Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier: TyArS0gnjmXkxLiklkUiAMQgyvJehCVJ0Sjt1TlYRsI=
Subject key identifier: A4:69:F2:C1:90:C0:AF:03:C4:89:85:8F:4D:3D:8C:3A:A6:89:90:C3
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial: 019D3977D69C68A885FD557A4585E992FDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number: 0BCB
Signing time: Sun 29 Mar 2026 12:00:48 +0000
Manifest this update: Sun 29 Mar 2026 12:00:48 +0000
Manifest next update: Mon 30 Mar 2026 12:00:48 +0000
Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: hlBfS5YJ2vGCnh4on3qg7s7v22upDvbfM7eFEp8hHJw=)
2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d6:9c:68:a8:85:fd:55:7a:45:85:e9:92:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
Validity
Not Before: Mar 29 12:00:48 2026 GMT
Not After : Mar 30 12:00:48 2026 GMT
Subject: CN=a469f2c190c0af03c489858f4d3d8c3aa68990c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:91:3a:91:b7:2d:de:4e:c5:58:39:3e:53:
66:bc:bb:46:bc:06:4d:d2:cd:c2:96:28:38:b4:11:
1e:fd:94:48:a9:13:f8:e1:5f:23:e6:74:11:c9:f1:
30:5d:83:90:4b:f5:e7:7b:c8:3d:d8:d6:88:3a:5a:
f4:33:12:b4:cc:f6:58:4f:2d:ef:58:4a:8b:7a:36:
6a:06:de:45:d7:ed:80:f1:d3:c9:5d:09:ee:6c:3e:
e1:5b:13:9f:11:0e:54:2f:f1:ef:dd:4b:c6:86:96:
1a:fa:ca:a2:96:91:a9:d8:1e:65:40:1d:40:06:3d:
9a:fd:28:58:84:a5:f8:c3:28:e3:f0:f1:44:ba:0a:
10:f2:7f:c1:c7:eb:39:cd:ac:d8:f0:e2:b1:7b:85:
9c:27:a5:ea:88:0b:73:d1:e2:01:95:ca:b7:c8:73:
49:76:d3:8d:18:fd:d3:d2:bd:fb:d0:70:d5:62:9d:
d7:00:47:c5:c0:0d:13:25:73:53:4f:f5:72:49:9e:
4a:20:52:4a:fc:cb:c8:4c:9b:4c:91:42:05:ca:a6:
f5:15:84:27:78:8f:38:70:5d:49:05:5c:37:70:ab:
67:ae:15:e3:4b:1c:f8:dc:21:95:7d:38:bc:45:09:
b3:66:7c:b8:69:fe:55:d4:e6:e3:4f:3d:53:f8:d3:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:69:F2:C1:90:C0:AF:03:C4:89:85:8F:4D:3D:8C:3A:A6:89:90:C3
X509v3 Authority Key Identifier:
keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4d:78:25:5f:bd:3d:d0:9a:e5:e4:b3:ce:b0:c5:fe:7d:ca:
06:69:37:3f:11:b1:a2:94:6e:99:0c:dc:8f:2d:8c:ed:b4:fc:
09:d9:45:90:b5:e5:5a:d7:03:2e:9b:5d:85:aa:62:e8:94:d4:
0c:50:cf:5f:9f:62:3f:bd:7d:6e:48:bd:ea:7b:11:b5:96:0f:
62:7b:96:9d:1a:2b:f8:58:61:7b:31:17:f5:51:29:f9:d7:66:
78:94:91:f0:70:68:92:79:16:a7:1e:24:62:f3:15:a1:14:8d:
ea:62:31:ba:77:87:49:38:92:13:00:27:c4:e1:e6:ce:92:31:
cf:73:8a:99:34:f0:25:33:89:32:73:62:fd:fa:ad:28:52:df:
fb:0d:7e:43:c6:8e:35:2c:46:91:d6:63:10:46:78:99:46:c8:
3b:c2:e5:0f:f9:88:73:70:7d:97:2c:d9:4d:ef:ab:a2:e7:5f:
20:31:82:81:6f:4a:97:b2:14:25:7f:38:dc:b1:3e:69:00:d3:
36:be:17:e2:26:de:f3:31:af:c6:a0:4a:fa:b1:57:2b:e3:05:
92:f2:36:53:18:12:b6:5a:ca:81:69:2a:f5:f1:8d:7a:78:2a:
53:dd:57:05:0d:77:1a:25:ee:23:be:16:9f:ae:e5:f7:ca:b4:
76:45:ca:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:33 2026 by rpki-client