Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
File: 6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json)
Hash identifier: py87+ldeoHRFLSm+lVuEIngvyBtWqLdj20rRQICYV2w=
Subject key identifier: 72:E3:E7:69:45:90:D1:FF:B7:13:5E:F1:56:E2:68:B4:2E:57:09:B2
Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
Certificate issuer: /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Certificate serial: 019D26966A9F45D100CC0EA493AFF73AD2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
Manifest number: 02CB
Signing time: Wed 25 Mar 2026 20:01:25 +0000
Manifest this update: Wed 25 Mar 2026 20:01:25 +0000
Manifest next update: Thu 26 Mar 2026 20:01:25 +0000
Files and hashes: 1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: 8d1woKetUywp/u9WtYKsFpbrBNoO1lYDl+vj62f75gI=)
2: y7eyZqNEkZQkPingFqUdgXmucwc.roa (hash: f2+YM/xZdW946QzAFcbV9ZF0dOKQRzmJA4JL++o4rTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6a:9f:45:d1:00:cc:0e:a4:93:af:f7:3a:d2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Validity
Not Before: Mar 25 20:01:25 2026 GMT
Not After : Mar 26 20:01:25 2026 GMT
Subject: CN=72e3e7694590d1ffb7135ef156e268b42e5709b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:1c:af:ac:98:5e:c1:0c:a2:a1:a2:52:5d:
55:ca:1d:97:b2:c3:c3:44:af:e4:c7:72:23:d4:b8:
11:d9:99:c2:bd:48:c3:8a:56:3c:54:de:22:6d:a7:
2c:d7:64:04:75:ac:8f:42:f0:c0:8a:35:66:1c:cd:
b6:59:9b:98:63:c9:78:d6:a4:76:96:d3:85:30:7e:
b4:21:99:71:3d:d6:a2:5c:dc:50:81:a7:7b:8f:39:
31:b8:aa:44:cf:9b:c9:ce:be:a9:aa:63:fd:68:6d:
07:9c:ca:22:cb:0c:18:a6:a4:19:42:1d:b3:0a:ed:
7d:ef:5c:00:52:8c:9a:84:01:32:32:a4:93:5d:dd:
ff:a3:51:e2:87:df:22:20:01:d3:1f:eb:30:28:f6:
c8:34:9d:88:45:4b:bf:4c:25:2e:68:f0:b4:4a:b4:
66:5c:bd:ba:11:25:f7:d4:4f:50:d0:59:0f:68:56:
f4:e0:80:45:a0:b5:b9:26:ec:04:95:a4:b1:29:0a:
34:da:b2:4d:c9:e1:59:68:4e:28:b0:4c:df:b1:b8:
bd:8f:c3:79:b7:b2:9a:54:d4:21:df:96:37:9b:82:
4d:33:e0:e9:34:88:be:b5:14:85:ae:6c:17:cf:fc:
23:64:c1:0c:4a:30:44:3d:c5:f7:07:96:aa:df:29:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:E7:69:45:90:D1:FF:B7:13:5E:F1:56:E2:68:B4:2E:57:09:B2
X509v3 Authority Key Identifier:
keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:a2:36:45:a8:18:36:12:da:dc:4c:62:ec:cc:1a:ae:c6:
fe:fc:6e:5e:b5:4d:c8:69:b7:5d:5a:e7:e1:2c:fd:b1:01:1a:
05:c4:0c:08:2b:56:1e:95:25:04:a4:b6:c2:a5:1f:35:ab:36:
65:db:55:c9:31:b0:1e:8e:68:2d:6a:17:85:19:d3:9b:99:11:
93:84:27:7f:52:e3:3b:01:3a:b1:29:2f:3f:96:39:8e:dc:ab:
d8:86:3d:8a:61:93:db:5e:55:6d:d7:df:95:29:65:0c:1a:46:
43:d2:f4:14:06:a9:67:b6:4f:89:33:50:75:98:5f:ce:bd:6d:
30:cf:93:83:6e:67:bc:67:8c:a2:23:6e:03:a7:2d:4d:35:16:
34:71:2b:30:53:d1:8a:65:c8:56:53:6d:2e:0d:f3:75:70:9c:
3d:08:a8:67:9f:4f:6e:fe:7e:99:d5:bf:f8:88:6b:94:96:b7:
ab:55:3d:c8:e0:02:d2:82:f9:d6:53:a8:a9:a9:f7:07:1b:3e:
86:f6:f5:c2:ab:30:bc:ad:b3:68:ae:1f:dc:36:1c:40:41:c8:
cd:d6:a0:40:06:3f:f3:4a:d9:5c:a1:a9:41:eb:c9:ec:e1:12:
aa:66:e2:6c:a2:53:1e:17:1b:32:6a:d8:fc:dd:df:a9:60:d8:
ba:1c:82:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:24 2026 by rpki-client