Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: QO9beH8cfW9MWNtXyCCNJmDfbr6GB6jRSKm5z6uup8U=
Subject key identifier: C2:D9:79:CC:0D:6D:8A:29:3B:83:19:8F:93:5B:98:C6:C8:4A:5A:D4
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019D371B368C42677FECE89AA201C314DFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (hash: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: QcU+ipg4aWY3qDjrKtvFriZjO/n06nX0rZdvnd39Fdk=)
3: MUlaySuRJAJWjFOIuDQTeuxgbkI.roa (hash: k8la9Hpl6/O/fQnwY4pQN76Y+PJ8sXIpVpbtRiPNQgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:36:8c:42:67:7f:ec:e8:9a:a2:01:c3:14:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=c2d979cc0d6d8a293b83198f935b98c6c84a5ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:4e:b5:9a:89:0d:9d:dd:97:22:64:f9:5f:
71:49:ba:42:00:f4:0b:d4:58:e3:be:4e:6a:d0:e0:
01:ae:a9:6e:e4:6b:19:a4:d6:08:51:95:6f:e4:23:
72:3e:96:a8:4d:55:c1:ae:aa:f9:3a:93:64:80:41:
68:5a:91:e7:23:ed:13:70:5a:64:aa:18:78:6b:bc:
46:4d:46:b6:75:66:4e:6d:5f:25:97:37:c5:09:a1:
00:24:81:70:ed:33:0a:02:32:fc:a5:de:f4:e6:c8:
3b:3f:16:7e:9b:9e:84:77:36:b0:78:4b:70:6a:fd:
7a:86:05:15:73:1e:2d:3e:07:ee:16:32:f2:da:c5:
24:c7:f8:5a:f0:f5:26:36:4d:0e:d7:9a:4b:dd:c1:
62:6e:7a:50:c0:1c:09:12:11:84:03:ab:7d:5b:51:
44:d2:22:35:09:d0:06:2b:07:19:8e:6a:c6:87:7a:
bf:18:ff:f1:7e:20:07:bd:42:3c:6d:a2:08:b2:d0:
13:eb:4c:b6:c9:47:ec:c0:cd:e4:ec:fa:5e:34:1d:
87:8f:72:5a:f1:2d:3a:80:cb:58:90:a1:cd:68:47:
be:6c:fe:cc:05:8f:e9:c7:47:a8:1e:29:d8:14:84:
aa:17:e5:03:6c:69:e3:08:c6:f8:81:23:df:d3:c4:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:79:CC:0D:6D:8A:29:3B:83:19:8F:93:5B:98:C6:C8:4A:5A:D4
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1a:98:a2:46:af:a7:42:14:4a:37:c8:f6:e5:de:e4:0f:e4:
d2:e4:83:17:90:59:9a:6c:2a:cc:f7:18:aa:5f:da:d6:45:77:
3e:7b:8d:68:23:2a:d5:9d:03:59:a7:a7:5b:ff:47:ed:a3:5c:
0d:43:bf:b7:07:22:33:c3:09:ba:97:ad:28:ff:17:38:4a:db:
38:ad:86:72:7b:ea:15:aa:98:0e:53:8d:9a:a5:9c:c6:2d:2c:
66:fa:9b:bd:15:5d:69:7e:8c:00:25:42:27:f3:49:ef:22:ad:
50:f8:e2:49:8d:d0:42:dc:76:cb:24:fd:69:70:5b:a2:f4:16:
99:27:f1:9e:75:2c:eb:ab:8b:86:64:9d:cf:f4:25:0f:84:83:
8f:85:db:22:98:db:f1:6f:41:f3:92:64:2d:57:8e:a9:c5:c3:
37:8c:b5:03:79:19:f4:08:7f:3d:6c:8d:7d:f6:b7:39:19:64:
b8:9c:20:ee:4d:88:b1:39:06:88:fe:34:9b:ec:a0:b2:c8:99:
8e:20:de:b5:2b:0b:ed:c8:ad:69:31:77:1a:a6:4d:76:55:27:
f9:c5:4f:90:d9:d4:4d:41:d8:83:4c:30:cf:a1:3e:28:e3:28:
5e:25:4d:6f:fb:0b:ff:a4:8a:6a:25:2c:b9:be:9b:18:a2:81:
68:48:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:47 2026 by rpki-client