Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File: 6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier: qCq1KhFWdkXVsiu+no919664VsQtUhVTdxq2OCpZ6H4=
Subject key identifier: 7D:C7:D4:E9:A1:9A:A2:5D:5C:28:9C:54:9F:51:67:DD:9A:1A:64:FC
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer: /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial: 019D34895693BB1D3E645D4FB52B3C742792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number: 154F
Signing time: Sat 28 Mar 2026 13:01:48 +0000
Manifest this update: Sat 28 Mar 2026 13:01:48 +0000
Manifest next update: Sun 29 Mar 2026 13:01:48 +0000
Files and hashes: 1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: St3WEDhn2+DzfLKl5UPTQOfKyxCTvBIIVPCznl8UOQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:56:93:bb:1d:3e:64:5d:4f:b5:2b:3c:74:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Validity
Not Before: Mar 28 13:01:48 2026 GMT
Not After : Mar 29 13:01:48 2026 GMT
Subject: CN=7dc7d4e9a19aa25d5c289c549f5167dd9a1a64fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:59:73:55:d2:4c:0f:d8:93:2c:36:3f:77:
c4:6f:a2:71:84:78:5a:9d:44:e4:9d:f3:fa:97:6f:
c2:2f:fc:33:b5:87:28:4b:81:e0:e4:2d:da:b8:50:
d7:47:2b:c2:1e:80:6c:cc:c7:3d:3e:98:16:59:49:
17:b3:81:eb:e8:c2:51:28:97:cc:39:9d:7c:91:8d:
7a:c1:b5:5a:5d:ad:e8:ad:a4:e0:fd:a7:5d:d5:49:
63:6a:34:e9:25:30:03:7e:86:0a:31:89:d4:df:e2:
9c:76:25:38:38:94:f7:a2:a3:6f:a7:56:45:45:c5:
d0:12:a9:1f:bf:e4:d3:d0:17:02:55:d5:b3:0d:15:
2e:87:8c:71:77:19:a3:3f:a7:5a:b7:ef:15:85:34:
b4:0d:3e:be:73:1a:63:46:22:45:70:86:41:b7:8a:
8e:9a:8e:b8:7b:82:f7:37:25:bc:0b:87:9f:2e:c2:
e0:9c:7d:7b:13:df:42:5a:b5:cf:11:20:49:75:9c:
6c:5d:e4:36:00:a1:4f:45:94:47:ed:e8:47:0c:48:
51:ea:0f:3f:ad:43:4d:0b:c2:4c:ac:ae:0d:94:fc:
f3:94:6e:e5:1f:07:74:99:c0:4b:ea:e6:de:c3:ae:
64:16:7b:35:e6:33:21:11:e2:d6:ce:b5:5f:a4:67:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:D4:E9:A1:9A:A2:5D:5C:28:9C:54:9F:51:67:DD:9A:1A:64:FC
X509v3 Authority Key Identifier:
keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:d5:c8:78:d7:8f:f6:16:fe:87:b0:30:88:50:dd:3a:df:
eb:c5:68:34:37:39:13:4c:8e:8f:4e:f3:df:f5:a5:a1:14:e0:
ba:46:96:76:56:f3:8d:ed:83:3d:54:63:11:d9:49:24:38:29:
17:b9:1a:a8:4c:e5:69:69:a9:da:6b:78:8b:e3:00:6b:ce:1e:
36:7c:34:5e:e3:42:60:de:3f:06:58:e2:8f:d8:4c:73:0e:4f:
86:df:b2:0a:92:fa:c1:8d:a9:7e:af:85:01:61:67:f8:5c:59:
78:bb:42:b5:c1:1b:bd:a1:2b:03:af:a7:69:2a:e9:fc:a2:ac:
5b:92:b8:28:dc:bc:9b:7f:61:83:13:ae:f8:67:2c:a7:f7:a5:
81:60:00:28:4f:1a:77:e4:55:a6:0d:ea:16:2a:e6:72:9e:8b:
9b:15:00:1d:38:8a:5d:2e:48:10:d0:4a:1d:fd:67:af:a9:4b:
6f:0d:71:48:9d:cd:a7:9d:a6:b2:96:04:ce:1e:14:c0:19:07:
c8:f0:24:c0:63:00:38:7e:fa:62:77:05:d5:87:4c:41:c8:b8:
aa:4d:59:35:8f:a3:97:c0:e4:00:27:e8:16:a6:76:25:ec:ce:
18:bd:cb:c0:a6:6b:a7:5d:3b:c0:6f:f5:74:7d:02:93:3b:49:
83:c9:88:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00iVaTux0+ZF1PtSs8dCeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ODJjMjYwNDE1OWJjMzBjMDViOWYwY2Y2ZTlkODM2MTAy
ZWE5NGIwHhcNMjYwMzI4MTMwMTQ4WhcNMjYwMzI5MTMwMTQ4WjAzMTEwLwYDVQQD
Eyg3ZGM3ZDRlOWExOWFhMjVkNWMyODljNTQ5ZjUxNjdkZDlhMWE2NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnxZc1XSTA/Ykyw2P3fEb6JxhHha
nUTknfP6l2/CL/wztYcoS4Hg5C3auFDXRyvCHoBszMc9PpgWWUkXs4Hr6MJRKJfM
OZ18kY16wbVaXa3oraTg/add1UljajTpJTADfoYKMYnU3+KcdiU4OJT3oqNvp1ZF
RcXQEqkfv+TT0BcCVdWzDRUuh4xxdxmjP6dat+8VhTS0DT6+cxpjRiJFcIZBt4qO
mo64e4L3NyW8C4efLsLgnH17E99CWrXPESBJdZxsXeQ2AKFPRZRH7ehHDEhR6g8/
rUNNC8JMrK4NlPzzlG7lHwd0mcBL6ubew65kFns15jMhEeLWzrVfpGfLrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3H1OmhmqJdXCicVJ9RZ92aGmT8MB8GA1UdIwQY
MBaAFOiCwmBBWbwwwFufDPbp2DYQLqlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iOWRjNDAtNTQ3MC00NTY4LWJiYjkt
NjMwNTg5YzY4ODg5LzEvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iOWRjNDAtNTQ3MC00NTY4LWJiYjktNjMwNTg5YzY4ODg5
LzEvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMvVyHjX
j/YW/oewMIhQ3Trf68VoNDc5E0yOj07z3/WloRTgukaWdlbzje2DPVRjEdlJJDgp
F7kaqEzlaWmp2mt4i+MAa84eNnw0XuNCYN4/Bljij9hMcw5Pht+yCpL6wY2pfq+F
AWFn+FxZeLtCtcEbvaErA6+naSrp/KKsW5K4KNy8m39hgxOu+Gcsp/elgWAAKE8a
d+RVpg3qFirmcp6LmxUAHTiKXS5IENBKHf1nr6lLbw1xSJ3Np52mspYEzh4UwBkH
yPAkwGMAOH76YncF1YdMQci4qk1ZNY+jl8DkACfoFqZ2JezOGL3LwKZrp107wG/1
dH0CkztJg8mIww==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:26 2026 by rpki-client