Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier: KPGwM8Ap3Vdg8RwNOSETkjuaAmhpaAHsjsQyBmlE3vU=
Subject key identifier: 83:43:4A:01:C1:7D:B1:1B:8C:22:A7:C0:ED:FE:3F:C1:98:0B:AF:16
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 019D284DBEC6421C3AC03DFF2EC13E3023E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number: 1025
Signing time: Thu 26 Mar 2026 04:01:16 +0000
Manifest this update: Thu 26 Mar 2026 04:01:16 +0000
Manifest next update: Fri 27 Mar 2026 04:01:16 +0000
Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: sjMxb/8QCvQhuXi+iojpFylZsdvLon6K8uAq62YZcZM=)
2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:be:c6:42:1c:3a:c0:3d:ff:2e:c1:3e:30:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Mar 26 04:01:16 2026 GMT
Not After : Mar 27 04:01:16 2026 GMT
Subject: CN=83434a01c17db11b8c22a7c0edfe3fc1980baf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:c4:47:0c:6f:02:52:f4:51:db:f5:a2:fe:
33:b7:de:bf:5b:2e:da:5b:9e:16:49:42:a3:10:56:
3b:9b:3a:57:48:a4:b3:96:e7:9a:dd:d7:54:02:e8:
24:7d:08:d0:a1:eb:23:b6:1e:fd:8d:9f:19:5e:f0:
32:61:48:be:42:4e:8d:55:63:79:b0:62:6d:c0:57:
16:45:1b:06:01:54:40:10:dd:3c:87:8c:06:70:3a:
c9:37:45:51:ae:36:36:8d:33:19:8c:ac:12:4f:38:
5b:f7:e6:81:f9:45:e2:d9:97:d5:80:45:56:0e:a4:
ea:8b:b3:55:c9:c5:02:9e:8f:85:03:3b:38:d3:6a:
1c:f3:56:4f:ae:2d:9c:47:8d:08:e7:e7:c5:76:38:
2e:b0:5d:a5:25:72:8f:75:d9:5f:90:8b:0b:62:60:
89:4b:0c:cc:ad:12:a1:3b:61:8b:af:b6:3e:53:f1:
99:db:00:e7:1f:84:35:6c:fc:21:ca:ee:61:83:ed:
c7:b9:0e:4d:7c:d1:f5:a3:36:af:c0:e6:57:24:d0:
f1:83:d4:b4:1b:1a:66:ec:6b:27:d2:0d:78:6b:f2:
58:f6:10:00:bf:1d:b3:5a:bd:80:ee:f4:be:d1:13:
7e:ed:a1:24:b1:0d:c8:79:3b:e7:cf:74:2a:45:69:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:43:4A:01:C1:7D:B1:1B:8C:22:A7:C0:ED:FE:3F:C1:98:0B:AF:16
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:3a:7f:9b:5e:09:61:cf:96:74:b5:e4:35:be:30:51:5e:68:
7e:9f:f6:01:82:65:2b:41:cb:9c:8e:8d:57:fb:25:d5:1a:8d:
0c:62:ab:27:16:48:01:8d:d8:8f:c2:20:cb:7a:e7:ff:14:17:
e0:9c:b1:e4:73:78:ce:b7:6f:b0:3a:3d:a4:c0:4b:e0:fd:aa:
34:29:ce:4e:62:8b:bd:73:31:62:e1:e3:37:49:c9:d8:0c:d4:
76:94:32:50:e5:40:4d:5b:bf:f3:13:04:f9:74:56:5f:31:c1:
cd:32:ca:72:68:cc:cb:f7:62:37:e2:72:18:ef:46:7d:8d:b8:
24:17:c2:fb:1f:43:d5:6e:96:f5:84:f1:55:b6:95:ef:bd:49:
6f:15:24:95:62:b1:63:0b:3f:78:7f:4d:e3:d6:68:54:86:8f:
7c:cd:35:29:3e:55:3e:77:09:94:65:9c:0e:01:fa:09:62:83:
d0:38:db:f3:af:3e:2f:da:71:7e:67:15:a3:72:63:43:9b:d5:
5d:df:11:29:27:db:6a:b9:11:9a:47:aa:38:c8:05:9d:e6:49:
7b:0b:93:c3:b5:bc:01:0d:1a:4f:c2:ab:b4:eb:f1:77:e9:69:
9d:28:cd:55:cd:0f:78:77:ae:05:5e:25:61:ec:32:da:1f:03:
00:66:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:15 2026 by rpki-client