Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier: RNyKRHiEkfcSxnx/0tuUJIJTtqfuNPeze1chnNMkW40=
Subject key identifier: A0:0D:0E:20:42:36:E5:02:1C:C0:3B:76:92:15:4E:C3:EE:9E:DC:6B
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial: 019D2A3C4AED7ED72CB0864F9628BB7DEA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number: 05DB
Signing time: Thu 26 Mar 2026 13:01:27 +0000
Manifest this update: Thu 26 Mar 2026 13:01:27 +0000
Manifest next update: Fri 27 Mar 2026 13:01:27 +0000
Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: nxpcP9cehR4GzU6z6BgdOMeK7PpiPI6MArddIAos+XA=)
2: oGx7JfYX53D__g9_5hLujNutUzE.roa (hash: lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4a:ed:7e:d7:2c:b0:86:4f:96:28:bb:7d:ea:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
Validity
Not Before: Mar 26 13:01:27 2026 GMT
Not After : Mar 27 13:01:27 2026 GMT
Subject: CN=a00d0e204236e5021cc03b7692154ec3ee9edc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:3e:d4:d7:fa:59:73:c5:20:87:6a:98:ad:
eb:7c:fd:b1:fc:a5:bc:47:1f:71:2a:38:34:1d:09:
e0:9b:fd:d6:0b:53:d1:12:e5:9c:87:6c:1d:03:42:
c2:2e:e6:af:45:d3:b0:32:b7:1f:c3:a0:f2:bc:af:
c3:fa:6b:61:87:8f:0f:4e:ba:04:a8:2e:df:2f:11:
9a:79:34:bb:0d:64:2b:d1:e5:00:e3:2b:5a:19:c6:
f8:0d:e7:05:7c:8d:78:0b:b0:22:d6:59:f4:98:fc:
9a:2c:00:98:e6:15:87:95:b1:71:95:be:02:41:3b:
9e:d4:3f:2c:a1:2c:ca:45:3b:ab:06:0c:50:48:9a:
07:8a:cd:62:88:58:c7:d1:9e:75:7b:8c:1c:4f:27:
8b:e0:87:66:7e:a4:bd:90:e9:c9:d5:cc:80:09:fd:
6d:3f:bf:5d:5f:86:e2:29:28:40:b0:2f:bb:70:2a:
9a:d0:1b:da:fb:b6:bb:52:82:68:55:16:bc:03:ed:
bd:a3:c0:f0:0b:47:74:fc:73:82:60:45:17:8b:dd:
2c:a6:b5:88:ce:66:65:8c:cd:d6:76:c4:e4:e7:b6:
d1:58:22:82:b2:ec:5a:a4:17:4e:d9:5d:63:ca:a5:
82:46:a3:3d:5a:27:30:95:ae:7a:a8:d7:fc:09:e1:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:0E:20:42:36:E5:02:1C:C0:3B:76:92:15:4E:C3:EE:9E:DC:6B
X509v3 Authority Key Identifier:
keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7f:1b:02:67:d0:67:ad:16:fc:c7:3b:7a:c9:1d:51:38:b4:
ac:6d:8b:68:9f:01:1a:44:a4:b7:65:36:d8:04:b7:92:9c:4a:
37:6e:ec:7a:62:cb:db:99:0f:b8:70:98:13:9b:da:5f:a3:35:
6d:7a:be:3c:a7:d1:a5:0c:9c:35:71:1f:ef:c9:6d:6a:b9:1d:
da:75:0d:bb:56:4b:39:22:dd:48:6e:d4:34:14:da:c7:b8:49:
cb:29:48:7a:79:f3:1a:61:7d:09:18:7d:64:ce:82:a0:b4:d1:
2f:33:6c:b4:ec:be:29:62:e0:df:00:53:09:4d:a9:3e:71:8b:
ce:16:e6:f5:2d:83:79:8e:f1:96:a6:71:e2:ef:3c:b8:26:28:
0b:ea:00:90:c1:d7:49:1b:23:51:56:f3:d5:e8:9e:18:ff:96:
82:fc:cb:64:83:9a:17:da:e9:4f:67:e4:41:0a:ba:bc:1a:19:
d4:73:8c:f0:33:40:5d:c8:4b:da:46:df:2d:45:74:4e:06:62:
30:c2:6e:fd:79:81:ea:aa:67:2d:5e:52:7f:3a:d7:fa:1a:9d:
7c:d6:f8:3b:8e:42:73:da:19:ad:d1:e2:81:4e:42:eb:dd:52:
c2:6f:1b:ab:1b:27:1c:35:3a:ab:72:07:5f:c7:45:f1:fd:d3:
9e:12:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:35 2026 by rpki-client