Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: cHnk1ZiEIx4Dh6qo8ApsqMd6lY5eySJJ4TdvNaWioo0=
Subject key identifier: 10:9F:53:61:EF:78:3B:D3:E2:01:DE:53:6E:2C:98:A7:C6:4F:2A:A5
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 019D27724902C874F96CC4FE1E3B4FBE4C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 1001
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: b/r9DIG/xh+199AIjFPSIs8P5B+ieBbG347hh1nt2eE=)
2: jbegeHRHAQFS4OhjdqswttUxcNE.roa (hash: H77Ee/ql8r6fO3a7jEQG5BO9lvRzT2On1CkeHfT7sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:49:02:c8:74:f9:6c:c4:fe:1e:3b:4f:be:4c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=109f5361ef783bd3e201de536e2c98a7c64f2aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:b6:49:ac:39:6c:1e:2b:7a:16:f5:3e:d2:
c8:d3:b2:40:36:db:17:b5:cb:6b:f8:68:ea:2b:1f:
ef:68:30:4e:c5:b1:76:2c:f0:b3:55:c3:62:dc:25:
d4:9e:e3:d4:32:63:62:ff:d9:96:9b:c9:47:36:a9:
a1:d9:e9:53:e7:56:9b:cf:26:82:00:ae:5d:c8:83:
13:5e:c7:26:3d:e9:8c:24:b6:f9:5e:26:29:dd:e7:
d7:18:56:fd:27:b4:a3:0b:0b:19:7a:6d:9a:b2:79:
d5:09:03:02:28:8c:7c:48:32:3d:c4:92:49:8a:1e:
35:60:a2:d6:69:64:b0:d5:99:83:0d:e0:2c:e7:dc:
38:f0:ca:d9:e5:fe:ab:7c:be:c3:33:29:36:ec:e0:
0b:90:59:f5:d6:eb:65:66:26:a1:cc:da:63:d3:07:
4b:65:96:41:0d:50:e4:1c:b2:d3:3f:24:5b:ac:74:
c5:be:44:1e:d5:d5:c5:92:65:92:da:d7:38:25:ad:
d2:51:35:86:22:1a:b3:af:cd:d9:44:f3:dd:6f:89:
db:b1:d0:4a:23:05:1c:16:27:07:05:da:e7:b4:c7:
66:7f:b8:e3:9a:dd:e6:cd:8f:cb:b3:b4:b8:f0:62:
dc:92:43:44:ea:d7:d8:ff:c2:ab:71:b4:e3:8c:32:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:53:61:EF:78:3B:D3:E2:01:DE:53:6E:2C:98:A7:C6:4F:2A:A5
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f8:e2:a4:04:06:93:62:73:c4:2d:b7:88:be:ab:ca:42:8d:
26:94:09:f6:8e:17:db:8c:2d:bb:92:13:4e:45:b2:e6:43:51:
69:df:55:57:e5:a7:53:cc:0c:bb:cd:b3:f8:27:21:7e:a5:51:
bc:26:c3:02:39:d0:12:bb:ff:c3:f9:ad:e4:a9:81:68:f1:a2:
b6:6d:c4:3f:92:b5:6a:da:18:1f:a2:11:90:88:9e:a9:71:ba:
b2:5b:96:57:3a:3d:f0:fc:7d:40:38:3e:c9:bc:c2:03:09:7d:
5f:6f:53:43:14:58:c8:51:3a:e5:73:44:3d:a3:4f:26:6d:8f:
e6:c8:75:1f:ea:ce:18:a1:0e:15:e5:78:22:6f:ed:26:77:b7:
46:f3:10:f7:6b:2c:38:af:c8:00:cc:4f:5b:c7:eb:eb:f9:04:
73:f1:12:4a:52:1c:97:d3:c4:2a:d2:17:51:46:16:a7:4c:a3:
73:bb:56:15:e2:5b:2d:5a:ef:c6:dc:67:63:6a:27:33:a1:b1:
e2:c8:58:43:27:04:95:10:d1:21:0f:3f:29:9a:50:c5:ee:55:
6c:92:98:16:c4:35:af:ac:2d:61:73:25:11:2d:ad:6d:cf:23:
80:a9:a7:84:45:74:62:56:41:60:ee:39:c4:6c:8a:e0:66:6b:
3c:9c:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:19 2026 by rpki-client