
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File: 6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier: Sin9Hohicz8kFnf3zn+T6les2NlbxrPCQeCu6zmCHBY=
Subject key identifier: DB:8C:DF:D1:A8:E5:23:09:80:FA:CC:CD:AC:09:B6:3C:4F:FA:C3:E0
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer: /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial: 019D390A6A0A402074B498CBC40B15184C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 10:01:16 +0000
Manifest this update: Sun 29 Mar 2026 10:01:16 +0000
Manifest next update: Mon 30 Mar 2026 10:01:16 +0000
Files and hashes: 1: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: c+wGoc8mzGAIARVyniRcXIIrhYr2rS7zZzDYVj5g9u8=)
2: Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa (hash: a/DGW0i/X4m/ikPJX+oJ6qAZ0udts75Z/BZGzVsUAJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:6a:0a:40:20:74:b4:98:cb:c4:0b:15:18:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Validity
Not Before: Mar 29 10:01:16 2026 GMT
Not After : Mar 30 10:01:16 2026 GMT
Subject: CN=db8cdfd1a8e5230980facccdac09b63c4ffac3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:24:5a:aa:7f:4e:f4:b1:70:27:ba:6a:0f:
e0:c5:4a:e1:d6:90:a9:a5:c6:92:b6:99:2b:79:ff:
00:2c:72:97:66:ed:ec:a0:39:e1:61:f3:0f:09:09:
26:c6:3c:f7:98:f2:e8:61:43:b7:93:97:ea:1f:bd:
6c:3d:a5:2f:c6:f4:dd:29:e2:88:bf:6c:2e:65:8a:
0a:f1:b6:27:f8:fd:6d:79:cd:a6:8e:d6:be:fc:52:
f8:f5:4f:6f:d6:e5:0b:64:23:d1:39:e2:72:62:25:
62:b3:a9:e6:16:98:a7:1d:20:b0:8c:40:ba:77:99:
e8:93:a7:f0:7a:cd:da:a4:4a:72:c9:f1:f4:0a:7f:
ec:04:4e:03:fe:39:38:d6:ec:13:98:6c:c6:c8:ae:
fc:eb:33:b7:d8:f8:f8:fa:a1:e7:bb:85:f5:10:76:
66:35:3b:e2:a5:53:b9:fe:ee:f7:66:44:ba:a7:b7:
84:81:1d:ba:a1:9b:8d:88:02:53:6d:bc:02:26:52:
ac:5b:58:18:c8:32:28:46:29:53:ad:63:38:22:72:
9e:9d:e4:28:36:5c:e9:b5:ab:7c:ce:44:85:64:b3:
9f:66:80:21:c3:58:2b:49:6f:75:77:c5:9e:62:01:
2f:86:3c:2f:bc:99:16:be:f8:3d:6a:7f:f5:72:af:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:DF:D1:A8:E5:23:09:80:FA:CC:CD:AC:09:B6:3C:4F:FA:C3:E0
X509v3 Authority Key Identifier:
keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:8e:c5:fe:96:27:ed:62:b6:d3:4f:da:9b:11:f8:35:ef:
43:27:00:00:64:92:47:a9:67:47:27:51:8a:f6:d0:25:78:f7:
46:79:81:54:dc:b6:6b:2a:28:f1:6e:59:42:22:56:ae:5f:b2:
51:7c:e9:a9:c1:1c:91:e7:5b:06:56:4a:64:ca:13:cd:b4:d5:
58:b5:65:36:71:e1:77:92:f0:75:11:88:57:ac:a0:3b:70:24:
01:56:26:f4:f8:0b:e7:57:14:9d:39:04:1f:fb:09:b3:20:08:
f6:cb:5a:42:7b:82:d5:ed:44:94:2e:1d:0d:95:1a:b7:81:b0:
8b:b3:dd:ee:76:77:a2:a7:15:e2:bc:1c:1d:eb:b0:14:e5:46:
28:f0:86:00:8d:0c:29:58:b5:e2:d3:4d:4a:c4:6f:e6:34:63:
d8:84:bb:16:e4:04:31:3d:eb:cc:65:18:10:1a:d9:21:c2:89:
94:1d:50:aa:84:ce:28:21:dc:39:d2:8b:59:9b:48:3e:8a:8e:
9d:25:f6:1a:b1:7e:8b:9d:6b:d2:6a:1d:15:5d:45:08:37:47:
4d:12:72:91:0b:29:5e:e1:8d:d4:26:63:44:91:f6:dd:d6:ac:
1b:78:4d:aa:6c:73:d4:3b:0d:5a:52:2a:fb:79:44:21:5f:2e:
79:cf:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:48 2026 by rpki-client