Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: DZduz51aMI87dOWOADkgaoCoB9AOfYDJKx9cCPJwkb0=
Subject key identifier: 6A:DF:F7:E9:14:A3:08:88:5E:D3:D4:BE:AA:BB:A8:F1:B3:13:3C:D8
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 019D299725E94739EA93CF4AB089D0889B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0BF2
Signing time: Thu 26 Mar 2026 10:01:04 +0000
Manifest this update: Thu 26 Mar 2026 10:01:04 +0000
Manifest next update: Fri 27 Mar 2026 10:01:04 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: 2H9k2grmRLAaKWzCv63oe/wsSKKgcCfjVO/xAQ1vaA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:25:e9:47:39:ea:93:cf:4a:b0:89:d0:88:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Mar 26 10:01:04 2026 GMT
Not After : Mar 27 10:01:04 2026 GMT
Subject: CN=6adff7e914a308885ed3d4beaabba8f1b3133cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:b5:e6:5d:36:cf:26:bb:31:df:45:81:c9:
e0:ae:64:7f:e1:7a:ea:c9:8d:1c:2f:58:8c:15:1a:
d9:a4:f3:34:6c:a5:99:c4:18:ef:99:b5:04:ba:56:
96:ef:36:9c:cf:b8:1d:c4:c3:a9:1d:50:53:c1:9b:
eb:28:47:99:89:fa:2e:66:81:45:1e:fe:e2:ac:ef:
4f:13:86:31:c7:79:a8:47:79:aa:df:db:b0:88:b6:
62:dc:27:d6:d2:91:e7:71:28:84:c1:ac:7e:75:45:
bd:09:27:d6:1c:3f:ce:7a:0a:bf:fc:3e:24:5e:80:
66:22:7c:a0:1b:9f:1c:3a:57:54:49:a0:fc:fa:c1:
a8:c0:ba:5b:97:32:81:5e:d3:c3:a6:69:ff:7c:b3:
2e:d4:6d:99:e6:f5:09:3b:a3:02:66:df:4b:b5:de:
08:11:cf:87:72:33:ad:8c:6d:47:5b:2e:90:6d:f8:
81:a0:4f:d7:ed:7d:43:75:f9:60:f4:98:74:78:cc:
f5:4d:76:95:15:df:6d:79:cd:14:82:d7:28:45:5c:
7d:28:8d:33:47:12:b0:aa:74:ef:0a:5b:64:5d:32:
fc:fc:fd:1b:83:ae:0e:43:14:75:40:f3:c4:98:e7:
8d:2e:91:b7:14:9d:b1:06:59:7c:5a:eb:e0:1d:f9:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:F7:E9:14:A3:08:88:5E:D3:D4:BE:AA:BB:A8:F1:B3:13:3C:D8
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5f:6e:eb:50:59:3f:c2:7c:12:96:32:81:b9:7f:cf:1b:35:
1f:20:b6:4b:5c:fa:6b:3a:90:62:24:dd:78:05:03:0f:eb:17:
8e:57:12:43:91:d7:1d:a5:56:78:21:64:00:74:77:78:66:6d:
b8:ba:6c:d9:5f:51:8e:35:db:ad:ff:f0:09:a5:5c:86:e0:41:
a5:f7:8c:72:52:a5:20:9a:6e:9f:5b:32:f6:38:a1:cc:67:c4:
ad:ed:e8:72:3c:55:58:00:86:59:d7:e6:6e:d4:0d:61:60:db:
94:f6:d5:d7:39:aa:98:c7:f1:ae:18:b3:5f:59:f9:f2:35:50:
30:6f:2e:78:79:bb:75:9e:db:98:41:7d:34:fc:cb:b3:e4:17:
cf:75:5c:a3:68:7c:27:3e:c7:c0:31:d1:7f:18:9a:5c:e5:fc:
f6:a4:b7:d7:e9:69:3f:90:49:22:42:45:60:af:62:fb:5d:f3:
5c:0f:c1:a1:a2:f5:37:b1:3e:af:6d:61:b1:a9:32:e0:9d:f0:
4f:6d:74:a2:ea:5a:6f:dd:50:27:6b:68:5e:02:ae:ae:cc:4a:
4e:52:dd:c9:3e:1d:63:46:b4:97:7e:b3:34:0d:e2:2d:79:5d:
ed:ce:43:12:e8:86:34:be:1f:93:fc:14:d9:09:e2:33:67:5d:
43:d1:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:32 2026 by rpki-client