Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier: xTvl7B85p1+qbiJ6SA27AAWi73qhyj7ZWRPegkOnesI=
Subject key identifier: A7:2E:77:79:B0:4C:3E:B0:2C:44:D7:8A:7E:F6:73:C2:86:2F:89:BE
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial: 019D2695E914E219A59D512C0F92F687C74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 20:00:51 +0000
Manifest this update: Wed 25 Mar 2026 20:00:51 +0000
Manifest next update: Thu 26 Mar 2026 20:00:51 +0000
Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: w23n3cF1KUidOnEoxXp5oZ+bAHiO37rWmfTl7T0cVnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e9:14:e2:19:a5:9d:51:2c:0f:92:f6:87:c7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
Validity
Not Before: Mar 25 20:00:51 2026 GMT
Not After : Mar 26 20:00:51 2026 GMT
Subject: CN=a72e7779b04c3eb02c44d78a7ef673c2862f89be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:53:6a:eb:e1:ad:2f:07:04:6f:25:dc:cf:
80:3a:7c:ab:af:99:50:6c:ca:74:18:50:4b:37:1b:
34:4e:a8:fd:de:b8:64:83:b3:68:65:f7:19:ab:da:
b7:df:80:4e:ee:5f:2c:cd:31:79:76:8a:c7:ea:a2:
d0:4d:68:02:41:ed:e2:bd:67:11:9f:0b:f4:20:5e:
b7:c5:8b:3f:38:48:e4:8c:4a:0c:26:b9:5f:c9:9e:
ff:d4:d7:02:9f:a0:bb:ce:8b:67:6f:db:3d:0d:3a:
ff:31:55:15:8f:1a:46:54:5c:40:02:16:ea:e1:ee:
a9:a3:34:e9:00:bb:02:3d:61:bd:6b:c1:84:db:2f:
f5:20:3f:49:3d:a8:99:c1:f1:2e:d6:f5:a7:fb:c7:
4d:4c:af:75:a1:a0:3d:41:94:23:6d:cb:39:c9:ba:
2f:b2:af:ce:28:91:48:cc:64:e1:12:f1:6c:fc:9b:
31:ce:6f:8d:7f:4c:6b:03:d5:43:c9:59:03:88:25:
34:03:1e:42:23:eb:45:90:78:14:f6:16:28:b8:95:
cf:9c:34:3f:c1:ab:5f:63:df:a3:04:e6:6c:ba:e3:
c2:89:8d:43:d6:96:b8:9c:b7:bf:1d:f4:a4:ad:09:
52:b5:3a:26:91:7c:2c:c8:02:2f:1a:a3:a9:b7:f7:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2E:77:79:B0:4C:3E:B0:2C:44:D7:8A:7E:F6:73:C2:86:2F:89:BE
X509v3 Authority Key Identifier:
keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ce:7f:a4:06:c7:eb:96:67:ad:ec:ab:4b:43:ff:b9:61:51:
a6:44:b7:ac:ae:a4:33:98:bc:fc:91:97:4b:bf:b5:6c:29:21:
8f:fa:d3:ce:0d:d9:ba:03:18:0f:0d:43:93:ed:22:38:43:1a:
d2:2c:da:d4:09:dd:44:b8:97:08:fe:7e:8b:66:bc:d3:52:e5:
0c:20:3e:08:b7:3a:05:96:bd:80:36:3b:80:dc:d7:a0:b9:95:
13:b8:8a:e6:5d:88:1a:ef:b3:7d:33:33:f4:a6:a9:26:1a:7f:
97:54:dc:96:a3:c4:f9:89:0c:bc:bf:84:df:6f:8e:db:55:56:
7a:15:cb:e6:98:8d:db:92:3b:32:6b:6d:f8:31:38:58:fc:68:
63:62:ad:39:ad:7a:9c:cd:dd:8d:8c:3b:05:56:d4:97:54:41:
01:c1:3f:91:77:63:b4:bf:51:84:76:85:5b:db:83:35:a2:e2:
15:4e:e8:3e:f6:03:64:12:5a:76:b0:a1:1e:07:a3:36:94:b6:
5f:bc:6a:b4:be:f2:f3:03:c5:79:29:f5:d7:ae:51:0b:0d:c9:
52:63:e3:f4:65:08:47:e3:3a:b4:8f:5a:e4:51:62:a7:e6:b2:
f4:0c:98:a3:fb:c2:1c:17:74:ad:52:46:aa:80:9a:36:b5:c6:
54:65:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:10 2026 by rpki-client