Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: FkOGGIiorzw1IXutIH0qlGmNUXLNUewYKkr3AJtU+fc=
Subject key identifier: 55:42:5E:C0:9B:FF:C2:74:0D:E2:75:80:71:30:5F:8A:9A:3B:16:47
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019D27A9250CDD5A415AE5B1E77C9B016A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0C72
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: 2bWdUnZMCLPWqpDPOYlsnPz8rBO3MQnQo04eYxhyjhE=)
2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:25:0c:dd:5a:41:5a:e5:b1:e7:7c:9b:01:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=55425ec09bffc2740de2758071305f8a9a3b1647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:7d:e2:37:85:c2:e2:b1:b4:fd:aa:40:a1:
4e:d9:a6:3c:78:eb:a1:08:b7:b1:72:9d:34:eb:4c:
fa:b9:3c:54:8c:15:48:2e:97:7b:8b:69:d0:e3:f1:
0d:b1:3f:5d:5d:a4:c9:01:b5:79:1e:de:65:1d:0d:
8e:2f:d5:06:f6:f2:5f:2b:cd:1a:7c:e1:3e:ce:53:
43:59:14:c6:b2:84:fb:8b:dd:71:c1:39:aa:3c:ed:
21:8b:c6:23:22:51:a2:d7:5b:61:57:87:46:87:4c:
b4:5d:6a:35:56:ea:a1:28:9d:a0:6e:9b:7d:09:89:
46:a7:6b:e3:16:88:ee:d1:b0:13:bb:5f:44:fb:20:
c6:d5:ed:50:92:ee:5d:13:c7:bd:75:8e:38:a5:08:
55:4c:ca:a9:c6:20:5f:db:3e:1f:8c:ef:d6:dc:eb:
f4:af:38:22:cd:2e:e7:bf:22:89:0c:40:9a:b8:7c:
0f:54:39:4e:07:2f:40:76:db:f4:6d:a8:5f:81:08:
01:da:0c:91:23:62:c4:b5:fc:c0:05:a1:46:7a:e3:
4e:27:e7:39:61:ef:0f:73:66:35:39:30:95:d3:a8:
85:a3:65:a6:3f:9a:87:d0:9d:d6:88:5c:5d:81:6c:
db:27:93:67:08:51:ff:f2:93:4e:95:3b:91:cd:dd:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:5E:C0:9B:FF:C2:74:0D:E2:75:80:71:30:5F:8A:9A:3B:16:47
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:99:fc:3f:6a:ef:52:bf:f6:76:35:a6:b3:f8:8b:8a:a0:fb:
51:f7:d3:47:01:03:e3:94:c7:a3:e7:f4:89:bc:28:1d:22:4b:
3b:b4:91:fb:8d:77:99:19:6e:26:8a:93:40:89:c9:84:9e:97:
a4:77:a5:c3:32:ad:2a:52:df:db:a2:48:9e:d1:38:32:d3:3e:
6a:22:bf:b3:01:a0:ad:b1:0e:df:0a:3f:90:42:fd:18:45:a4:
f0:56:c7:44:d1:5c:3f:42:3b:0e:69:fe:cc:a5:76:34:95:ac:
75:a9:14:30:8a:83:d1:72:f3:97:59:87:4c:c7:60:e6:3c:20:
6d:ce:41:aa:21:96:62:44:18:27:54:0b:12:1a:24:b6:3a:8d:
7a:41:77:81:e1:2f:91:0b:4c:23:1f:ff:59:12:92:d8:04:95:
d4:85:18:04:b5:3c:e8:57:73:d3:31:8d:3e:4c:0c:b5:7a:52:
8a:f2:dd:bb:9c:49:e7:18:98:fd:da:a4:40:b3:bf:0e:34:e3:
fc:13:b4:ff:18:80:f1:d7:0c:34:80:7c:c7:bc:d9:5b:14:10:
02:74:d6:fb:b7:bf:01:5d:4b:a8:3d:30:9e:61:85:9d:e5:e4:
a8:e7:55:cb:aa:ec:c3:55:c4:4a:f3:3f:ad:d6:76:aa:93:8a:
2b:e2:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:23 2026 by rpki-client