80:12:ec:b3:a7:0c:
e2:3e:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:46 2026 by rpki-client