Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier: t2oK7eiVPnrV/HOB+GjDLEiz9kv7sLSkxH6tXObDnzo=
Subject key identifier: 48:A5:64:94:22:50:67:50:83:37:4D:59:B2:C7:C3:22:CA:33:7C:00
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 019D265FE6730453AEB0C13F61E5A25CCEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:52 +0000
Manifest this update: Wed 25 Mar 2026 19:01:52 +0000
Manifest next update: Thu 26 Mar 2026 19:01:52 +0000
Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: fcLBSDVp+mixjeqpJ01uSyHnsZYZEYz1klps+KqGGvc=)
2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e6:73:04:53:ae:b0:c1:3f:61:e5:a2:5c:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Mar 25 19:01:52 2026 GMT
Not After : Mar 26 19:01:52 2026 GMT
Subject: CN=48a564942250675083374d59b2c7c322ca337c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:87:dc:2d:41:7e:3d:e3:55:ee:a3:52:bf:
76:71:80:8e:da:62:25:9d:e7:af:d5:17:98:35:9d:
e6:0b:a4:5f:3f:c6:ee:e9:a2:56:e6:1e:9f:42:3c:
fa:c7:73:05:ee:de:b3:fb:6a:bd:b5:86:6e:a4:ed:
25:38:fb:11:5e:c0:2d:26:72:e3:44:50:89:35:9b:
82:99:e6:20:09:fd:e3:0a:a6:b8:d1:3c:03:82:ce:
42:bb:fe:54:60:db:44:81:bd:8f:b7:29:73:5f:8d:
1f:b1:0b:1d:73:03:20:eb:53:f3:24:4c:8f:89:57:
92:35:2b:f8:6f:02:8b:e2:89:9d:07:c6:a1:98:88:
44:bb:24:78:14:de:9b:14:c0:fb:ca:13:90:36:72:
d5:21:4d:09:0d:0e:4e:6e:40:d9:bc:65:6c:c2:3c:
46:31:26:b2:43:ec:c4:cc:88:30:ac:78:52:12:17:
a7:a5:ff:d9:d3:37:1d:c1:85:eb:eb:80:7d:47:43:
18:d3:4e:e3:31:d9:4b:f7:17:73:6e:fc:3b:c6:26:
29:59:e8:d7:ad:20:51:c5:19:2b:29:f8:61:00:fe:
25:91:de:5f:9e:0b:b9:b0:5b:80:b3:57:a3:60:ce:
f1:6d:78:04:47:ae:01:a6:08:ad:3b:f7:27:6e:e1:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A5:64:94:22:50:67:50:83:37:4D:59:B2:C7:C3:22:CA:33:7C:00
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:51:b7:61:83:e1:99:83:db:48:d8:aa:d9:c4:0c:6e:4c:a4:
58:a6:c3:0d:21:62:05:9d:95:9d:bd:a6:f1:e8:32:08:48:92:
96:fd:18:78:b2:5a:7f:9a:ac:5a:49:6f:bd:b8:9a:94:d6:f5:
63:af:91:24:4e:c0:8f:bf:d7:77:0c:fe:4d:51:a6:86:2b:02:
8f:d7:24:83:30:38:ff:e7:fa:86:02:d4:0b:4f:25:56:f0:83:
37:ac:30:a1:a7:72:b9:f8:6d:95:7c:ae:2b:6c:70:19:fd:9c:
35:dd:a3:ce:4e:0e:22:81:b9:9d:9e:a2:3c:ce:32:95:2b:33:
41:fc:6b:1e:09:2f:e3:78:a4:cf:c5:85:69:f6:66:c5:6b:49:
5b:30:fe:de:b0:68:1f:90:35:88:a8:be:03:a2:07:f5:47:b0:
da:4b:1f:bd:39:4c:b3:2e:12:c1:d7:e6:d4:12:6c:99:55:4c:
31:93:78:f9:61:6f:7c:c7:25:81:49:f1:d2:e2:83:9a:11:ec:
93:20:96:77:9d:01:1f:27:7e:85:26:59:be:3c:45:58:91:17:
f6:28:a0:67:27:2b:5c:c7:85:dc:f3:1e:d7:67:48:3f:87:c2:
30:09:04:9b:8f:0d:f7:81:c2:0d:26:9b:eb:88:2e:4f:7a:c0:
47:69:b9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:06 2026 by rpki-client