Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: 1wxmCXBThr4dhLWRcvb19QM2xQslY1ZRemUz25Gik8Y=
Subject key identifier: 6A:CE:51:B0:47:02:A5:7A:AD:8E:20:8A:FD:CD:63:DA:81:69:69:0B
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019D348915F005ECB78259E4B22BC5D5EBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0BBF
Signing time: Sat 28 Mar 2026 13:01:32 +0000
Manifest this update: Sat 28 Mar 2026 13:01:32 +0000
Manifest next update: Sun 29 Mar 2026 13:01:32 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: Uoep0Ws+4lOJGk4IhH9qdEULPC033kRe7fhTcoiVGsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:15:f0:05:ec:b7:82:59:e4:b2:2b:c5:d5:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Mar 28 13:01:32 2026 GMT
Not After : Mar 29 13:01:32 2026 GMT
Subject: CN=6ace51b04702a57aad8e208afdcd63da8169690b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:be:58:f4:f5:7f:36:95:6c:4d:11:95:c9:
3d:4d:3e:1d:01:b8:e1:0c:99:dd:6c:a7:b0:24:a5:
47:39:ed:23:e2:d5:64:70:e4:80:c4:4a:17:8d:f3:
2b:ef:6d:c2:e9:2f:70:43:76:30:e5:35:01:fb:db:
fd:91:fc:c9:22:8d:66:26:eb:34:67:f2:75:1a:bf:
8d:77:09:38:92:04:63:90:4e:74:04:0a:77:7c:7c:
36:49:95:a1:8c:7c:fd:8d:07:8d:25:9b:e0:1a:0a:
aa:5a:c6:01:74:27:aa:ea:00:c2:ad:32:05:e6:a1:
4f:3f:cc:1a:48:15:18:e8:27:a0:07:22:7e:73:27:
6a:d2:28:d7:fe:18:99:72:36:a5:af:96:dc:fc:e1:
16:29:f6:07:f0:26:73:3b:66:87:c0:6e:54:13:7e:
0a:0a:7d:21:b3:6a:ce:34:3d:3b:33:2c:f1:aa:76:
0b:ae:c3:8c:8f:36:f1:d4:2b:33:14:08:9b:ea:8d:
1d:3b:64:7d:dd:c3:7c:d7:22:4f:31:66:70:75:2e:
00:9b:41:4d:77:fe:50:1f:96:8d:80:e3:dd:68:f0:
11:8f:ca:aa:df:38:02:31:52:cc:ef:34:3f:e4:8e:
23:d2:6e:01:d9:3a:02:00:52:c8:71:85:07:8b:ec:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:51:B0:47:02:A5:7A:AD:8E:20:8A:FD:CD:63:DA:81:69:69:0B
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e9:77:e2:39:2b:87:47:06:5e:76:a1:35:0e:1b:89:48:8f:
25:a7:3b:fa:36:84:6e:bb:8e:fe:c6:e9:90:2a:9a:c8:dd:4e:
d5:41:46:c0:f2:b6:54:c0:ad:ca:41:73:17:80:a4:5b:af:f7:
6b:9e:1b:47:66:fd:3d:77:5b:52:97:18:27:1f:85:e5:1d:30:
cc:d3:e7:46:e7:09:e3:d0:20:47:e6:ad:68:45:cf:f6:1b:fe:
f5:b3:54:4a:5d:38:93:71:7e:fd:28:6e:93:ab:d8:0c:21:08:
72:cf:44:37:f4:b8:ec:88:ba:d8:e6:47:50:62:f7:0e:b7:54:
24:3c:eb:92:cb:8a:2a:af:e9:88:57:7b:bc:5d:4b:3e:da:d4:
75:77:d8:ff:ad:ee:ca:c1:55:de:8d:e1:02:76:47:db:c1:aa:
08:df:75:a8:01:f7:3c:79:f2:f7:a5:fe:71:61:b7:05:5b:a1:
78:55:5d:7b:0f:e7:2f:06:d3:f3:c8:65:ae:25:73:33:73:41:
c7:88:13:27:1d:f3:5b:05:36:cb:96:31:72:d4:e3:57:b5:eb:
64:ad:a9:6a:58:a3:ba:7d:fc:40:7c:52:65:75:42:64:60:4d:
61:23:e8:50:9e:ec:8c:ec:8c:f4:f6:f5:0f:ac:be:47:2a:cd:
37:29:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:25 2026 by rpki-client