Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
File: h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft (raw, json)
Hash identifier: CqaHMAcKGvlCPQT6zPWXHHf9rEV6BtksutAAGC3BBsc=
Subject key identifier: E5:CB:57:5A:FB:21:C9:3E:CA:25:31:AA:B0:EC:D8:09:2B:AA:32:E8
Authority key identifier: 87:A4:29:48:87:30:4C:FC:DE:5F:F4:A8:93:9B:91:98:E0:53:9C:B5
Certificate issuer: /CN=87a4294887304cfcde5ff4a8939b9198e0539cb5
Certificate serial: 019D341A7955A64CB1A0E74313B2A6206152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
Manifest number: 56
Signing time: Sat 28 Mar 2026 11:00:43 +0000
Manifest this update: Sat 28 Mar 2026 11:00:43 +0000
Manifest next update: Sun 29 Mar 2026 11:00:43 +0000
Files and hashes: 1: h6QpSIcwTPzeX_Sok5uRmOBTnLU.crl (hash: kjFvb09Yhz6+cKRqqvkoHmPYstAdUz9NlH73MeNU5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:79:55:a6:4c:b1:a0:e7:43:13:b2:a6:20:61:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4294887304cfcde5ff4a8939b9198e0539cb5
Validity
Not Before: Mar 28 11:00:43 2026 GMT
Not After : Mar 29 11:00:43 2026 GMT
Subject: CN=e5cb575afb21c93eca2531aab0ecd8092baa32e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:ce:e4:bf:22:72:ee:6f:fa:ad:9d:bd:58:
4e:95:4d:e2:7f:ce:0e:71:1c:8a:1c:f5:bc:3e:79:
b2:23:5d:01:f8:ad:53:4d:fd:79:21:28:36:c0:bd:
a3:6e:24:cb:72:a8:da:3b:e4:f4:bd:fd:1d:ad:dc:
07:29:c8:c4:5b:f9:68:b3:3e:58:bb:5c:f8:49:d9:
df:3b:e5:60:e2:fe:4a:d9:ca:ff:f3:ae:69:d3:0f:
3b:a2:e1:6c:96:d7:83:03:c7:2a:39:f9:da:c5:59:
9e:38:e1:85:76:87:6c:06:86:20:76:0f:92:94:f1:
ba:2c:89:3d:23:5c:69:71:bd:d0:f2:f2:ee:00:10:
2e:2f:43:09:b6:3b:f5:7d:56:76:3d:06:01:bd:59:
4f:3a:da:47:0d:49:c2:23:df:3e:81:5a:45:64:f2:
f0:9e:aa:66:be:a7:09:ae:8c:05:e9:e8:93:05:fc:
91:ac:9b:47:e2:18:e3:28:0d:6f:cc:06:e2:04:7d:
82:39:bd:e2:d1:3f:5b:dd:bd:c6:7a:c5:bc:2b:9f:
02:a6:41:21:6e:31:78:24:40:06:97:83:73:e2:81:
b3:4e:39:2e:64:77:c0:0d:8a:ca:58:a3:34:65:31:
25:df:2f:b2:b2:d2:ae:0f:aa:2d:fa:9e:95:05:79:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:57:5A:FB:21:C9:3E:CA:25:31:AA:B0:EC:D8:09:2B:AA:32:E8
X509v3 Authority Key Identifier:
keyid:87:A4:29:48:87:30:4C:FC:DE:5F:F4:A8:93:9B:91:98:E0:53:9C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:e9:a4:e8:4b:95:9a:85:d1:5e:b8:c2:6b:bd:a0:47:e2:
69:15:8f:62:0d:22:f5:42:90:fe:0b:34:9c:eb:b1:12:ac:25:
94:35:60:08:03:a2:9b:61:5e:4a:b9:e0:6b:d1:c6:ed:28:67:
33:33:51:f6:32:cc:7d:be:c8:40:9a:eb:f2:d0:4f:92:2e:de:
93:7c:f8:c2:85:1f:32:7e:d8:88:d5:19:12:f2:69:96:60:bd:
26:0c:e3:54:07:88:86:68:95:32:08:d7:e9:60:84:0c:73:a8:
9d:c6:fc:36:cc:68:50:54:d8:f9:63:ff:3d:c0:96:92:8d:85:
73:d5:c5:31:55:82:9c:ab:96:6e:39:9b:68:3a:3d:65:05:ea:
32:b4:3b:52:f5:21:fe:62:2c:7d:28:ec:ec:9b:23:51:60:b1:
aa:3d:2a:01:b2:f3:50:fd:a6:d0:b3:99:2e:01:e9:96:09:4f:
40:27:0d:62:fb:db:91:d3:ef:48:ed:42:04:35:03:11:d5:8e:
a9:29:68:9c:16:c3:27:23:28:88:cb:50:74:99:73:48:b7:bb:
2f:74:44:1f:ea:6a:b5:d9:1d:cd:94:3f:35:d4:13:6d:d0:81:
bf:a1:75:d1:09:ac:f9:e3:4f:ae:22:59:eb:64:77:a6:3c:07:
fa:85:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:14 2026 by rpki-client