Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: 1osYSAxBHLdWa5DBeg/wWqszLBLCi6Tp/g68dcWi8DI=
Subject key identifier: C4:51:11:25:85:CD:BC:6E:4D:4C:B8:BD:34:DC:EB:74:59:A7:26:8A
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019D28848108E01A450FDFA05666FCC779C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: KmeenqvWH4aNt1pRw9XitYPVCJuov8sGnBg6QmmKzlM=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:81:08:e0:1a:45:0f:df:a0:56:66:fc:c7:79:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=c451112585cdbc6e4d4cb8bd34dceb7459a7268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:66:d4:fb:bd:9b:bc:c9:e0:d9:3d:97:c8:
f5:45:16:b5:4c:e3:16:aa:8f:ad:0d:8f:b3:6d:e4:
e0:30:87:b3:cc:96:c2:ce:84:e3:5c:f2:de:f2:bf:
10:22:46:66:65:7a:ac:70:2d:4b:a9:1a:bc:7a:a5:
47:c1:4a:37:1d:e7:35:76:b4:7c:41:38:a7:e1:ed:
3b:cc:fc:5c:2e:fd:aa:04:a4:ed:c5:45:c0:4f:1c:
8c:1c:9c:6b:99:34:6a:7b:37:c5:ef:aa:1c:8e:c0:
5a:f3:c9:6e:96:f1:09:f0:20:76:80:94:67:5a:e2:
a4:a2:8e:57:1d:23:91:57:e1:8c:1f:19:0f:07:04:
05:a7:ac:b4:f2:e2:f9:e9:dc:cb:fb:da:7e:e2:63:
ac:b3:2b:57:96:fb:e3:39:75:90:2e:3c:ab:41:3d:
a3:e7:6d:2a:c4:b7:05:b5:8d:9e:b5:5f:06:94:69:
a2:0a:02:36:93:09:7d:a6:61:8e:e9:35:08:32:c4:
7e:5d:9a:49:87:0c:82:d9:f7:76:a5:18:4a:74:06:
01:a1:75:0b:99:56:e4:f2:78:35:2c:ec:1c:74:2e:
39:e3:ea:bc:b7:ae:60:79:1a:c9:17:3c:51:03:1a:
16:0b:73:90:cb:1c:58:a8:0d:c5:4c:bf:e4:a9:98:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:11:25:85:CD:BC:6E:4D:4C:B8:BD:34:DC:EB:74:59:A7:26:8A
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:db:66:ce:b8:7c:b4:61:2e:b6:de:29:db:81:7e:83:da:bd:
0f:df:68:88:58:09:12:f0:06:b1:18:91:af:05:7c:af:51:f2:
fb:e8:e9:f8:be:d2:cd:30:a6:7d:99:87:f3:28:8c:26:e6:0e:
cd:ac:33:a4:41:8e:e6:fb:c3:0f:5a:2a:65:f9:26:60:c2:47:
6e:2d:ec:97:44:cb:d7:a1:88:0f:df:c6:3a:5e:23:72:2c:4f:
1a:f9:d8:41:e1:ea:d1:5f:a7:31:48:d1:44:33:81:32:52:d8:
a5:ea:7f:5b:4e:82:ca:9e:b9:f7:0a:3a:64:a0:bd:f4:ef:af:
90:88:b4:07:39:de:88:a1:62:36:a4:de:9a:81:03:b9:d7:da:
f5:bc:f4:79:af:00:91:3f:52:a6:f3:76:40:cb:da:89:5c:19:
be:40:56:18:14:94:7a:d9:88:1e:1e:e8:67:08:74:eb:99:21:
6f:ee:30:97:56:c8:7f:12:97:24:f8:cf:69:7d:95:dd:3d:50:
65:1e:90:00:8d:7c:f4:6d:7b:06:de:5a:2e:99:e3:5d:a2:4d:
4f:63:67:8d:30:2a:c6:58:bc:ba:78:20:0e:e4:56:f2:eb:a1:
35:4c:e2:f7:a0:a0:a8:e8:e9:72:7a:3e:f8:7e:fd:70:3a:47:
4d:51:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:34 2026 by rpki-client