Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: 8K4Byzhk1dKUd9KdtmaMDRq+Jeq7p5BqChyQSCcPb/A=
Subject key identifier: 8B:CE:26:81:7C:6D:4A:84:09:1B:D0:50:DE:6D:64:B5:01:F6:A0:F2
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 019D2B4EBADAEF01EBB51B30120AFD30D44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 140B
Signing time: Thu 26 Mar 2026 18:01:13 +0000
Manifest this update: Thu 26 Mar 2026 18:01:13 +0000
Manifest next update: Fri 27 Mar 2026 18:01:13 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: sapWNIa3cwvsUL/3yeSoruy5ACbpDeJtEnZ3q38DY8Q=)
2: fNhCdvxeQZoj3XWy5STPfpMqe10.roa (hash: wCTx9tvZPwFH9B8JWj62Kbx4BG2D1H+xagdcL9UIjPI=)
3: sC2t9HeXwYJBmIK5hgUt1abWWNw.roa (hash: /DjK2xG/5mDL0W1RW1HoW+CDPOFy25HMayyHgxh49IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:ba:da:ef:01:eb:b5:1b:30:12:0a:fd:30:d4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Mar 26 18:01:13 2026 GMT
Not After : Mar 27 18:01:13 2026 GMT
Subject: CN=8bce26817c6d4a84091bd050de6d64b501f6a0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:f6:15:e5:46:12:68:df:2f:d4:57:ca:6c:
5c:52:bc:48:30:39:28:d9:4b:72:2d:5d:7f:9e:b6:
ee:10:ef:f0:29:30:88:26:c6:82:44:7e:1f:c8:72:
e1:d1:71:c7:ba:0b:07:eb:63:fd:d2:d4:1b:2e:51:
36:f8:17:56:ae:ed:63:a0:a6:c2:e8:6e:54:33:17:
fb:ce:14:15:fc:2c:3e:4b:42:ec:15:aa:a0:45:dc:
96:75:fb:6e:65:76:6b:3d:35:af:2f:43:85:d9:73:
d3:98:0f:fc:c2:b5:50:1a:55:e7:c4:05:4c:c6:fb:
e6:c3:78:ec:fd:23:16:90:dd:fc:6e:43:87:61:2c:
f4:a3:25:c9:1c:d7:a5:d8:56:f3:b3:30:76:fb:f3:
d7:7a:77:d2:11:ef:58:f4:71:9e:46:0a:be:9b:f6:
d5:2f:15:da:5f:9f:0f:f4:f0:ba:3c:22:4d:3e:10:
21:49:61:cb:5e:c7:a5:78:df:0d:62:9a:54:19:e0:
bf:34:f3:f4:dd:a6:a5:69:a3:a4:04:fa:a1:08:74:
5a:db:e4:d9:51:a5:e3:f7:b1:11:a9:9d:de:ea:f1:
0c:2a:5a:1b:f8:72:26:c1:16:de:66:7c:1a:0d:c2:
5d:08:b7:89:f5:ab:50:a0:fc:42:d3:c1:d6:10:9e:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:26:81:7C:6D:4A:84:09:1B:D0:50:DE:6D:64:B5:01:F6:A0:F2
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:76:3a:4b:88:5e:c4:91:7b:0a:c0:80:a4:8a:57:01:41:b3:
e0:fe:38:18:fe:4b:32:90:c2:4a:e0:e1:8c:cd:92:48:25:52:
9a:32:96:0c:2f:a8:82:fb:ef:de:59:37:66:8a:bb:60:fc:4c:
74:11:7f:1a:08:2d:13:2c:2a:b7:43:f1:88:30:15:f6:c3:cd:
ac:b6:dd:87:1f:af:5b:d7:57:25:89:e9:4c:ff:2c:e0:57:fa:
39:c8:c8:9b:e1:28:32:1f:22:4c:57:3e:12:88:d4:b7:f8:75:
7b:a1:68:69:26:6d:db:1c:2c:5e:d2:e3:ff:4e:b5:b1:35:6e:
e3:1d:64:d5:1b:36:f7:1a:02:51:d5:b2:2a:c6:ba:9e:e2:fa:
bc:f1:a2:c1:1e:d3:9a:45:54:0f:12:60:83:35:c9:c8:e1:51:
e0:2b:36:57:9d:28:63:9a:c4:01:00:79:b8:65:90:0e:46:72:
18:70:fd:b4:3b:59:ff:4b:88:d5:82:cc:8b:f3:e5:ff:5a:5e:
54:4d:29:70:1b:79:70:69:e4:45:22:43:a3:32:02:30:d7:9e:
4c:21:35:25:dc:19:b4:97:39:87:f0:ce:06:31:0b:bd:0e:fa:
a9:1e:15:a7:d6:55:c5:0e:5a:a2:57:b6:3d:01:43:70:df:0d:
4a:46:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:09 2026 by rpki-client