Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
File: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json)
Hash identifier: a+sejVgTy1cupxc2BGj1b96Cewe2FHtF+VkbZqxXMvk=
Subject key identifier: 60:84:E5:B3:51:80:E7:36:96:B2:42:6B:61:6F:B0:CA:6D:2D:52:43
Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
Certificate issuer: /CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Certificate serial: 019D38D3917A85EB9068C324BDBBABD40E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
Manifest number: 03B6
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: x2ZUJ5HUaGchJv6Oabvr7C5w+SqB9RBDHv9TrwK3jGo=)
2: AUFsMm-NGs1yxNBgw6rr1pZcQ-c.roa (hash: 4iBvcmN7U/XeqdrUYWh/5pPTsC0ExDr/UBaq8SA+90o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:91:7a:85:eb:90:68:c3:24:bd:bb:ab:d4:0e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=6084e5b35180e73696b2426b616fb0ca6d2d5243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:c3:b1:ea:c2:17:3c:6a:89:2d:2a:6a:c3:
fd:47:8d:59:d4:e9:9e:06:98:f7:31:fa:41:42:65:
7f:61:11:fe:8d:3a:1f:2d:d3:59:7c:f7:2b:6e:99:
e1:ac:7f:47:da:c8:32:00:34:1e:4c:50:fb:10:db:
6e:cb:f1:61:cb:ba:80:ca:bf:fa:9b:e9:88:ad:d7:
93:73:72:fb:a7:16:e8:d3:35:6e:b0:f4:3c:19:35:
cc:27:68:0e:37:fa:ae:dc:70:c6:13:a5:e3:4a:2e:
b8:49:02:1c:63:b5:e0:b2:61:64:b7:2e:e4:cb:49:
f5:59:bc:c9:53:17:ed:51:38:e4:14:9e:fe:37:6e:
6a:87:fd:7f:ed:93:e2:34:82:7b:c8:74:97:70:00:
83:c2:f9:0d:93:ff:76:48:58:1d:5a:d1:f3:09:f8:
84:30:cf:71:0e:28:58:72:6f:b0:1c:e2:84:f5:f5:
96:32:1d:86:8a:e1:07:c9:7a:36:51:af:3d:5a:ec:
d0:5e:35:d4:6f:90:64:b9:3b:75:23:30:e3:0e:50:
3e:eb:9d:bb:63:3a:01:27:24:3a:64:bd:e8:20:eb:
c2:33:4f:6c:eb:70:16:52:4a:66:23:14:69:55:60:
f2:eb:bd:a3:82:8f:e8:c3:57:19:08:26:5e:b0:41:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:84:E5:B3:51:80:E7:36:96:B2:42:6B:61:6F:B0:CA:6D:2D:52:43
X509v3 Authority Key Identifier:
keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:95:30:f7:48:b4:67:e0:0a:70:f0:35:73:7f:91:65:7f:00:
63:ed:58:6c:d5:09:45:60:83:c1:bd:50:ef:ce:b6:db:96:7c:
ce:dc:c7:f1:db:41:36:f8:d6:a4:57:cc:09:f7:f6:fa:a3:ea:
91:0d:6d:82:88:d6:c4:bc:ae:8a:1b:0f:51:21:4e:70:4b:06:
0e:b4:6f:ce:2a:f2:dd:3f:8a:27:2b:5b:82:3c:98:85:aa:f9:
11:1b:0b:21:a1:3e:7b:16:05:30:26:11:fb:01:67:47:bb:56:
37:46:b9:24:15:f9:e8:bd:70:f4:8d:86:d2:2b:e5:b3:31:13:
16:fe:d4:bb:d0:14:da:e5:81:27:e2:99:54:8b:74:fe:6e:2e:
cc:b6:df:e0:11:00:cc:7d:ba:7a:00:cb:78:40:30:cd:16:0e:
e2:0f:be:f7:f6:46:d8:d9:16:15:84:63:3a:c6:8a:f9:5c:e7:
6b:75:74:62:ca:e8:06:3d:e3:d3:c9:5c:3c:c9:da:16:45:49:
95:a6:e8:4d:9b:b8:87:e3:0e:fd:ae:4d:79:63:d1:10:6a:03:
fd:ae:c8:1d:cb:f2:2d:4a:a4:b0:87:ef:bd:6d:9e:67:e6:85:
11:58:d0:f7:d6:5a:ce:1d:26:03:a8:d4:95:f9:d0:22:34:e9:
54:f0:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:19 2026 by rpki-client