Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json)
Hash identifier: 4NzbNgUYqGLOMmRrdXjP0We2wC+KiLm66M0BxQlMqUw=
Subject key identifier: F5:90:0E:57:CE:65:BE:7E:B9:FD:6B:76:94:E0:4C:D6:E1:7C:9D:37
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial: 019D371B5D0C938BE6748DBA1357BED5B0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
Manifest number: 11D8
Signing time: Sun 29 Mar 2026 01:00:33 +0000
Manifest this update: Sun 29 Mar 2026 01:00:33 +0000
Manifest next update: Mon 30 Mar 2026 01:00:33 +0000
Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: kjzPGhlAqBtcC3rEz9/yHeaEFJmmGQoWfhMlJPSyyY0=)
2: vHb2PXbLOQDiEgmgNVeM25O_uYw.roa (hash: A0zzK6+DweI9ov6X0YBv5MoDDd8w4Zw2H0qKl9mjATM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5d:0c:93:8b:e6:74:8d:ba:13:57:be:d5:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
Validity
Not Before: Mar 29 01:00:33 2026 GMT
Not After : Mar 30 01:00:33 2026 GMT
Subject: CN=f5900e57ce65be7eb9fd6b7694e04cd6e17c9d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:30:53:f7:54:17:e3:d5:7e:34:ea:e6:f7:
c5:26:04:e5:41:61:09:3a:17:e0:ec:c6:96:61:89:
69:bd:46:7a:df:1e:ab:b5:b9:1c:af:ff:20:5f:7f:
12:b9:9a:50:d3:a3:6b:24:7e:70:ff:e8:68:f9:5e:
30:45:aa:32:09:ab:48:cc:a0:02:73:3a:dd:d3:27:
b9:8a:c5:f8:a1:6e:43:c3:ff:1d:62:72:ea:b6:b0:
be:6c:33:41:de:5d:1d:20:c8:1c:0f:d1:93:be:28:
56:d9:45:34:80:4d:cc:e8:9e:da:de:3b:eb:0c:48:
20:c4:28:0f:42:b9:fd:5b:73:51:d1:cc:ad:86:2f:
a4:72:e1:40:ae:db:2e:63:c7:4a:1c:c3:3c:cb:cc:
c7:44:b6:b7:6f:a6:22:21:fa:e3:27:b0:a4:5d:a9:
e7:47:65:16:84:4f:09:60:b0:e4:68:77:77:c8:ac:
91:f8:60:1b:3f:0f:56:a2:e5:40:e4:8f:a4:d7:f8:
97:66:2f:13:78:fc:54:46:1a:03:38:66:22:f9:51:
f2:81:f8:da:e3:02:1b:61:85:11:8e:29:f5:c9:d3:
34:6d:6c:4a:11:cb:88:a9:0e:89:4d:9c:97:6c:9d:
27:92:73:c5:e8:0a:4a:9c:6c:e8:7b:49:8e:ee:90:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:0E:57:CE:65:BE:7E:B9:FD:6B:76:94:E0:4C:D6:E1:7C:9D:37
X509v3 Authority Key Identifier:
keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:bb:1b:90:bc:61:01:ed:0c:a4:21:55:59:d8:18:c4:ca:
9c:96:c4:60:40:8e:c6:93:76:5e:9c:8f:95:7f:29:1c:fa:ab:
13:84:12:4d:61:64:c4:67:db:f4:7c:20:23:95:18:16:9f:30:
5e:f6:75:38:28:f0:ff:64:9c:f0:a2:ea:f6:c6:30:95:db:c9:
1c:b0:ae:b1:3b:9f:30:d5:b7:19:0d:c1:09:79:f7:ff:d1:1e:
ed:93:e4:c3:11:d7:29:c6:05:f7:ea:57:65:5d:f7:a1:f0:e0:
53:95:85:48:ea:e6:e9:52:45:63:ed:82:ae:7a:fa:71:cd:6b:
d8:d8:e3:f5:35:dd:40:9b:d4:19:c6:58:2d:47:a0:06:86:cf:
8b:5a:ae:31:af:b3:69:45:c6:28:75:b4:dd:44:a1:0b:fc:0a:
dc:cd:da:67:d0:55:55:4b:24:46:87:42:2c:a5:a6:36:12:56:
2c:95:7b:46:c4:f4:6b:59:1e:a2:a8:14:df:96:fb:fa:b3:20:
70:b9:3e:24:51:bf:30:d2:3b:7e:7c:59:c2:8f:c3:a8:9d:ef:
34:ed:2a:e3:23:f1:56:aa:21:ac:b1:00:b5:de:82:1b:71:bc:
9b:ba:ca:73:e5:56:4a:5b:b3:e9:9d:91:8d:87:2a:59:c3:d9:
f3:3a:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:53 2026 by rpki-client