Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: KyCqZqXcKPxRbj5lAcBrz/dzT4Ts0kEc6fgjmDOjT98=
Subject key identifier: 3F:34:17:46:B5:90:FF:1C:BA:AC:7E:CE:8F:D5:1B:33:F9:A5:BB:0D
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019D29CE397A0D39EB90453AB071BF3447C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0B91
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: zMah0KmwZ5TM692uFN8roZkF6OKqliKdqseLrh45Vbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:39:7a:0d:39:eb:90:45:3a:b0:71:bf:34:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=3f341746b590ff1cbaac7ece8fd51b33f9a5bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:bb:f1:9f:24:50:2b:c4:39:f4:04:df:19:
ca:fd:fd:e0:b0:2c:a5:31:46:3d:35:05:d2:1f:d5:
0d:d6:d2:43:95:a3:93:9d:0b:37:e5:3a:b7:36:2b:
d7:e5:7d:55:78:6a:75:de:5a:60:b9:02:aa:e8:02:
c0:22:f5:87:8e:bd:77:28:38:4c:9e:ee:f0:24:ea:
19:0a:ff:dd:9d:98:9b:cd:50:e0:4f:1b:ed:f0:85:
ac:96:cf:62:a9:b7:89:7f:da:07:36:73:6d:cd:17:
0b:96:a7:0b:05:bf:20:d3:bb:db:8c:a6:1a:c8:f8:
49:bd:ca:1b:02:7d:c3:97:dc:05:34:14:31:b2:6b:
75:91:6a:f5:f8:40:a8:61:8b:9f:2a:73:9b:09:73:
96:2a:72:42:90:ce:35:45:a7:81:4f:74:19:55:a7:
07:06:dc:67:d9:0d:8e:7b:d6:a3:26:5e:db:d7:62:
17:2a:51:03:68:f7:cb:85:27:e6:9f:aa:18:a4:b9:
95:3e:4a:fe:b5:09:af:aa:ab:68:79:5e:c7:40:9a:
9f:d9:3a:b6:95:82:b4:82:2d:46:0c:4d:e9:32:9d:
11:d8:65:54:68:f2:47:3c:10:a6:3f:d3:3e:ec:1d:
54:11:66:c1:b4:b5:47:55:21:bd:39:3d:d0:f5:52:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:17:46:B5:90:FF:1C:BA:AC:7E:CE:8F:D5:1B:33:F9:A5:BB:0D
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f6:1a:c7:bc:95:62:a5:55:e8:bb:85:90:7a:10:3f:da:43:
43:bb:b1:d6:69:01:1b:a3:10:59:67:25:0e:c5:9d:0a:a8:73:
ad:ac:66:e8:0e:ae:06:bc:ee:c6:39:99:9d:4b:a8:6e:c9:cb:
09:39:2e:1c:91:1a:a4:6f:06:22:f0:4c:a0:ed:e9:39:66:5a:
78:07:8d:43:03:e4:3a:47:58:87:f3:c9:16:ba:51:19:1d:7a:
9e:dd:8a:c9:f7:c2:96:25:be:e6:0f:6d:b3:c5:80:c0:98:d3:
49:12:2e:70:8a:dc:14:f8:bf:1f:59:94:ac:7b:d1:a8:88:86:
fd:24:a9:9c:c3:24:ac:4e:57:45:b8:6f:7d:bf:42:63:e8:5d:
eb:f9:08:2e:c4:57:fe:ad:50:52:3c:7c:3b:8e:dd:82:17:49:
03:28:73:51:a8:42:aa:b2:d1:a8:0a:57:b8:23:1e:f0:be:62:
bb:54:90:6f:07:29:dd:a9:b6:30:ef:cb:cb:c3:9c:66:11:b6:
af:64:7e:8a:df:47:fa:57:24:4d:31:62:52:79:bd:e1:7c:13:
c6:5f:14:9b:6b:c7:92:60:0f:ad:88:62:fc:48:2d:7b:22:d7:
6d:d3:0f:30:c6:b2:d4:42:52:60:ba:f3:03:ac:a3:fa:57:b7:
90:7c:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:32 2026 by rpki-client