Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json)
Hash identifier: hm1gCvlrUk1TH/t3eSyfVl0XsOqZwZwi7Bpc0+lIxgU=
Subject key identifier: AF:97:78:2C:45:66:E4:C8:57:CB:97:18:18:72:95:7C:08:9C:03:07
Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Certificate serial: 019D258441798C3C6BC8C5F49D948E9207C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
Manifest number: 0371
Signing time: Wed 25 Mar 2026 15:01:57 +0000
Manifest this update: Wed 25 Mar 2026 15:01:57 +0000
Manifest next update: Thu 26 Mar 2026 15:01:57 +0000
Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: OaHjFcupyOjdh3AzOiIFMm0plzSBiTAO7kUKHHSbyXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:41:79:8c:3c:6b:c8:c5:f4:9d:94:8e:92:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Validity
Not Before: Mar 25 15:01:57 2026 GMT
Not After : Mar 26 15:01:57 2026 GMT
Subject: CN=af97782c4566e4c857cb97181872957c089c0307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:19:80:d6:a7:4a:d0:4a:c2:e9:1f:ca:ee:
b5:24:48:7e:42:97:02:b5:f7:80:b5:77:8a:53:df:
6f:f8:a6:8a:5c:d8:ed:19:02:5e:ff:7c:83:0f:23:
16:0d:cd:ee:e5:d3:b1:20:90:78:bc:da:c1:62:5c:
44:e6:f6:43:67:2c:26:06:79:85:53:94:e2:5b:38:
3c:7e:d9:f6:b4:dd:6c:82:f4:f9:04:47:64:05:7e:
77:90:da:70:2b:ee:7b:58:68:3f:51:4a:47:d2:a9:
31:01:3a:8d:13:aa:d6:75:8b:97:ce:52:15:9d:97:
a0:a3:fa:47:36:25:a6:fc:a1:80:80:c9:10:48:1e:
37:df:a5:85:05:92:8d:09:fe:cd:5e:11:6e:e7:e3:
07:7d:02:7d:9e:8d:1b:89:71:c9:9a:c4:9d:2a:cc:
39:45:e9:7f:36:de:32:85:69:d6:f3:c4:d1:6e:47:
1b:70:78:e1:de:11:a0:51:6c:0d:71:57:2c:e2:66:
dd:81:98:5b:d4:23:28:99:b1:f0:bd:41:9b:bc:f1:
af:cc:3a:d4:15:47:61:a9:a1:c2:e3:ca:b3:fe:f8:
4e:33:34:22:27:be:26:7a:87:28:ee:d3:df:4a:92:
65:5e:58:d4:fa:0a:c2:95:ea:62:ed:af:f5:15:78:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:78:2C:45:66:E4:C8:57:CB:97:18:18:72:95:7C:08:9C:03:07
X509v3 Authority Key Identifier:
keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:79:08:a4:e9:e5:f9:23:8f:7c:bc:15:19:e7:42:ce:f9:
ea:7a:ef:94:13:70:98:9e:f5:dc:32:91:e0:ef:79:47:f2:5a:
a5:b9:3e:14:07:04:74:d7:3c:1d:ca:ca:d8:6a:64:56:5d:85:
f3:04:fd:fd:58:1d:3d:ba:14:1c:79:4c:3d:b6:2f:ec:97:7e:
3a:0e:2b:5a:d6:a0:0b:70:65:68:6a:0d:00:6b:8e:f9:f0:45:
93:62:99:13:68:bd:e5:72:37:94:d6:b5:1b:0f:3d:cd:a1:d3:
11:fa:02:3f:de:e6:a4:4c:b5:0a:72:61:7f:87:2e:ac:3f:eb:
1c:fa:52:ea:ba:5d:13:eb:bf:bc:15:d0:53:ae:58:b4:de:e3:
3c:f2:91:2e:97:19:56:36:e0:01:e7:59:ac:33:a7:3f:42:a3:
3f:84:ae:d8:0b:95:3b:d8:21:92:df:38:fd:34:11:26:83:70:
37:31:8c:1b:f4:df:20:e8:ec:d5:a3:a5:4b:0c:c8:85:d3:cb:
48:23:15:59:a3:d1:83:40:e4:77:42:ef:ef:9f:dd:cb:97:f4:
bd:4a:a5:53:50:58:42:ef:90:51:28:25:6b:75:9a:ad:10:02:
04:ce:06:4f:0e:25:de:63:d6:53:81:ba:1d:f1:ed:e7:0d:60:
2e:76:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:29 2026 by rpki-client