Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: 35Q0h/rV8G46VRAHJH1LyCsO5A3m8rH6Z5TOTdjtjb4=
Subject key identifier: EC:EE:07:A3:20:2A:9C:4D:50:F4:6B:01:42:2A:D0:0C:6D:E7:1C:00
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019D262899F017BCF41CB332F01455D79EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 3D
Signing time: Wed 25 Mar 2026 18:01:28 +0000
Manifest this update: Wed 25 Mar 2026 18:01:28 +0000
Manifest next update: Thu 26 Mar 2026 18:01:28 +0000
Files and hashes: 1: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: LyCXkPCz4CKQuuddH126pv6xfyfEODnVDRsqT0k+uS4=)
2: k8zQtdqeD4eCbj4bxGVWhtUSVqQ.roa (hash: mGgxLJKpdU4bJS/C0UsU5pVevvLL/1XTeMzy2EPtfmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:99:f0:17:bc:f4:1c:b3:32:f0:14:55:d7:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Mar 25 18:01:28 2026 GMT
Not After : Mar 26 18:01:28 2026 GMT
Subject: CN=ecee07a3202a9c4d50f46b01422ad00c6de71c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:56:48:74:5d:6b:13:9d:92:bb:e6:79:5c:
86:30:7a:39:23:0a:1f:b6:52:1d:19:9f:d3:ad:b4:
41:98:87:c6:5c:bc:6a:3f:d7:3c:3a:3d:c0:8b:d0:
e5:ab:11:4a:c7:57:17:7d:10:b1:60:a8:3d:20:b8:
d3:cc:a9:83:e5:98:c6:a4:00:84:e5:e0:e0:97:d0:
85:62:6f:7b:83:2f:19:dc:e4:3a:d8:8a:7a:a3:2d:
d6:7c:0f:35:f2:03:ee:4e:bd:4c:9a:ad:e9:d1:ca:
70:a8:59:67:5c:f4:66:4f:21:57:c7:63:16:91:d6:
89:c0:62:c4:77:cb:ed:cc:83:10:27:9a:dc:21:46:
8e:73:b4:37:fb:c5:17:d3:8b:6f:e1:7c:92:c1:ba:
e8:bf:a1:56:3e:97:21:67:f3:9f:80:01:0f:fa:b8:
a7:85:57:7f:d5:5f:04:0b:50:2d:25:e1:8f:56:d0:
79:aa:a9:e1:ea:a4:6c:6e:cc:af:64:b8:b5:ff:53:
2c:7d:40:df:5d:33:8a:49:c9:d4:1e:fc:27:c1:25:
68:1c:a7:0b:fe:7f:1c:6c:f1:d0:bc:8c:17:ae:6a:
f3:3d:89:e1:c1:ef:6e:96:7d:aa:c8:98:f3:5b:67:
72:e0:1c:ec:60:cd:82:07:ea:7d:3e:ef:e1:b4:42:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:07:A3:20:2A:9C:4D:50:F4:6B:01:42:2A:D0:0C:6D:E7:1C:00
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:1d:26:d5:8d:42:dc:6a:b2:10:35:90:c0:b7:04:7b:4d:
12:f1:17:73:49:bf:90:a5:1a:76:15:ea:04:88:08:e9:86:21:
9f:7f:78:12:b3:80:b1:d9:1f:60:03:1c:54:a4:36:be:2b:92:
d4:99:73:3e:9e:7b:28:8c:40:f8:19:22:61:77:9e:47:36:55:
25:a8:72:e0:23:39:5d:61:c5:8a:92:a4:4b:84:45:f7:a4:f7:
74:88:26:60:69:32:25:6f:a8:dd:8a:9b:65:4d:33:64:d7:0d:
a2:b6:e1:f0:fc:b8:32:9d:7a:d0:d9:5d:f8:57:67:e2:d3:75:
36:cf:b1:f8:e2:84:38:a0:92:2c:39:8e:63:b5:81:76:28:f1:
87:4e:e6:28:83:57:df:7d:8c:a6:48:4b:2d:2b:14:5a:3d:bb:
22:15:2a:e2:2f:56:5e:13:71:42:30:e2:89:2a:95:5d:21:3d:
b8:44:16:6e:16:f5:61:48:16:a4:0d:52:24:5a:3e:07:5b:52:
c4:97:a3:54:47:64:94:9d:22:38:b2:98:1f:3a:56:5a:76:aa:
3d:ae:54:4d:e1:21:a2:10:23:7c:35:4a:9f:21:2a:8d:67:e5:
e7:0d:7a:7c:fb:be:ef:07:64:d3:de:f0:26:24:a2:60:f5:e8:
0c:01:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:54 2026 by rpki-client