Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: vrVKTmxY5xPUCTxm4xB9zg7sVuRGsBIL9Q6W6QTO9c4=
Subject key identifier: 7A:12:1F:CC:6A:74:48:1A:1C:0F:CF:F2:A6:60:9D:83:9B:20:87:6C
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 019D2960EE0623C6A4A479CD5FE96DA6B8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: 0522
Signing time: Thu 26 Mar 2026 09:01:51 +0000
Manifest this update: Thu 26 Mar 2026 09:01:51 +0000
Manifest next update: Fri 27 Mar 2026 09:01:51 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: ZZA7hWN3ucyQ2jQEChI3Ef/IjpJFjjAP70Gq0eJfw+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ee:06:23:c6:a4:a4:79:cd:5f:e9:6d:a6:b8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: Mar 26 09:01:51 2026 GMT
Not After : Mar 27 09:01:51 2026 GMT
Subject: CN=7a121fcc6a74481a1c0fcff2a6609d839b20876c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:22:ec:61:fd:11:4a:45:a8:e5:7d:80:da:
d1:3d:21:e0:a6:0a:af:f2:27:40:a6:5a:0f:e6:ae:
26:9a:57:e5:bd:ae:42:9b:a6:26:30:e4:c9:7d:b7:
5a:37:50:54:c0:b1:56:0e:04:f0:d0:e6:14:bd:09:
a0:13:ad:bd:2d:de:2c:5e:a4:ca:dd:8a:ff:f1:ac:
40:2b:99:7a:09:a7:21:a8:3a:d6:35:ca:eb:d9:5e:
9f:af:a2:43:4e:70:f9:4d:b5:98:b2:77:ba:03:1e:
82:3d:ae:12:b5:ed:28:bc:7f:8f:b3:98:b5:03:d3:
c8:ac:cf:13:67:b3:b3:ee:d1:30:3c:bf:e0:0f:67:
d0:40:30:6a:14:e5:91:b9:4a:09:f7:0b:85:6f:d2:
e5:7e:e9:d8:02:38:d4:f9:7d:67:7c:7d:a3:c0:c7:
a0:80:6b:42:b2:87:9f:c1:ac:f4:54:40:57:50:4f:
3f:35:f5:3e:e5:b5:3f:69:b0:27:58:13:cd:43:26:
59:d8:d6:2a:ae:c6:45:9c:2e:f9:af:5f:63:b8:73:
52:c3:a4:c7:b6:90:ef:cc:d8:22:14:31:77:35:39:
64:3c:1d:c1:55:dc:c7:a0:a8:1c:c8:d8:99:87:fb:
45:39:aa:bb:0b:50:1d:48:bb:79:e7:04:a1:88:41:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:1F:CC:6A:74:48:1A:1C:0F:CF:F2:A6:60:9D:83:9B:20:87:6C
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7c:d0:8d:46:4f:90:b5:8e:e2:3e:75:5a:d7:31:63:84:da:
1c:90:b9:5a:33:62:c9:2a:e2:6f:d2:ff:ba:fd:73:de:83:a4:
1b:2a:5f:86:9f:df:1e:e2:84:9d:1e:ee:73:7f:b6:f7:e4:6d:
cb:b6:da:81:72:29:a3:fc:89:44:b3:fc:9a:8a:a0:b1:77:ac:
6a:44:23:ec:e1:b8:d4:9a:0f:95:83:38:23:0c:54:82:91:28:
b1:cb:aa:19:64:15:09:f7:d9:02:10:dd:ed:01:e0:5b:5d:95:
3c:54:00:92:0b:38:44:0c:55:50:78:ff:72:45:73:9b:1b:84:
fc:35:9b:c3:b3:06:a1:8c:a7:bc:b8:d1:80:78:ee:11:5a:b7:
2a:9d:d8:f9:aa:c4:db:7a:30:45:1f:ab:42:74:77:57:6a:dd:
b6:83:7f:80:6a:96:4d:40:e3:14:92:b9:83:db:03:21:1b:7b:
78:de:1b:44:63:dd:43:cd:ef:1d:88:49:03:08:9f:90:2d:cf:
f3:e0:86:9a:5c:b9:0e:12:1b:48:50:2c:30:15:7b:38:6c:c6:
fc:a5:42:51:46:e3:2b:ef:05:98:c0:a0:37:04:b9:7c:01:9b:
4d:72:75:9e:e5:45:c1:72:cc:17:e4:d0:95:ab:cb:7e:3f:62:
ff:91:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:43 2026 by rpki-client