Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier: RLwMa99Bg42wTsGJHxllxkaLSWXnuhSPgJAGImQsZzg=
Subject key identifier: 20:CD:5F:A8:62:60:25:D9:2E:2D:81:C3:6A:30:58:30:B9:CE:0E:4C
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer: /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial: 019D34885F76A8CB5AE85B0A8927FA251336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number: 1023
Signing time: Sat 28 Mar 2026 13:00:45 +0000
Manifest this update: Sat 28 Mar 2026 13:00:45 +0000
Manifest next update: Sun 29 Mar 2026 13:00:45 +0000
Files and hashes: 1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: bvtD3JIzwA5kY++qkAejvrYVYvTxI7P31OBbqpruvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:5f:76:a8:cb:5a:e8:5b:0a:89:27:fa:25:13:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Validity
Not Before: Mar 28 13:00:45 2026 GMT
Not After : Mar 29 13:00:45 2026 GMT
Subject: CN=20cd5fa8626025d92e2d81c36a305830b9ce0e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:d7:7f:1d:88:d4:0d:c7:d1:35:d1:e2:aa:
a9:ef:ba:7c:97:fc:6f:b2:c6:6f:0a:15:8f:d7:38:
45:5f:ed:16:ef:8f:30:fe:50:13:90:c0:56:36:3d:
6b:3f:6d:8f:f5:21:41:a8:55:bd:c6:d7:f8:81:eb:
89:5e:d1:85:71:fa:aa:63:1a:5b:05:75:ab:ce:5a:
11:51:71:b5:bc:83:2b:f4:40:05:5a:cd:79:6d:ad:
51:14:87:96:33:e5:11:c4:c0:f4:3f:77:d6:5e:8a:
bd:67:c3:77:b1:0e:29:ec:e3:e0:47:3c:73:1d:dc:
75:83:8a:bf:95:c8:b1:a4:f9:cf:da:49:c1:e7:9b:
eb:62:67:ab:c6:f7:d7:d0:60:c0:37:4b:5d:eb:b0:
17:4d:10:c6:44:82:07:1d:b8:ef:07:27:3a:e7:67:
d9:35:47:56:ff:ba:90:b8:e8:56:51:aa:e3:cc:de:
43:54:8e:06:54:9d:45:dc:25:b4:bd:16:43:95:87:
1a:45:35:b8:b7:28:51:90:e6:71:5e:b7:23:2f:27:
c3:1a:43:ad:4b:98:fc:ea:15:90:29:43:75:37:fb:
ca:39:18:c6:8e:11:1a:8c:e9:9f:8e:fa:32:4d:c1:
d4:1d:73:40:6c:80:93:22:f4:9a:ca:38:fc:5b:75:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:5F:A8:62:60:25:D9:2E:2D:81:C3:6A:30:58:30:B9:CE:0E:4C
X509v3 Authority Key Identifier:
keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0e:8f:18:dd:84:6c:19:2d:25:2a:c9:35:d5:4d:e4:cc:9a:
b7:3e:41:99:1b:6e:c5:30:7c:89:12:90:8e:ff:9e:c7:7a:23:
1e:3c:d6:fa:87:3a:d4:6c:47:c7:8d:30:e6:cb:42:ed:23:c8:
ad:f9:b9:0a:d1:2f:43:5f:6c:75:1f:40:d0:96:17:aa:72:fb:
ee:45:87:4f:75:d4:b5:c2:f7:58:66:84:18:b2:1c:33:68:02:
08:a1:8d:17:9f:8d:c6:19:2f:5a:2f:b3:0a:f9:89:4f:32:7e:
42:07:12:01:b7:ec:59:4a:31:9d:93:03:c4:ac:22:43:a0:00:
9b:d9:27:04:86:85:7e:11:45:01:b1:c7:c3:e1:5e:20:d4:87:
50:ad:c0:cc:b7:1c:1e:e9:db:39:20:22:ec:5e:f4:73:db:62:
2b:17:03:ae:0f:9a:ef:1c:a8:a9:86:0c:03:38:a6:23:58:43:
01:25:4e:ec:da:68:26:db:69:0b:97:cc:e9:6a:a7:e5:7b:bf:
90:01:e0:4c:f1:0e:59:a3:d2:70:53:ae:32:68:ec:aa:88:38:
b8:79:54:1c:e2:ac:39:1b:67:f1:e9:01:0a:f6:aa:e0:53:bb:
27:72:88:10:b2:8e:90:e1:ef:09:ed:01:80:7b:9a:89:1d:04:
af:f4:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:30 2026 by rpki-client