Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
File: 6SnD2lr0FZyTY3duwz3FuscKMk0.mft (raw, json)
Hash identifier: CSgGJInPD5D3XnqSsXAdurslMMZ1lpXkWRhcr1EX1wE=
Subject key identifier: 8F:54:22:CF:A9:60:FF:5A:7C:E3:34:99:14:AF:E8:0D:8D:B5:47:37
Authority key identifier: E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
Certificate issuer: /CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Certificate serial: 019D2704145B0D752448D188666B955D5217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
Manifest number: 0527
Signing time: Wed 25 Mar 2026 22:01:11 +0000
Manifest this update: Wed 25 Mar 2026 22:01:11 +0000
Manifest next update: Thu 26 Mar 2026 22:01:11 +0000
Files and hashes: 1: 6SnD2lr0FZyTY3duwz3FuscKMk0.crl (hash: BgyXFtpH/fLLuZrmZ50ePWttCyDcajdZQQrYliFP7pw=)
2: RMKMFjuIsOF34y_Eoi6mHIhKM8E.roa (hash: jdDMeZqYmQE2irg3itDoUEw04h1lMnJrH0NJa7Heqzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:14:5b:0d:75:24:48:d1:88:66:6b:95:5d:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e929c3da5af4159c9363776ec33dc5bac70a324d
Validity
Not Before: Mar 25 22:01:11 2026 GMT
Not After : Mar 26 22:01:11 2026 GMT
Subject: CN=8f5422cfa960ff5a7ce3349914afe80d8db54737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:2b:f6:83:a6:48:b8:ac:7e:5a:4d:bc:1e:
af:7b:56:39:e4:96:d1:9e:8e:9e:84:1a:46:c3:2f:
67:83:42:99:82:0d:ae:5c:7b:67:7c:63:0c:76:06:
3b:cf:7d:a9:85:45:c2:ea:2b:44:69:1c:28:34:ee:
64:d7:03:cc:5e:1b:6d:50:8b:3f:71:b7:fa:e5:61:
d7:5d:16:49:d9:f4:75:9d:74:26:5e:a0:07:3c:d7:
71:b0:3c:9d:92:da:4f:5b:aa:e6:10:9b:64:53:26:
10:45:3e:5c:44:7a:4e:2d:50:49:9f:98:81:41:47:
f4:a8:9a:50:f5:6b:dd:1c:a2:4c:3f:d2:d8:ea:44:
ac:22:a0:84:5c:2e:63:7b:06:1c:22:a8:74:fe:a0:
e1:b6:a0:e9:9d:9a:a9:38:00:d8:49:5e:9c:30:46:
ec:e8:70:0c:5c:f6:c0:13:a5:de:48:82:7a:8f:a6:
bd:d4:ca:9b:51:33:a2:1a:a8:dc:24:a9:69:05:6d:
ba:e9:0c:00:8b:7a:1f:92:c0:be:3c:d9:cb:41:7a:
56:78:e6:ea:22:00:4c:52:53:ec:f7:cc:b8:a9:84:
20:fb:20:25:4c:d0:db:87:c0:f0:25:38:f0:24:be:
f0:57:db:1c:b3:ff:82:c1:69:be:6a:f0:f2:c2:4d:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:54:22:CF:A9:60:FF:5A:7C:E3:34:99:14:AF:E8:0D:8D:B5:47:37
X509v3 Authority Key Identifier:
keyid:E9:29:C3:DA:5A:F4:15:9C:93:63:77:6E:C3:3D:C5:BA:C7:0A:32:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SnD2lr0FZyTY3duwz3FuscKMk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/838a78-7a70-448e-8e43-3c3be2c29f79/1/6SnD2lr0FZyTY3duwz3FuscKMk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:06:e6:08:bd:a5:6d:4b:c1:32:54:15:6b:d0:f0:04:59:
47:cf:76:d0:17:01:da:fa:29:4c:1e:94:77:66:72:60:9c:08:
94:7f:62:56:e8:89:cc:23:e5:93:5b:d7:7a:5c:33:63:70:e2:
9d:7f:ad:c2:10:b3:27:1c:1f:10:69:e3:91:1d:b2:98:a3:9e:
7b:a8:63:b0:dd:f4:33:1f:94:ec:03:07:f5:28:0d:6e:b0:51:
d9:7b:ce:9c:9d:38:87:48:68:e3:ae:ad:3d:23:e5:d2:09:81:
21:4b:ca:5b:5f:d6:c9:4a:f9:77:29:5b:10:f4:81:a1:e3:55:
26:6c:b8:c7:13:fd:37:06:4d:b8:17:d1:f9:8c:42:7b:8c:cc:
39:9d:18:bc:fb:88:7b:9a:63:02:33:45:0f:da:7a:17:5c:a5:
31:53:cc:a9:e4:7f:d4:0e:8e:6a:39:10:49:52:94:96:e5:c5:
d8:22:6b:94:28:61:29:0e:f4:b8:86:3e:33:89:25:44:8c:80:
02:fc:d9:85:75:04:73:a2:58:25:b1:7c:7d:05:e9:6d:9f:89:
0d:7e:41:74:02:87:fa:4f:09:2c:9d:18:5b:47:f9:94:9b:91:
ee:19:44:4b:18:0f:83:d5:4a:64:38:38:72:a6:50:a7:9d:49:
3a:2a:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:11 2026 by rpki-client