Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: kV+8ETtkufqRAVT15dYMQMngjnXHb8aZVnLSm/WGYEY=
Subject key identifier: AA:8E:D3:B0:18:38:08:78:3F:84:89:3E:78:BA:E8:69:D1:ED:2E:F3
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019D27DF8381BB720BA975D75510840DBB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: gCBuyrbKTdEvisr4nT6qltiG/5Eg9D46F2YrZ9d4mWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:83:81:bb:72:0b:a9:75:d7:55:10:84:0d:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=aa8ed3b0183808783f84893e78bae869d1ed2ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:ee:27:9a:75:18:cb:4c:0b:29:f8:27:6c:
bd:7c:d9:75:04:9e:0d:63:9f:a6:ae:7c:17:8b:86:
8b:0d:48:74:6e:7b:14:8b:f3:a5:ab:5c:bf:53:b1:
07:bb:27:ff:61:22:f8:b2:7d:20:f0:f6:fc:27:bd:
e1:39:63:fd:59:01:18:b6:b5:8f:54:67:01:48:1c:
f8:e9:45:99:df:3e:2b:b5:c1:7a:65:e4:85:f2:c6:
ab:17:0e:a8:81:9d:b2:a2:55:4a:c2:cf:8c:25:41:
af:28:34:bb:ca:29:92:7b:c6:77:6a:37:dd:b3:ff:
54:9c:d9:72:e7:24:32:ed:04:90:4b:ae:26:94:28:
aa:eb:6c:f4:7d:b2:8f:e1:ff:19:dd:32:21:bb:66:
c4:59:db:37:57:13:78:fd:ec:db:62:40:e0:b4:5c:
d7:c6:21:58:f5:a4:3b:99:da:c8:a8:9e:69:90:ca:
f5:e5:40:2b:08:4a:55:6a:a1:79:be:2e:80:1c:00:
31:9b:3b:21:0e:f3:1c:65:78:4a:5c:1d:9d:b2:8d:
9f:56:12:0a:4c:9d:c0:d6:bc:a2:2c:00:79:62:5a:
82:06:e2:90:19:61:6a:16:5c:05:6e:13:66:03:4f:
33:21:1b:20:6f:8c:f7:c9:3a:be:43:f8:22:77:da:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:D3:B0:18:38:08:78:3F:84:89:3E:78:BA:E8:69:D1:ED:2E:F3
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:60:fd:a8:15:8b:1c:97:50:c5:c2:7d:61:29:0e:12:8e:b0:
24:45:90:4a:8c:11:6f:42:b6:f8:2b:f9:26:21:0e:24:a1:78:
17:73:11:7c:ab:62:6e:8b:8a:4b:06:f0:02:d3:23:bc:31:1a:
4d:15:3e:d4:ad:78:54:10:95:30:a5:9f:eb:63:b7:cf:8c:be:
27:66:80:b9:d6:9c:b0:95:0b:75:96:40:93:97:5c:17:ba:2b:
08:e9:aa:31:9c:0d:f6:ea:6f:07:20:52:12:78:a8:81:d2:5d:
26:60:67:fd:29:36:d4:de:32:b7:d8:18:88:ea:ec:62:f9:ab:
2f:33:f1:e4:34:ee:a1:e7:0f:64:0a:40:eb:7e:d5:55:ad:21:
30:d5:7a:04:89:6c:14:7d:b7:7d:68:07:74:b1:af:54:d9:58:
a4:f7:8b:14:9a:0b:35:bc:4e:8c:36:27:bc:8a:f5:a2:39:c2:
89:c8:37:02:a4:08:eb:dd:4d:7f:41:41:1c:8e:3b:38:63:b7:
69:85:a8:07:31:09:db:aa:a1:ef:07:17:7f:67:9c:1f:dc:72:
b2:86:cc:80:aa:ad:a8:e9:46:91:71:3b:98:75:a7:9e:68:d0:
04:6b:12:63:17:a6:09:29:e2:98:d7:26:70:0c:65:7f:a1:d4:
1e:03:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:26 2026 by rpki-client