Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
File: 6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json)
Hash identifier: nx4S+j8DY5P0voTMxFNSRdxgvh34MWcIuFsHAszC3KA=
Subject key identifier: C6:AA:82:87:19:8C:2C:E4:27:C1:65:5D:22:B4:A4:8E:23:AC:60:3E
Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
Certificate issuer: /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Certificate serial: 019D27724A409CCBBC8900C653362241EF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
Manifest number: 021F
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: EojJY3RfzCJ6w884DN544DdKMibh7MrZPcV6OrRxe0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4a:40:9c:cb:bc:89:00:c6:53:36:22:41:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=c6aa8287198c2ce427c1655d22b4a48e23ac603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:b5:44:1c:79:9c:b3:70:44:f9:67:84:71:
0e:a7:fc:1e:0c:f9:58:88:df:11:2a:23:52:8f:20:
16:f1:88:e9:42:48:2d:0b:ab:92:22:d2:58:ac:0e:
b5:8a:20:1f:01:d1:15:5d:8b:5c:bd:31:91:5d:c7:
c4:df:c0:4f:cb:00:24:46:96:e4:5b:e1:46:2c:63:
87:be:58:2d:0d:8c:53:0a:11:0c:27:66:0e:08:11:
8b:d3:34:6e:90:3a:ad:b0:88:40:4e:8b:c3:6d:20:
3a:6f:33:9c:47:be:e6:6c:d5:90:f1:cd:f2:a0:04:
98:d2:e5:82:15:6a:2b:a5:e2:95:c0:a2:1d:ef:77:
8b:af:83:cb:43:48:2c:22:a9:9d:b1:47:56:9b:db:
b5:ce:b0:99:c6:72:29:98:a0:d7:6d:c1:39:e6:5b:
1e:fb:6c:f4:f2:2e:8d:88:8f:f7:77:45:64:41:a1:
88:41:65:12:06:70:a5:a5:70:1e:4e:5b:2e:9f:ad:
9f:cf:bd:0d:70:6f:be:7c:52:6f:f6:0d:05:20:3b:
c4:21:71:df:67:a8:12:80:80:c6:32:cb:07:8d:30:
50:e6:20:2b:85:83:9e:67:ab:0a:a0:9f:46:69:93:
63:08:5e:36:1f:3e:14:8d:37:67:d2:7e:ce:0c:44:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AA:82:87:19:8C:2C:E4:27:C1:65:5D:22:B4:A4:8E:23:AC:60:3E
X509v3 Authority Key Identifier:
keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:37:81:0c:47:6a:ad:d1:f3:4d:28:37:69:4c:78:06:fa:
7f:18:4d:57:d4:00:54:98:0a:19:08:0d:bc:9c:23:5b:74:6c:
25:30:46:d1:71:e1:58:7c:32:13:67:a1:c9:a3:72:7b:5e:a6:
ec:2c:05:55:84:47:e3:49:bc:95:76:b0:5e:f2:56:cd:52:41:
88:92:39:b3:b3:07:d1:9f:a6:3f:ee:08:13:a8:7f:bd:12:d4:
b2:1a:04:2a:ff:58:59:4a:e5:d1:90:82:ec:90:2b:66:78:eb:
27:4c:f7:6e:50:aa:5e:5c:4a:b9:40:27:af:ff:4e:1a:f2:01:
b4:67:ad:cb:79:88:82:96:e2:77:88:a6:fc:83:cd:3a:35:95:
d9:9e:13:99:ed:9a:c1:a4:62:69:7f:56:e6:a9:5b:dd:c1:87:
b1:b3:da:d9:88:80:8f:c3:0e:6c:47:16:8e:1c:43:20:0a:29:
1d:27:f5:24:ff:ca:e2:dc:73:33:67:26:1d:dd:de:06:ec:01:
88:a2:c6:93:9b:5e:e6:5c:ce:75:fa:c3:65:14:b9:46:f7:78:
2d:e7:d0:de:68:48:0c:17:75:29:9c:7a:be:59:0e:e0:2f:a7:
78:8c:a8:c5:e5:39:78:bb:66:c6:5c:19:7e:b4:d6:3e:81:23:
b4:9c:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:06 2026 by rpki-client