Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier: F2C3aPEw0CvcadrpiIiEn/s6sxvNJFe3at7G5bKfyCk=
Subject key identifier: 49:02:72:84:AD:33:3B:FC:B7:50:71:EC:0B:A1:EF:5C:98:43:DA:6E
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial: 019D284D5ADFEEDDB9417C630CA83C59F131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number: 1590
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: cHainG6I5QOBuZ5Xm3nCnxPVPAej8gFkSFp4vZCl3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5a:df:ee:dd:b9:41:7c:63:0c:a8:3c:59:f1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=49027284ad333bfcb75071ec0ba1ef5c9843da6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:b2:14:7d:9d:85:79:8d:a3:55:52:70:a7:
9f:89:f1:67:70:14:29:67:d7:13:83:e6:6d:c8:ed:
ba:e3:83:fd:fe:c5:13:51:86:55:db:53:3a:6e:58:
0a:7b:59:67:af:57:00:92:f2:40:5d:2a:68:c5:ef:
cf:bc:a1:2d:4c:6c:f1:f5:46:d9:d9:e4:aa:a4:a3:
ec:0c:f5:ea:2b:b4:be:6d:f1:de:93:50:71:ae:1d:
08:c4:0a:9f:6a:21:ce:7d:55:b7:26:63:71:9f:97:
af:19:a6:ba:de:1b:fa:6e:d3:af:d5:9d:4d:b2:95:
a3:fb:2b:c5:fc:91:76:9c:c5:2a:72:12:22:5c:ed:
50:db:12:a7:67:66:2a:b4:78:e2:b3:b7:a4:1b:b9:
30:ae:58:00:4f:91:53:80:c5:33:20:ba:59:99:30:
53:b2:e7:57:cb:0c:82:f9:54:0c:aa:b0:b3:11:5e:
81:57:53:fc:3c:97:4c:b8:e5:09:95:d5:8b:40:3e:
34:e0:45:2c:c1:11:f7:87:79:3d:c4:9e:51:47:e3:
9a:ce:95:96:78:ba:9b:bd:7f:dd:05:e2:56:2e:1a:
c8:0b:4e:ef:0b:f1:bd:31:48:9a:df:b4:0e:c8:ea:
97:c0:96:8e:ee:b6:3c:05:49:d5:0d:f6:df:f2:8f:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:72:84:AD:33:3B:FC:B7:50:71:EC:0B:A1:EF:5C:98:43:DA:6E
X509v3 Authority Key Identifier:
keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6b:1a:92:c1:97:b9:50:d3:ae:1f:82:ee:20:91:67:73:0a:
b7:e7:5b:1a:bb:d3:93:3b:98:79:9f:b4:ff:f0:5b:81:2d:3e:
2f:97:90:b1:ab:5e:96:4d:eb:43:48:10:a2:2d:b0:31:a3:54:
c6:b4:d8:d5:04:1e:9c:21:29:26:bc:5f:32:41:68:59:68:16:
4a:ad:32:1f:3e:c4:55:56:ae:1f:7e:76:16:03:42:0a:22:56:
a2:0e:d1:16:4c:d4:81:dc:9b:a8:18:25:8a:ce:03:40:f2:d4:
14:db:7d:c4:85:10:65:bc:89:13:db:9f:79:a1:f8:79:b7:83:
d4:a4:99:ea:b0:26:f5:8b:c9:99:18:9c:8c:26:9f:1d:f4:13:
49:3b:e2:72:09:ae:53:5f:05:47:17:db:3c:cf:3f:a6:e0:f8:
29:b3:f3:cc:37:fd:ae:4e:83:1e:35:12:02:e8:16:03:d4:f1:
b5:1b:27:0d:f7:f0:f7:fa:6e:2e:54:8f:73:3e:fc:f1:a5:73:
cb:45:ea:db:99:07:0e:47:24:57:6a:f7:07:3f:95:ed:4d:4c:
d0:55:0d:01:0c:f8:c3:6b:f5:06:10:6f:60:4a:e9:bf:7a:72:
b1:b1:0a:26:3e:b6:11:35:d1:75:d3:8c:bf:11:7b:c1:f3:ed:
5e:40:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:53 2026 by rpki-client