Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
File: 6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json)
Hash identifier: /Hn/xvTV65mJPpkE1jHXTu8g4F2/KGAJ1yvgQtrfUGo=
Subject key identifier: EF:62:8E:1A:06:1F:59:DF:F6:4C:3D:93:AA:44:4A:42:00:2D:57:D4
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Certificate issuer: /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial: 019D281691CC714D1E7D00AC3536592008E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
Manifest number: 07D0
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: qZ2WxJlthocO89Hs+BTMM3FZVCnvDplgTkaoyp6D0s4=)
2: EykCnR69Z2FCA4Ya_yadUJioFWg.roa (hash: pgJbZrv9GUjC+Qwk/eM7sGIHn68DSmx8Yyl/K3tmpv8=)
3: nvqn9Sh2i2lWg6Hwialk_8ZJzDk.roa (hash: 6lPfxX/n9LNcIDr5UXSvVe33ZTrPhgW6L/X4P6452WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:91:cc:71:4d:1e:7d:00:ac:35:36:59:20:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=ef628e1a061f59dff64c3d93aa444a42002d57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:8b:69:6d:7b:95:5d:d4:77:4b:63:11:a5:
a0:13:c9:21:b9:6e:ba:4e:77:4b:f9:c6:3a:c0:5e:
13:3a:78:82:46:a5:60:16:52:10:31:17:a6:a3:c3:
30:a5:ec:98:26:30:ab:77:73:03:5f:db:ed:a1:9a:
a6:87:bc:3f:41:0e:6e:9a:94:81:8c:2c:79:6e:ed:
14:f2:41:74:60:9e:15:73:bc:c3:da:30:a1:e1:82:
c6:e9:87:fc:77:e5:c0:cd:25:78:a9:fc:0c:c3:22:
8e:d8:5d:45:9c:32:b0:dc:06:01:ad:0a:e7:b1:a4:
57:fa:61:3a:86:a0:a8:14:4d:a5:35:a2:45:6f:d9:
80:1d:0c:d2:c0:46:4d:45:0b:23:fe:13:46:72:bc:
be:bf:65:c9:6a:5a:fc:75:27:cb:ca:df:cd:89:84:
e8:11:b5:6e:c0:c9:7f:03:3c:f7:7e:7c:ff:63:d4:
bd:84:c3:03:3a:8e:8e:93:45:1f:97:09:4e:ea:89:
a5:4f:a1:e8:a7:e2:5b:1c:28:f5:65:af:a1:2f:08:
28:c2:0f:18:96:46:d0:26:03:fa:2a:32:d5:18:08:
0a:73:24:5f:a9:03:ab:1c:f9:1e:9c:d2:44:b8:b9:
08:7f:d3:27:fb:82:82:d0:d9:bb:57:fd:16:a9:e3:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:8E:1A:06:1F:59:DF:F6:4C:3D:93:AA:44:4A:42:00:2D:57:D4
X509v3 Authority Key Identifier:
keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:e5:d0:1c:30:ae:c9:26:a2:66:0f:b5:21:64:d8:a7:72:
8f:a5:16:c7:83:9a:7f:8a:1c:40:7e:b7:f5:4a:6e:05:85:74:
fc:e9:0e:e8:31:16:f3:d4:0e:09:82:19:0a:bd:8d:73:ec:7f:
a5:7a:f9:df:8c:8a:37:93:7e:fe:3e:04:95:a9:e3:cb:6c:fa:
7f:c2:ee:fc:1c:03:dc:22:ae:0e:ed:18:1b:e3:f7:b7:14:6e:
46:22:ae:85:21:a3:1a:3f:4b:22:f7:0b:93:9f:a5:bf:85:da:
14:68:99:95:75:2e:fa:9f:65:ab:89:bd:b1:1b:ea:db:e1:5c:
b5:5c:12:7a:05:5f:52:cb:dd:59:92:bf:03:d6:6c:ab:1d:07:
2e:83:d6:45:a7:17:fc:6d:84:da:a5:65:0d:45:18:80:62:6c:
b6:23:cf:32:27:83:4b:9d:b6:91:41:e7:a7:c8:a7:71:47:4d:
40:38:92:a2:84:eb:8f:7a:ae:0f:81:80:16:95:89:1c:35:54:
4b:82:2c:23:ca:bd:20:62:e8:4e:60:7d:98:89:aa:5a:3c:25:
ac:ea:a5:63:11:7e:27:01:68:8a:58:30:22:f4:7e:53:0b:47:
e7:40:44:5f:b9:0e:58:73:93:2f:2a:8e:70:fa:f5:57:db:bf:
03:e6:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:10 2026 by rpki-client