Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
File: 6LhaxbiTYSA3SsE_-aPGJZO7su8.mft (raw, json)
Hash identifier: d3nNRGzhacG57chSZx5CSYiybbCcHrBxwY6GbBoCKEU=
Subject key identifier: DF:0F:BC:6C:FF:16:5C:7F:E4:A4:4C:FD:0A:89:78:6E:B8:46:AE:F4
Authority key identifier: E8:B8:5A:C5:B8:93:61:20:37:4A:C1:3F:F9:A3:C6:25:93:BB:B2:EF
Certificate issuer: /CN=e8b85ac5b8936120374ac13ff9a3c62593bbb2ef
Certificate serial: 019D3865701640FF42C10ED7EEDA29A1DFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LhaxbiTYSA3SsE_-aPGJZO7su8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
Manifest number: 02
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: 6LhaxbiTYSA3SsE_-aPGJZO7su8.crl (hash: UilXhFNv9AujCtShqpuZxXE2XjaCA2O0EA/w5Tkb0Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LhaxbiTYSA3SsE_-aPGJZO7su8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:70:16:40:ff:42:c1:0e:d7:ee:da:29:a1:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b85ac5b8936120374ac13ff9a3c62593bbb2ef
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=df0fbc6cff165c7fe4a44cfd0a89786eb846aef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:b3:09:4e:1a:fa:cd:03:91:6a:41:43:5d:
a7:30:c8:03:c5:95:29:f6:2a:9c:a5:ff:4f:74:7e:
54:6a:06:e7:a0:b9:2e:94:75:6f:4d:2d:de:85:cf:
e7:d6:69:9a:2f:fd:58:89:2e:c5:29:8e:93:c4:db:
1a:22:1f:aa:08:e0:90:df:cb:d5:93:4e:d6:49:45:
0d:40:90:02:5d:06:43:d0:5e:6d:db:e5:3c:6f:63:
51:cf:2d:8c:b4:5a:fd:84:04:86:91:49:7a:3e:57:
d1:10:6f:27:8e:73:da:9e:c7:75:cb:05:5b:69:d2:
cc:e6:c2:7b:41:78:09:58:f5:45:89:47:81:44:84:
d9:f2:de:7f:54:ae:75:c7:02:4f:7d:df:41:2b:ff:
f4:2a:71:5e:95:42:26:35:1a:0c:4f:ab:63:69:3f:
97:df:36:b5:e3:7d:34:40:e4:39:55:73:97:96:c9:
39:3f:fd:21:db:ed:99:2b:09:f5:5f:57:9e:a8:d3:
b0:9d:27:78:f1:c0:d6:2d:fb:8a:e2:7b:10:58:86:
61:36:5e:3e:0d:1a:43:ea:fc:8e:3b:04:09:83:87:
84:40:e6:b2:88:5a:96:07:6a:61:2b:6a:aa:76:aa:
3a:2d:7e:ff:7f:7d:77:8a:ec:f8:6a:29:50:97:25:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:BC:6C:FF:16:5C:7F:E4:A4:4C:FD:0A:89:78:6E:B8:46:AE:F4
X509v3 Authority Key Identifier:
keyid:E8:B8:5A:C5:B8:93:61:20:37:4A:C1:3F:F9:A3:C6:25:93:BB:B2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LhaxbiTYSA3SsE_-aPGJZO7su8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/83c515-2e7a-40d8-abf5-b94d1b192187/1/6LhaxbiTYSA3SsE_-aPGJZO7su8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:c8:32:89:eb:f7:2f:dc:6c:b1:cb:b9:77:3d:36:47:f3:
e4:25:ee:da:f2:fa:66:09:f1:4d:80:4f:f8:dc:45:e1:19:b9:
ed:41:f8:3b:7e:b7:2e:6d:e6:7a:e8:53:59:6d:59:86:72:04:
7e:d1:4f:93:77:56:45:c7:f3:82:d9:d5:48:1d:34:cb:2e:a4:
c7:0b:9c:04:65:bf:1c:4f:25:8f:1e:b9:76:02:88:4b:11:d0:
fb:fd:5e:b3:f5:db:63:8f:3b:f4:00:4b:d0:4d:ce:80:57:d6:
03:d5:bb:29:b1:dd:23:db:8f:ee:c0:43:cf:bb:94:b5:cd:1c:
a1:fe:61:7a:cc:78:17:bd:30:05:0d:db:40:e7:d4:de:74:f3:
41:14:a3:c2:cf:49:31:2b:b2:a2:35:ee:02:88:ad:38:b3:fa:
c2:cd:ec:1a:c3:58:9d:f4:1a:41:21:87:63:18:50:a0:73:b6:
35:69:f5:33:71:90:42:a5:25:e1:12:13:06:31:27:c8:22:4a:
cc:f3:e1:2d:91:2d:af:6e:1c:3d:6b:72:4f:17:e0:41:49:44:
b5:ac:61:45:4e:8b:a1:f1:de:4d:1b:31:4e:cc:67:93:3b:e5:
2a:e6:0e:be:f8:81:25:cb:b4:0a:4d:21:04:a5:94:5a:21:d6:
ab:f2:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:58 2026 by rpki-client