Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
File: t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft (raw, json)
Hash identifier: pPnWzm0he9F2RjPHjMb7T2ZKRdPFWHTsvRO7EUKbLY4=
Subject key identifier: 52:48:BA:AB:6C:E0:C6:9A:6F:BF:22:5C:F1:03:13:11:86:9E:85:2F
Authority key identifier: B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78
Certificate issuer: /CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78
Certificate serial: 019D2996CFD1129F4427D0399D9044328D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
Manifest number: 017B
Signing time: Thu 26 Mar 2026 10:00:42 +0000
Manifest this update: Thu 26 Mar 2026 10:00:42 +0000
Manifest next update: Fri 27 Mar 2026 10:00:42 +0000
Files and hashes: 1: t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl (hash: h37VdRdhF2eKCTeFqRyq0+xOSZCpMSSNS54P+ItdoZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:cf:d1:12:9f:44:27:d0:39:9d:90:44:32:8d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78
Validity
Not Before: Mar 26 10:00:42 2026 GMT
Not After : Mar 27 10:00:42 2026 GMT
Subject: CN=5248baab6ce0c69a6fbf225cf1031311869e852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:4b:76:58:20:85:aa:ab:06:50:af:43:00:
81:7e:7c:b1:43:df:f5:c1:25:7f:d6:b9:a5:6e:c1:
ac:2e:5a:7b:90:55:13:d9:4b:58:7b:ce:f2:dc:13:
d9:dd:bc:9a:29:92:81:f3:f1:00:6f:95:bc:45:cf:
c7:ad:f6:75:70:3a:94:ce:82:cc:cc:35:06:d7:45:
eb:61:09:04:46:44:32:be:16:9a:c4:df:f5:9c:20:
00:be:5e:5c:c8:77:47:99:72:40:0d:53:52:bf:bc:
0c:ef:c3:39:53:54:7f:2f:48:1b:d5:cc:97:fe:b0:
4e:48:aa:5f:70:5a:88:b9:f7:71:51:e1:1f:ce:fd:
09:9d:2b:68:7a:a4:a2:b8:c7:d0:bc:f0:18:6a:20:
a3:6f:b0:3e:33:ce:34:b7:a1:bc:9a:55:3a:ca:c2:
c3:0a:c0:b3:98:77:d5:28:21:3c:03:69:9e:24:3b:
83:ef:71:1b:af:69:89:c0:c4:33:9b:5d:63:49:8e:
84:72:83:e9:75:16:e9:53:07:6d:b5:1b:75:b1:4d:
77:dc:f4:d1:ea:36:6f:30:a4:16:2c:b2:31:af:05:
84:e1:39:3a:bd:47:41:d8:77:fc:fa:f6:cb:d1:12:
1f:a4:0a:7d:cb:ce:c3:d3:a6:90:1e:81:aa:e1:3f:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:BA:AB:6C:E0:C6:9A:6F:BF:22:5C:F1:03:13:11:86:9E:85:2F
X509v3 Authority Key Identifier:
keyid:B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:82:9c:32:9f:22:4e:cd:81:3d:d3:0b:5a:12:95:ab:50:c8:
1c:2c:44:a3:1e:9b:f4:44:d3:7e:d6:f6:22:31:b6:b6:ff:33:
d3:84:7c:20:e9:d1:6c:6d:7b:21:f1:04:11:b5:7c:90:54:ca:
13:82:00:1d:7e:bb:18:cc:80:a0:a2:39:c7:8b:f0:20:64:c4:
41:e9:a1:8f:5e:29:49:13:62:61:ba:7c:6a:b3:2c:7b:01:ea:
12:3a:43:d3:94:b1:64:1d:95:a1:b1:96:be:5e:6f:aa:41:17:
58:77:d6:56:c5:cb:ec:1a:1d:de:43:ab:b3:e3:be:6d:18:27:
30:02:10:b2:60:5b:e8:36:81:ef:14:79:21:df:43:71:c6:a5:
2c:ff:0a:1d:62:03:bd:2c:81:62:0a:21:7d:ef:e3:2c:bd:30:
f2:6c:f8:16:19:9a:d5:59:a7:7d:47:78:7f:63:78:f1:eb:fe:
a3:bf:68:2f:a2:8b:24:8e:53:a9:11:f1:89:c9:4e:12:a3:aa:
d0:61:48:14:d0:30:d2:35:8b:d7:b7:b4:34:73:ba:51:ab:aa:
3b:84:6c:d5:03:49:a4:a3:25:83:b1:06:1a:86:d0:ed:1b:9a:
aa:8e:63:52:32:11:ef:43:dd:26:1b:19:b6:aa:d7:43:66:63:
eb:f1:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:14 2026 by rpki-client