Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File: 6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier: wGxLjshSehsEp91nlnZUqsnWNq2Jg4wz7CO2T1OZDds=
Subject key identifier: 22:A1:76:A0:C4:5C:8C:E9:D4:75:EE:56:C6:5F:19:F7:1A:88:4C:21
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer: /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial: 019D28F29B632DA44A6C29BC736D8464AE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number: 137A
Signing time: Thu 26 Mar 2026 07:01:21 +0000
Manifest this update: Thu 26 Mar 2026 07:01:21 +0000
Manifest next update: Fri 27 Mar 2026 07:01:21 +0000
Files and hashes: 1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: XER4uVAAGSzR3xENxM+1NP8rkk2swTj9eM8Id38RW4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9b:63:2d:a4:4a:6c:29:bc:73:6d:84:64:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
Validity
Not Before: Mar 26 07:01:21 2026 GMT
Not After : Mar 27 07:01:21 2026 GMT
Subject: CN=22a176a0c45c8ce9d475ee56c65f19f71a884c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:80:18:2e:b2:ad:8a:e3:00:4e:58:07:cb:
84:86:78:88:35:3f:c0:68:39:3a:d2:07:7b:3e:86:
5c:98:ee:bd:52:1e:ac:51:9b:3b:95:37:59:dd:32:
f1:62:6f:c5:7a:e2:9e:4e:fd:b8:2b:d2:de:50:59:
9f:63:91:a7:3d:04:ca:e4:86:1c:80:ee:80:d0:ce:
80:7a:ff:4f:ff:f3:4d:44:f4:17:a9:b2:c7:c7:b1:
38:cd:7c:ec:40:c0:95:a6:c7:cf:4d:09:c3:bc:6d:
6c:1c:ec:05:fe:7c:08:88:7d:c3:08:af:7e:a5:ad:
2f:7d:67:b3:a1:44:89:aa:23:1d:9d:4d:06:5d:a4:
d5:b9:11:da:72:c1:ac:ec:7d:0f:12:31:e8:0c:51:
ab:a9:ef:af:a0:13:d5:39:71:46:97:0d:ae:b3:b1:
4a:4f:6c:47:b9:6d:6a:6d:04:0a:9a:3b:ee:68:82:
20:1f:cf:b8:84:8a:15:8f:44:70:f2:8c:0d:22:8c:
39:35:18:11:e1:6e:d1:c2:f2:47:46:29:a6:4e:ea:
1f:88:a0:a4:f5:b8:02:5f:1a:6c:45:63:4f:31:cd:
34:7b:43:a0:47:ff:fd:13:8a:34:b4:ae:2d:b0:7d:
87:26:89:65:79:a4:bc:f9:e1:2d:14:83:a7:e2:1b:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A1:76:A0:C4:5C:8C:E9:D4:75:EE:56:C6:5F:19:F7:1A:88:4C:21
X509v3 Authority Key Identifier:
keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:19:79:34:51:65:fd:44:93:2a:32:3c:46:a8:70:e6:f0:
eb:80:29:83:8f:c9:5b:a4:26:f9:99:f0:31:cb:31:94:11:ad:
21:d4:99:5c:e5:29:57:39:8f:48:89:81:49:87:5f:03:ee:e1:
1e:f5:ac:d7:45:bf:ea:66:00:5c:c8:57:02:77:52:d7:a8:3b:
61:4f:fb:58:fd:02:b8:03:73:91:e3:c3:32:ee:99:27:76:ad:
0e:cc:8f:a9:74:f9:25:a4:ba:86:3c:50:f1:6e:63:49:f1:d1:
f7:c3:f7:e6:a7:de:43:62:4f:71:ad:df:2d:1d:e5:60:18:a3:
7f:b5:40:0e:83:1c:eb:91:b4:18:8c:e5:fd:45:66:8e:1c:ea:
f2:8b:ee:85:cf:0c:50:c6:d8:bf:79:33:eb:c4:2e:af:27:b9:
bd:9e:21:ad:e7:14:bc:66:e0:e1:97:b9:1d:53:1f:3a:bf:4e:
30:67:ce:95:f3:08:5e:38:00:64:be:ce:da:91:7d:75:60:86:
7b:4c:96:68:3b:3d:d8:5e:a1:43:d1:9c:89:65:5c:57:85:15:
81:88:8a:42:15:44:f4:4d:3b:41:35:3a:65:03:05:fe:7a:46:
2b:4e:3e:83:43:62:68:0f:a7:83:d7:6c:a8:55:a7:6f:81:38:
00:98:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:58 2026 by rpki-client