Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: 53TYeHNGAWpby40zZEaqmQz75Jo0lEinCYqMTFP7xHs=
Subject key identifier: 6C:58:55:A5:25:F9:82:E4:65:B6:9D:CD:E6:36:02:D9:E6:67:AB:85
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019D27A89C77C1493B7679CBDE7DE046CEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: Kw5LYhWHL7CCCKd0qkxmZ8lHNMzZ/KLFylhXoidNjJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9c:77:c1:49:3b:76:79:cb:de:7d:e0:46:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=6c5855a525f982e465b69dcde63602d9e667ab85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:dd:88:98:ef:85:d1:b9:b3:41:e6:b8:54:ac:
b4:d3:51:30:23:00:9a:57:be:86:bd:fa:50:5a:1d:
f6:fe:4f:bb:67:24:7e:44:95:e0:57:26:0a:47:e4:
df:62:5a:c7:ab:50:58:e7:af:1b:69:e2:c1:5d:70:
22:0f:1d:1b:79:82:7a:07:bb:07:67:bb:6b:46:cc:
b6:78:45:96:cb:5c:e0:6a:2a:03:2d:e6:a0:de:2f:
25:2e:86:4c:40:65:41:97:c5:96:30:e8:98:e9:08:
86:16:7c:d3:28:2e:bd:ae:ab:0b:cb:1f:02:9f:ff:
3b:dd:63:86:f3:9b:61:02:08:c9:70:90:4f:b5:1b:
55:f3:79:e5:a8:5e:4f:af:f3:07:3d:9c:28:31:69:
c4:49:54:2b:61:7c:bc:7a:7c:11:91:41:99:42:0e:
1e:70:c9:72:0f:b3:55:12:51:67:45:f5:97:ad:4b:
7b:4a:57:96:4f:f5:2b:2f:db:74:e2:35:a6:53:54:
8c:cd:d9:39:1f:b7:54:77:f5:83:c1:c9:ad:1a:45:
22:36:fa:f5:82:c3:d8:b5:c2:bd:1d:91:63:07:e5:
90:3a:07:dd:fb:21:41:3d:97:33:35:2a:3c:b7:c4:
99:c6:89:1c:9a:8b:98:80:15:8a:b3:af:50:2d:49:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:58:55:A5:25:F9:82:E4:65:B6:9D:CD:E6:36:02:D9:E6:67:AB:85
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b4:a0:2a:5b:a0:48:99:ca:09:0a:ef:ec:fd:78:c3:83:cc:
c1:5b:28:e1:ce:b3:10:e2:de:2e:6a:aa:ad:27:2a:46:14:9a:
ac:5c:56:f2:b8:32:da:50:2c:02:bc:f0:83:9c:4b:b8:f9:a6:
b5:20:8e:cc:a6:72:e3:2f:77:7e:aa:a9:74:74:64:98:dd:12:
8b:43:5d:66:1a:fd:e1:ed:ba:4f:89:d3:58:85:29:d4:36:7b:
17:21:48:93:da:cb:3d:93:b8:35:ec:44:7a:db:46:b4:73:41:
0f:74:33:23:f2:8c:25:51:b3:29:6d:b7:df:75:d5:d2:2c:13:
8f:79:d9:06:54:36:0c:1e:e0:8d:1a:66:14:b3:43:a9:d5:61:
e4:99:1f:4a:ed:b8:bf:d3:23:42:4f:08:dc:1e:aa:27:87:30:
31:06:91:16:ff:f9:af:52:fd:82:37:ce:f9:50:fa:fc:1b:c7:
45:c5:a1:c4:b7:91:22:11:1e:44:4d:9f:19:e1:38:07:86:70:
ad:19:c3:8f:c2:03:84:0c:4a:8b:2b:71:47:2d:29:9c:3e:c6:
77:17:72:bd:03:10:6e:7a:dc:a0:c2:94:5e:cf:ff:45:51:3c:
25:c0:83:4d:83:0b:0f:c6:07:a3:7a:9c:c6:5b:ab:8c:8f:97:
0d:b9:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:47 2026 by rpki-client