Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: YLM/ODB2x4nkxPqT+rnDqb0686kiB2oBY+B3T3bIpk8=
Subject key identifier: 23:B3:C1:DA:83:A4:5F:C8:50:A4:45:98:39:4C:E2:F1:A9:0D:C6:E4
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019D265F328C8AB7B142F085D2E1B6DF1304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 0CFC
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: AEJVLPeRZh834jBNtggdg800kZg3+M4dSegTyh34yxs=)
2: vHXepVpKIWkVP3xDk93G1Kcb1DM.roa (hash: hhAFdaETyQv2y4V0RVthnkONgbjAxOm2okzHuxGf6Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:32:8c:8a:b7:b1:42:f0:85:d2:e1:b6:df:13:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=23b3c1da83a45fc850a44598394ce2f1a90dc6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:66:9e:75:2a:3d:2d:ac:72:92:4d:d4:76:
a3:ac:91:19:87:d0:9e:8e:a4:0a:d0:fb:ac:8c:3d:
e2:a6:49:fb:17:80:06:4e:f6:6c:e4:24:eb:27:52:
e7:ba:99:9d:5a:35:9b:65:f0:f3:c7:7e:c9:4b:7a:
ed:97:06:2f:5f:c9:60:5e:aa:5c:78:bf:7f:5b:6d:
ba:ff:ab:d1:44:63:7e:c3:96:b8:e8:ab:fd:2b:0e:
71:20:c2:21:d7:b8:7c:df:2d:8b:9f:8c:bc:c3:4b:
2f:6a:a1:7e:28:43:f9:80:05:8d:fb:a9:b2:93:15:
62:d6:cf:d6:a5:4e:32:76:4a:c6:1f:2b:8d:91:18:
b3:8b:ae:66:3b:eb:31:31:c2:02:71:74:3d:95:2d:
7c:d7:c8:ef:a8:67:7b:68:15:7d:a6:f5:67:a9:47:
6b:16:75:fb:c9:4d:fa:6b:81:a4:26:76:2d:dd:35:
65:49:77:45:a9:0e:ec:51:2f:6c:5b:4d:f6:4e:d8:
17:fc:f5:2c:a2:43:87:c0:96:ad:ae:e9:3f:2f:d8:
7c:c7:24:d5:f5:d9:22:00:f4:b4:ca:87:4e:e3:a8:
e6:ac:9d:0a:41:6f:d5:f2:dc:e4:3a:39:44:69:fe:
e1:3d:73:19:84:03:c1:b6:10:c3:67:02:d3:fd:1f:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:C1:DA:83:A4:5F:C8:50:A4:45:98:39:4C:E2:F1:A9:0D:C6:E4
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:21:72:e4:0e:45:55:fb:58:f9:01:dc:0d:d9:4c:9c:33:
cc:a8:d6:8a:24:9b:5e:40:ff:94:e1:34:56:40:8b:4b:ec:6c:
ca:e9:12:bd:b8:89:53:e0:76:44:58:95:44:f8:48:2d:6f:40:
26:6d:fa:68:59:7f:a0:ab:78:0b:ca:1c:67:ba:75:64:10:4e:
ea:ba:d4:93:36:36:80:9f:ea:60:6b:8c:30:8b:e3:eb:b6:29:
d8:02:39:27:fd:20:ae:06:a3:22:8a:bd:2f:29:fb:64:55:b4:
08:a0:05:47:d1:69:f6:ac:27:ba:dc:fd:a8:f0:63:ad:89:f7:
31:0e:c1:57:e6:42:d5:86:31:3c:5e:16:6c:ca:d6:c0:b3:7b:
28:50:a0:ec:91:ae:16:2f:2b:5a:e6:40:08:e1:4c:fa:56:91:
e7:7a:99:77:38:3a:ee:22:99:24:3a:d9:6a:17:fb:5a:8b:a9:
77:c6:f9:34:55:3e:b9:a0:ef:d8:dc:e1:b0:c9:69:c6:01:ca:
4d:62:89:84:c9:b5:ce:4b:72:57:3f:ae:fd:e1:9b:ed:3a:b3:
69:03:23:31:b2:2c:dd:3d:4d:77:1a:55:b1:31:e2:a7:12:7b:
e7:d2:19:65:91:3d:a4:b8:75:4a:27:55:19:3a:b6:f8:a5:47:
1b:2f:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:13 2026 by rpki-client