Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft (raw, json)
Hash identifier: LXV6pBlRgGhs0R3LA1w2IVLJXO9DvWfa/MpgvBDjUUI=
Subject key identifier: DE:78:F4:BF:FB:A7:F4:7A:77:F0:58:39:3A:75:41:65:75:76:7E:79
Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
Certificate issuer: /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Certificate serial: 019D3977B786F5FFF828B0428C394B86BFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
Manifest number: 01BA
Signing time: Sun 29 Mar 2026 12:00:40 +0000
Manifest this update: Sun 29 Mar 2026 12:00:40 +0000
Manifest next update: Mon 30 Mar 2026 12:00:40 +0000
Files and hashes: 1: k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl (hash: zzLJARYeWno/+iX9kXXWRhXrpldK0AtBUws30od9yaM=)
2: nNA82N_hjVXNM_yczV3h8R-2MFg.roa (hash: O4Af+6D81H3k5D2s05YzXco56fg23wfzXj6Epvc/dd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b7:86:f5:ff:f8:28:b0:42:8c:39:4b:86:bf:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Validity
Not Before: Mar 29 12:00:40 2026 GMT
Not After : Mar 30 12:00:40 2026 GMT
Subject: CN=de78f4bffba7f47a77f058393a75416575767e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:bb:08:de:2a:79:db:91:f7:91:74:02:e0:
1d:9c:be:97:a9:32:54:64:b3:3b:61:2d:50:f3:31:
5e:c7:f2:91:c8:26:00:cb:e4:7d:9d:ad:a0:c7:1d:
15:52:aa:dd:23:58:21:02:e0:52:f1:cf:1b:ca:71:
94:b2:fa:bb:56:5c:4b:fa:8a:84:93:4b:69:30:b2:
41:24:d4:62:cf:23:73:1c:a1:c3:58:a7:8b:31:00:
cc:86:6c:4f:fb:92:b1:27:e5:82:1a:d2:17:ca:3c:
58:d0:81:ce:ec:21:c6:6d:5f:68:38:50:5d:48:a0:
b8:d9:99:1c:62:b5:40:db:b8:fa:d5:3b:cd:24:c3:
c6:d4:cf:bc:8a:d5:d1:3c:93:d6:94:fa:90:2c:a3:
f2:78:d3:12:ab:7f:61:50:b0:bd:3d:ef:a9:3c:a1:
75:04:19:f7:ab:56:50:9e:9d:fb:32:79:fd:73:f1:
6b:cf:ea:8c:a5:20:96:2b:98:6b:57:9e:77:59:e5:
9d:d2:6e:04:a9:ea:4e:9c:87:31:89:24:5c:f1:4e:
17:90:a7:32:15:59:da:fa:9a:3f:27:35:27:77:c0:
6b:82:dd:e3:42:f2:aa:42:c4:ad:78:16:9e:f6:20:
4a:9e:22:d4:fb:18:70:88:65:c4:3d:26:e0:d0:10:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:F4:BF:FB:A7:F4:7A:77:F0:58:39:3A:75:41:65:75:76:7E:79
X509v3 Authority Key Identifier:
keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:79:1a:1e:38:22:45:d1:76:77:e8:65:9b:02:9f:d4:0b:c0:
af:57:d5:1e:79:bb:c3:c4:55:30:1b:5b:4c:bb:1e:a3:cc:a7:
36:ee:35:67:94:8b:18:fd:ef:31:71:a8:b0:70:34:f3:09:f0:
38:60:d6:42:46:43:c8:f3:45:81:6d:cc:01:27:0c:18:49:20:
d6:44:a0:6d:58:0b:d9:d3:cc:04:23:2b:f0:5f:90:fe:ec:ad:
b6:93:9a:15:73:55:3c:ef:7c:c1:25:f9:ca:58:28:b1:69:37:
c2:f2:d7:e8:fc:48:ea:30:c6:e2:a6:a1:b5:c5:49:62:25:95:
54:67:86:4e:a6:79:49:6d:a3:1e:81:f7:6b:95:82:a9:5f:98:
cd:b2:28:98:f5:6b:76:c0:90:6a:a9:86:d5:c5:58:a1:6a:db:
b0:48:97:fe:95:d3:34:bf:ca:89:0d:47:10:fa:fe:3d:db:2a:
c0:f0:f9:51:73:a3:40:46:6e:79:53:da:ba:2f:de:65:6a:fc:
ea:ea:c0:65:50:34:2a:d9:83:70:aa:e2:29:18:db:36:12:23:
74:3a:c4:f3:9b:54:62:f7:b7:39:b2:6d:fd:32:02:df:c1:e2:
3c:70:f4:d1:07:33:fb:a7:8a:74:c1:12:50:12:cf:40:7d:40:
e5:14:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:02 2026 by rpki-client