Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: d/oeA7PjNdMY0nA6NXWhOHNIJ5WEo0yrgI8wz3r6NdM=
Subject key identifier: 6C:2E:CF:BC:AD:9A:3A:5A:C2:F4:32:7D:0C:0D:54:77:51:6E:43:13
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 019D265FFB6EEF324A6B69F7610A41645432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0DCA
Signing time: Wed 25 Mar 2026 19:01:57 +0000
Manifest this update: Wed 25 Mar 2026 19:01:57 +0000
Manifest next update: Thu 26 Mar 2026 19:01:57 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: Ym0EXgcbYSCShwZBek2wW/3ltFsMmKAgLVd4pZvWikE=)
2: eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa (hash: 10KRq+2t5E30gi8VhOOLk5+bD9qKlbZmUWl2P2qS7Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:fb:6e:ef:32:4a:6b:69:f7:61:0a:41:64:54:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Mar 25 19:01:57 2026 GMT
Not After : Mar 26 19:01:57 2026 GMT
Subject: CN=6c2ecfbcad9a3a5ac2f4327d0c0d5477516e4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:82:6f:7c:f6:8d:44:b5:c8:16:5e:4a:70:
66:d9:f0:83:bb:89:f6:16:65:03:0e:3f:be:11:04:
99:a4:4e:92:75:fb:bb:e7:9b:d6:b9:97:1c:dc:b2:
03:2c:78:66:5b:3c:55:5f:4b:40:53:61:b3:45:d4:
bb:0a:e1:d1:9b:52:a9:6c:40:89:4c:24:81:84:cb:
12:dc:a7:20:c3:a6:62:67:6a:f2:cd:0a:9f:eb:b4:
01:16:6c:ed:44:a7:45:c9:44:e7:7c:6a:c5:3d:f4:
e9:97:43:88:fb:3c:9f:66:7b:99:7c:ee:85:9d:6f:
6a:eb:ef:3f:2e:5a:38:a9:6f:16:ae:27:37:82:9f:
93:2b:ac:5f:d9:eb:bc:c7:ae:0b:b7:a2:f2:d0:03:
6d:ef:1a:eb:55:7e:95:fd:d0:f8:19:f6:21:05:e1:
fc:41:42:82:58:be:bd:ce:b3:f7:7e:f1:15:95:20:
bc:d6:fc:2d:74:24:d4:f7:ad:40:db:af:a5:a1:fb:
2d:7a:06:76:97:a3:e8:8f:05:3c:d5:05:ba:72:a1:
7e:9f:ad:ca:30:1c:61:fa:5a:7d:60:5c:93:73:5c:
be:ab:cf:c0:2a:99:b6:bf:90:68:8f:89:0a:c8:f9:
70:8f:8b:eb:ad:b4:40:88:ff:fd:c7:92:8b:7b:b1:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:CF:BC:AD:9A:3A:5A:C2:F4:32:7D:0C:0D:54:77:51:6E:43:13
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2f:7a:9a:d3:15:c9:73:6f:fd:b9:ee:5e:25:ef:b8:9c:81:
7b:18:85:b1:c9:84:6b:cc:5d:ed:83:61:cd:d7:a4:84:03:1f:
fe:93:06:9a:d1:7a:62:0b:9f:e1:2d:84:c3:a5:4a:4b:c7:cc:
56:40:ae:a8:f2:f1:2a:cf:1b:eb:83:a4:ed:da:e5:6b:8f:2a:
67:11:30:1b:da:cf:6b:30:c5:db:3a:d5:28:88:6d:f5:c9:06:
ab:60:4c:bd:ff:91:69:7d:13:4f:88:c2:60:06:6e:25:47:32:
df:b8:93:e2:38:a2:27:95:67:24:cf:44:b0:69:0e:10:d8:ca:
34:61:15:6c:83:4c:26:d1:10:95:3c:0b:77:90:23:d8:0d:1e:
f7:5e:a1:16:42:e5:97:50:9b:85:9e:c4:c7:af:f1:39:ee:0b:
8b:97:3b:c5:46:93:b5:7b:ef:8b:40:29:47:59:45:9e:31:4f:
4c:45:27:6b:56:30:b8:44:b5:bb:80:00:f2:e5:72:16:c7:49:
78:3f:e4:36:9d:03:69:c5:fa:b7:64:c5:db:9c:b0:c0:64:f5:
5a:76:7a:56:aa:c9:06:a8:25:65:a3:23:50:cc:18:a3:f8:b0:
0a:bb:f1:b2:18:9d:67:05:17:f1:31:4e:f9:a9:da:2a:6e:87:
0b:1f:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:14 2026 by rpki-client