Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: 6NoIIwhwuLQRChrqey0/VGXAEnqu100RyZT74XY/Z78=
Subject key identifier: CD:7F:EA:B7:32:5D:9D:10:B1:4F:18:0D:76:C1:0F:1A:50:21:1B:15
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 019D27044B1C678C6EBEBE59F4F9BA22A6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 0C2A
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: 12/a8Duj31brCZ+ghg5z4QWxkrNe6AybNDUzlVS/3cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4b:1c:67:8c:6e:be:be:59:f4:f9:ba:22:a6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=cd7feab7325d9d10b14f180d76c10f1a50211b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:d4:b5:d8:c2:1f:5b:81:44:10:d3:71:f1:
d7:e9:e5:c9:d2:ac:f9:f3:28:0a:33:a5:e1:ac:c6:
6a:5a:99:9d:89:7f:98:34:57:ca:e4:fd:5c:75:53:
fd:da:a7:7d:48:58:d2:55:4b:aa:a2:3f:1c:fc:67:
99:7c:79:a9:25:6e:fe:9e:17:be:09:16:49:f5:88:
34:a9:3a:bd:c8:6d:a1:2b:ae:68:75:5b:41:ce:5b:
bf:83:1d:17:bd:fa:33:3e:4c:10:d0:90:d1:aa:d2:
ee:d2:00:4b:5e:d9:f5:76:30:ba:af:9c:21:3c:9d:
b5:c8:d5:58:4d:ff:b4:17:2e:d4:fe:b0:fc:ee:9b:
b5:21:c6:41:71:07:eb:5f:00:29:3c:8e:84:cc:69:
a9:0a:ea:4c:73:da:93:65:93:91:b7:5a:c8:6a:98:
79:bd:e4:7e:88:fe:d3:c1:06:7a:1b:00:41:d7:0a:
3e:e2:c9:12:9f:f0:3f:4a:92:e1:ea:1b:8c:c8:f1:
65:fa:6a:42:97:a4:df:db:3b:67:8b:a8:8e:82:35:
88:91:e5:87:15:81:9f:00:33:9c:8e:a9:69:03:e0:
3a:9b:9c:62:c4:f9:e2:4d:a4:02:44:3c:c5:33:c0:
18:6a:3f:d8:2c:cc:5b:20:5e:a1:84:0b:0a:84:cb:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7F:EA:B7:32:5D:9D:10:B1:4F:18:0D:76:C1:0F:1A:50:21:1B:15
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:1b:1f:f3:05:92:df:bb:8d:11:ae:0d:33:ad:75:7e:e5:
20:49:c8:e6:14:78:01:39:dd:cd:22:27:f1:fc:aa:dc:f2:88:
37:fb:d5:72:a9:79:b6:98:19:9e:47:36:e1:3e:6b:e8:46:2e:
48:79:9f:63:e7:d8:b1:f3:4f:81:45:03:ff:c6:3e:76:70:c9:
95:32:99:15:3a:d2:dd:6b:58:8e:04:8d:30:e1:66:f7:b1:6c:
ec:dd:fe:6c:b4:d0:dd:b5:8a:f0:7f:87:30:f6:52:bd:81:77:
14:b7:7b:76:5c:a3:e4:2c:fd:c7:0e:45:a2:6e:21:fb:05:5c:
87:07:51:9f:04:c8:7f:b4:f7:e3:27:a9:6f:11:9f:e0:83:b0:
54:b6:bc:36:df:31:10:0b:7a:f9:dc:b5:18:b4:9a:8a:39:f6:
d3:9c:f4:54:cd:f7:8f:50:f6:9e:b1:79:78:a3:59:8e:00:21:
06:0d:de:4f:0b:a6:61:1c:a0:ba:43:54:51:c1:ab:e6:5c:ac:
fd:86:d9:f2:94:70:eb:44:73:51:fc:7b:b2:a9:6c:4d:b2:b5:
1b:d5:6d:ad:1c:ef:28:6e:2e:96:2f:1b:cf:51:1f:5d:2c:fe:
60:ff:1d:2c:0c:78:93:ae:97:36:9d:91:7a:e6:b1:66:9a:65:
23:a7:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:05 2026 by rpki-client