Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: aBZPLe3JOz9rNj8FsDAPOJYBe7j5gHV8wRSRBDLBy4A=
Subject key identifier: 7B:8A:32:28:4F:B5:6A:BE:4C:A0:58:BB:A2:EE:FE:32:B1:CD:16:FA
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 019D2884CD6A3181C7C75FED9995AF4F6BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: xxAutPG3l30Xu8Ox/g3o2pzeEqtzxPCVWIeHE98gT2w=)
2: NIC6FPNA-Rut56ZtIFRnSurvICQ.roa (hash: 5L/3wMgmUEy2dfrMAgnd99xnHhW/Bj+jZ1MWwhBuJc8=)
3: YsYMCe9LReXjPKopmUA0EjsK0dc.roa (hash: y+81aZ09kbsZWCpPgtxvvuaCFjv5jJ1HQMWCIGPci3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cd:6a:31:81:c7:c7:5f:ed:99:95:af:4f:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=7b8a32284fb56abe4ca058bba2eefe32b1cd16fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:2c:0d:9e:0c:b4:15:e0:2a:2b:87:f0:4a:
7f:b8:56:06:20:b6:a2:5f:d3:02:1f:6a:aa:fa:31:
a5:bd:d2:de:06:67:9e:26:93:a3:df:ea:47:fa:0c:
04:30:4a:e6:6f:bd:13:88:cd:ac:a5:a6:a4:a4:94:
fa:dc:76:27:f5:39:28:f0:17:73:58:3b:f3:97:57:
33:72:90:66:0c:a0:1d:d0:02:8d:64:d1:22:c8:bb:
d0:5d:68:87:14:5e:1a:53:d6:d1:a0:7a:22:a7:bb:
f8:cb:9e:31:9c:ab:63:44:3f:fc:0d:a8:4e:65:7a:
ee:cf:4e:38:52:e9:a2:72:e9:21:74:8b:ed:05:e8:
3e:cd:8c:49:32:f0:48:af:8d:98:86:2c:16:15:f0:
d2:ef:99:67:c2:d4:db:a3:de:92:aa:a8:23:cd:21:
e5:cd:8c:48:d1:1d:b1:c1:dc:6e:22:98:af:48:51:
cc:28:a0:9c:6a:62:58:1f:af:ce:3e:75:9f:17:1a:
9a:3b:67:8e:c3:b2:48:8c:71:42:69:94:f8:22:08:
4a:a3:dd:f5:86:2a:cf:93:04:59:2d:96:42:09:58:
30:79:dd:25:74:aa:36:b7:ae:9f:f6:04:02:52:8c:
96:e5:58:3a:e7:0b:0d:1e:fc:65:bf:d7:7a:dd:d9:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:32:28:4F:B5:6A:BE:4C:A0:58:BB:A2:EE:FE:32:B1:CD:16:FA
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:93:0c:21:49:df:5c:98:cc:72:d3:5a:91:bb:b3:57:c9:af:
39:4f:b4:e2:06:4e:eb:1b:bf:f4:15:3d:e3:cf:be:a6:97:db:
04:33:be:6b:d1:b7:ed:b6:2c:e0:76:61:43:91:39:84:70:8f:
0e:ef:d4:7d:99:3a:0b:a6:fe:fe:6e:44:f8:90:40:02:74:3d:
17:d8:c5:e9:9d:ab:af:fa:d4:36:57:d0:66:21:89:48:6f:7f:
dd:fd:6b:0a:d3:98:89:fd:5d:f1:77:01:1b:4c:2c:4f:17:91:
07:ec:9e:e2:ae:92:18:13:cf:85:db:0b:ee:4a:24:2a:32:00:
34:ae:df:6c:db:b4:d6:45:c2:48:34:bf:cf:ed:fe:ad:8e:0e:
e2:33:d8:97:17:30:ea:bf:2d:80:4c:f1:db:e8:24:7e:c6:d8:
fa:2a:85:05:cb:a7:30:de:30:ca:55:96:94:dd:7e:45:ce:af:
a0:4f:10:ba:10:65:ec:9d:2c:23:a5:0e:67:40:e0:8f:c2:21:
2b:25:4d:46:53:aa:68:60:4d:28:29:b0:14:3d:87:58:6d:df:
68:a0:1a:24:6b:f3:e8:c9:9b:d1:39:b8:7d:1b:76:45:b2:1b:
4e:0a:d4:c0:d1:dd:13:70:4a:3a:f9:5e:a6:34:16:32:ca:b3:
24:63:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:42 2026 by rpki-client