Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier: fOf1yXy+WFMkV/Y5/N/XmHZ3trS5QUyaN8BN0MayxWc=
Subject key identifier: 8D:9C:E1:1A:C9:91:99:B5:B6:47:54:BC:7B:24:2B:BC:35:22:76:64
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial: 019D2996CD5488C99C1FE2648BD3C896974F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number: 173A
Signing time: Thu 26 Mar 2026 10:00:41 +0000
Manifest this update: Thu 26 Mar 2026 10:00:41 +0000
Manifest next update: Fri 27 Mar 2026 10:00:41 +0000
Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: cuCNuWEMu7X/o52x2olakReSGkBTBLbUN3UfXY2rBdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:cd:54:88:c9:9c:1f:e2:64:8b:d3:c8:96:97:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Validity
Not Before: Mar 26 10:00:41 2026 GMT
Not After : Mar 27 10:00:41 2026 GMT
Subject: CN=8d9ce11ac99199b5b64754bc7b242bbc35227664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:8c:22:17:04:0a:f0:69:5b:f6:db:5f:e8:
66:c1:8e:ab:26:7f:55:14:9a:e6:ab:04:0e:2e:9c:
aa:a6:07:da:6b:6f:f4:54:4a:a3:0b:42:4f:be:1b:
9e:5f:a4:06:ef:83:68:ca:d7:4e:18:9e:38:7f:56:
3f:87:6e:4f:c2:f1:c8:0c:e0:ce:99:6e:94:4d:c0:
1f:76:26:38:4b:b8:32:79:f9:fb:de:35:d3:6b:cc:
ec:de:c0:11:08:ab:52:7a:2c:34:58:de:6b:d7:48:
af:1b:6a:ae:c8:fd:87:d2:df:4e:ff:d7:1e:b2:ff:
ba:06:6f:48:b5:38:67:4a:ab:89:d7:d8:73:68:1c:
b3:ec:d5:4c:ac:bc:0d:27:d0:7f:dd:03:e0:54:e5:
c1:6d:6b:e0:15:63:cc:ee:69:bc:39:b2:69:49:1e:
a7:e9:cb:e2:ff:70:d2:04:a0:0a:36:99:73:99:7c:
cf:2e:76:de:5b:bb:8c:0d:7f:5e:58:58:5e:a2:d2:
58:3c:86:16:a4:7f:45:1f:d9:72:82:17:3e:a3:ca:
3c:bc:cf:2e:9a:c6:59:35:dd:a6:d6:c9:5b:7a:0c:
73:ae:01:4f:e3:fb:c7:39:ae:3b:09:1f:5b:6f:7f:
1f:5a:d3:6f:a9:ad:ff:1b:02:18:e5:d3:a2:ee:8e:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:E1:1A:C9:91:99:B5:B6:47:54:BC:7B:24:2B:BC:35:22:76:64
X509v3 Authority Key Identifier:
keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6b:a6:25:a3:df:10:d9:b2:bc:ab:70:00:8a:1e:25:b7:15:
82:8a:1f:3e:6f:9a:46:b2:63:14:cb:9d:75:94:ad:16:dc:80:
75:17:bc:3e:5e:86:0d:12:bb:fe:5f:3f:8e:22:7e:c1:41:19:
3f:3b:4a:43:ac:28:05:67:b0:be:cb:f2:e7:e1:db:9f:b8:7a:
f6:ea:aa:c9:c4:3d:4e:20:6d:f3:54:8b:63:1a:85:e9:22:aa:
82:57:e0:59:11:e8:a2:45:7f:4a:2a:8f:01:74:53:ec:0a:32:
49:97:85:95:28:ee:95:5a:16:e4:f8:e4:78:37:b8:54:73:e8:
5d:d3:11:31:9d:15:fe:2b:17:97:d4:0f:d8:f6:45:a8:e6:93:
7e:68:2a:2b:69:86:c8:b9:06:ee:c7:c3:b6:b4:32:b5:59:6c:
18:92:70:0c:29:93:40:00:5f:d1:1b:d8:e2:f4:f8:c7:ad:38:
9f:b6:c9:d2:bc:4c:18:d5:ad:86:a6:a4:42:96:78:4e:a7:86:
68:d0:80:7e:86:c4:70:f7:66:65:ff:ca:10:8e:ad:5a:d4:b2:
82:1f:1b:12:8e:d1:21:da:1b:69:43:6d:90:e0:5d:90:60:7f:
cb:3a:be:dd:9e:a0:d6:3c:10:75:5e:e5:fa:79:34:13:51:56:
ea:28:c3:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pls1UiMmcH+Jki9PIlpdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNWNmN2QxZGM1ZmJkYmQ2MzRiZDYxYjgwYjdlZmZlZWM0
NjI4NzMwHhcNMjYwMzI2MTAwMDQxWhcNMjYwMzI3MTAwMDQxWjAzMTEwLwYDVQQD
Eyg4ZDljZTExYWM5OTE5OWI1YjY0NzU0YmM3YjI0MmJiYzM1MjI3NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kKMIhcECvBpW/bbX+hmwY6rJn9V
FJrmqwQOLpyqpgfaa2/0VEqjC0JPvhueX6QG74NoytdOGJ44f1Y/h25PwvHIDODO
mW6UTcAfdiY4S7gyefn73jXTa8zs3sARCKtSeiw0WN5r10ivG2quyP2H0t9O/9ce
sv+6Bm9ItThnSquJ19hzaByz7NVMrLwNJ9B/3QPgVOXBbWvgFWPM7mm8ObJpSR6n
6cvi/3DSBKAKNplzmXzPLnbeW7uMDX9eWFheotJYPIYWpH9FH9lyghc+o8o8vM8u
msZZNd2m1slbegxzrgFP4/vHOa47CR9bb38fWtNvqa3/GwIY5dOi7o7cjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2c4RrJkZm1tkdUvHskK7w1InZkMB8GA1UdIwQY
MBaAFOpc99HcX729Y0vWG4C37/7sRihzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQt
ODEzMjMyOWFjMzViLzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQtODEzMjMyOWFjMzVi
LzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGumJaPf
ENmyvKtwAIoeJbcVgoofPm+aRrJjFMuddZStFtyAdRe8Pl6GDRK7/l8/jiJ+wUEZ
PztKQ6woBWewvsvy5+Hbn7h69uqqycQ9TiBt81SLYxqF6SKqglfgWRHookV/SiqP
AXRT7AoySZeFlSjulVoW5PjkeDe4VHPoXdMRMZ0V/isXl9QP2PZFqOaTfmgqK2mG
yLkG7sfDtrQytVlsGJJwDCmTQABf0RvY4vT4x604n7bJ0rxMGNWthqakQpZ4TqeG
aNCAfobEcPdmZf/KEI6tWtSygh8bEo7RIdobaUNtkOBdkGB/yzq+3Z6g1jwQdV7l
+nk0E1FW6ijDMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:07 2026 by rpki-client