Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: DWROqPRvXBTJk/Kg3Px0bmNgkjC7BmnBANd7TyHVCCA=
Subject key identifier: F1:79:FC:5E:85:EB:F1:E1:B3:CA:65:B2:6A:20:F4:FA:3F:60:8F:2A
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019D3940A11D789396DB84C37890175A089D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: xSYlFr6usilF44TmpI+wUqrinaVh9gWeD0Kkj8mzdwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a1:1d:78:93:96:db:84:c3:78:90:17:5a:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=f179fc5e85ebf1e1b3ca65b26a20f4fa3f608f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:18:43:d3:4e:65:04:8c:f3:38:43:18:7d:
23:bd:1f:96:d6:a2:1d:df:7d:6b:4c:5f:3c:01:94:
c6:f1:c7:50:91:78:a9:95:c9:6c:f7:82:d4:94:0a:
ea:89:93:e1:29:aa:c0:e2:59:17:93:75:8a:c6:00:
c8:77:0f:9f:e5:e5:4e:1e:78:8a:c8:61:03:01:96:
fb:e1:62:b4:98:96:93:6c:2f:e4:67:54:96:81:a5:
c6:9b:55:f6:5e:b7:73:09:03:ce:6b:13:92:db:90:
48:50:9d:73:98:3e:fe:b3:d2:88:5c:09:e4:32:21:
90:32:9b:84:78:bf:1c:0d:12:9c:32:e3:fb:42:56:
fa:87:a2:af:17:d0:89:78:f6:9d:a0:9e:1d:e1:5e:
af:60:36:15:5e:db:41:45:ea:64:33:28:2d:a2:9a:
75:4e:91:ee:85:22:15:e4:52:61:13:a7:1b:e5:89:
94:9c:a6:a9:62:f0:a3:0c:35:55:a0:58:95:84:ee:
ba:ae:a4:20:bf:e3:8a:56:e3:35:74:8c:44:5b:3d:
9f:e5:8a:ff:0b:15:aa:79:1f:cd:59:06:fa:4f:d9:
58:ba:ec:5d:cf:a2:98:69:9c:93:6c:6d:09:35:11:
fc:a9:46:cd:dc:82:1f:b0:ba:ce:cf:32:c2:76:be:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:FC:5E:85:EB:F1:E1:B3:CA:65:B2:6A:20:F4:FA:3F:60:8F:2A
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:fb:0c:40:2d:34:44:75:23:10:ff:3f:f2:1e:55:c8:b8:
48:27:ea:c9:79:c9:21:4a:03:1d:df:03:08:ae:47:14:ac:09:
53:97:b8:3c:ab:5e:2a:b1:86:5d:f6:26:f9:2d:d5:48:8f:4f:
06:14:15:b3:02:b7:19:83:0d:9f:cd:d9:eb:30:2d:91:11:05:
37:19:4e:89:a7:99:73:f5:43:3d:32:ea:dc:db:b6:60:c3:bd:
05:36:e8:4d:e0:d2:3e:8e:3f:45:e3:48:77:bd:4b:ab:13:6c:
70:bc:fb:da:40:45:1c:91:10:82:c1:10:08:ab:d5:b3:e1:7a:
fc:7c:26:1b:83:ae:2a:6b:31:8a:b6:8d:61:7e:3e:f2:7f:17:
b0:06:e4:b4:fe:cc:61:a7:74:98:3b:5b:f4:99:7a:bd:e8:03:
de:27:95:9c:3d:9b:cd:bb:a3:b5:2b:5b:32:c3:3d:40:d3:11:
01:e0:41:a4:b8:9f:82:61:a2:94:77:53:a4:8e:04:79:00:bc:
d5:ab:09:39:38:a0:e1:f5:60:bb:57:f2:86:6f:6c:a5:77:59:
bf:94:d3:1c:36:e1:bb:8b:df:cc:e3:a8:b2:ed:96:9c:06:d3:
47:df:05:fd:93:41:d3:ab:7f:1c:3c:1d:eb:21:2e:95:8b:9d:
1d:59:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:01 2026 by rpki-client