Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: AmAed099SsYmdDHqPT1l4JKz9juFhhnejeW9OGCRjDM=
Subject key identifier: 32:F9:C5:D5:C4:A8:C1:AF:77:29:2C:7B:09:07:9A:80:2F:A4:DB:17
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 019D2A04CF1CDB79B040C37FBCC0D0151209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: 030E
Signing time: Thu 26 Mar 2026 12:00:51 +0000
Manifest this update: Thu 26 Mar 2026 12:00:51 +0000
Manifest next update: Fri 27 Mar 2026 12:00:51 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: 024w/ZABrKUFey0as2CIHO/zVaqMSk15e4lRdx4nlDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:cf:1c:db:79:b0:40:c3:7f:bc:c0:d0:15:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Mar 26 12:00:51 2026 GMT
Not After : Mar 27 12:00:51 2026 GMT
Subject: CN=32f9c5d5c4a8c1af77292c7b09079a802fa4db17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:ea:0a:8c:cf:30:9e:d3:3d:66:34:e9:96:
a3:3c:c6:3e:09:f0:cf:fb:54:b4:11:26:fc:f6:27:
0b:ef:3c:39:3e:4d:2c:90:79:bf:f0:01:31:6b:b2:
67:53:43:51:98:8c:8a:f6:dc:96:c8:56:09:a5:f4:
fa:f0:47:85:8f:11:18:a6:8d:87:8a:6c:02:fe:32:
35:a0:e2:b9:0c:b9:17:27:03:89:cf:1c:2f:d4:38:
0b:ff:79:c1:bd:a2:a5:79:82:40:cc:68:a4:62:e8:
2d:2d:65:9e:1b:4b:e7:27:51:38:6a:c8:3b:1b:1a:
df:a6:76:b5:6a:26:c6:20:79:2a:47:b6:32:bd:06:
6b:40:4b:bc:11:7c:b7:b9:72:be:b0:ff:d8:57:5c:
e0:d0:7a:7c:2d:8f:5d:0e:74:32:48:31:7b:13:62:
6a:d9:2c:11:b7:d2:e7:58:9f:96:a3:dc:02:e9:5e:
0a:26:d3:a3:8f:67:3b:ad:8c:68:c0:50:a9:93:29:
c4:30:43:cc:5c:4f:2d:a4:c6:99:01:37:0c:ba:12:
16:21:25:30:5e:75:56:dd:09:26:49:6b:c9:16:4a:
99:eb:cd:aa:c0:3a:4c:d8:18:a1:5f:51:f8:e2:75:
de:84:e8:47:13:08:20:07:b0:f9:22:aa:d3:3d:a5:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:C5:D5:C4:A8:C1:AF:77:29:2C:7B:09:07:9A:80:2F:A4:DB:17
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:48:66:5f:90:c3:9a:b8:8c:2c:eb:30:94:64:5f:a2:52:e2:
39:e6:b1:dd:b0:ce:8a:9b:b9:98:d5:55:cc:1d:80:dd:57:f8:
fb:03:06:54:99:64:29:04:a2:6d:e0:f4:d5:6c:bd:96:6e:05:
c7:a7:b3:21:23:37:7d:80:52:05:c6:e6:05:49:4c:bf:c1:78:
f4:78:1c:cd:3d:86:38:54:2d:53:72:a9:e9:6d:50:9f:c1:b3:
14:d2:9f:c9:c9:86:71:27:52:94:57:41:ef:1a:ab:c9:2d:69:
69:07:d2:10:79:36:94:9b:b6:7a:36:60:00:68:ae:62:0c:17:
3b:23:b9:7d:56:12:fe:61:08:a7:d6:f9:27:da:46:9a:5d:a8:
1b:6f:90:ac:dd:2a:bd:02:f9:fe:82:31:1b:ef:cf:72:6d:75:
29:d6:8c:ff:25:f8:42:69:f2:98:8b:14:57:28:25:7c:da:9a:
67:c8:10:f6:6e:10:a0:bd:c5:64:db:d7:25:a3:df:44:45:d3:
26:95:86:64:28:d3:5c:57:48:15:db:31:5a:6e:9f:d2:05:44:
2a:79:b0:19:10:8a:87:2f:e0:8f:02:c1:fe:44:39:3f:73:d2:
65:70:6d:0a:64:c1:51:c4:db:33:27:7e:20:c6:e4:4a:4a:0b:
bb:40:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:00 2026 by rpki-client