Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: QNcZrF6dBOxH6RO8Sz0j+qRstCLhVQL+xWtTOhWZwS8=
Subject key identifier: FD:8B:DF:58:5F:7E:8C:35:9C:C9:7D:7A:8C:2C:E7:68:07:A5:E0:58
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 019D3753220EFD43C9A7585BBDC558C570E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 0643
Signing time: Sun 29 Mar 2026 02:01:28 +0000
Manifest this update: Sun 29 Mar 2026 02:01:28 +0000
Manifest next update: Mon 30 Mar 2026 02:01:28 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: 6Xp9mI65YsVmpqJm7Wk0yP+rZD8N7ud0yeTtEb6MrQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:22:0e:fd:43:c9:a7:58:5b:bd:c5:58:c5:70:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Mar 29 02:01:28 2026 GMT
Not After : Mar 30 02:01:28 2026 GMT
Subject: CN=fd8bdf585f7e8c359cc97d7a8c2ce76807a5e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:b9:a4:b9:34:1b:73:6a:33:ef:e7:31:b6:
9a:fa:2a:a4:f9:a0:d5:2c:ea:70:21:ba:65:67:c5:
64:37:ff:c3:a3:8d:43:49:29:97:a7:f0:b6:40:a3:
4b:0d:b5:63:19:01:34:c2:ae:0a:d3:13:d7:89:67:
d6:d2:a4:78:08:ea:c0:df:4d:7c:3f:ec:c3:d7:98:
2a:36:7a:5a:34:1b:ad:bc:25:c3:9b:0e:3e:4e:2a:
af:03:61:15:a9:12:51:8b:f5:d9:1b:fe:fa:25:2a:
aa:1d:b0:dd:de:75:0c:05:08:53:05:6f:5d:df:d2:
fb:9c:8b:d5:53:c9:3c:54:2a:e5:d6:90:d0:4f:28:
84:39:5c:4e:ac:e6:f8:0d:d8:72:9c:7e:02:45:a6:
b0:b7:4d:b8:14:85:7d:c1:a8:0e:37:1f:7e:86:c8:
41:ec:1f:98:a7:83:ba:9b:f9:78:f2:e6:7b:88:52:
64:f4:09:d8:0f:b8:f5:b9:c0:d5:6f:95:0d:5f:3c:
b5:bb:30:92:c3:26:e0:ff:9d:6c:df:d6:d2:e4:d1:
be:37:c5:f3:a0:83:c2:12:dd:a9:68:ad:79:13:da:
bd:57:d1:06:15:14:b9:51:22:46:ea:d0:b9:e2:fb:
9b:e6:72:1a:18:f8:98:00:20:95:06:89:f7:88:36:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8B:DF:58:5F:7E:8C:35:9C:C9:7D:7A:8C:2C:E7:68:07:A5:E0:58
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d5:22:f0:c2:5e:e6:41:79:09:9c:a4:5a:36:34:6f:3b:08:
ff:24:c4:72:79:51:cf:b3:a3:49:43:a9:ce:91:1a:10:05:aa:
4c:13:e1:26:91:1a:de:52:49:94:b8:3e:21:03:96:b4:ca:be:
4f:52:4d:1e:cf:e5:39:e7:ff:b4:dc:c6:dd:7e:8b:19:3f:17:
f2:6a:c5:11:8d:d4:c8:5f:01:d2:6b:56:45:47:a6:75:c1:ba:
70:8b:b5:c2:ac:24:b0:31:b0:89:61:09:b9:04:cd:ac:1a:03:
1f:83:36:41:33:0e:a8:72:21:3f:d0:10:70:bd:8b:1f:8a:2f:
8c:de:6e:30:49:58:90:ed:4b:aa:87:40:f1:f2:f8:1b:e5:60:
f9:49:c4:63:55:02:47:51:e6:5e:78:b1:9e:5e:e3:f2:db:c0:
3e:1b:26:8d:10:8d:5a:ed:94:35:7f:dc:90:5c:46:04:2c:03:
39:e5:d3:81:c1:10:f7:d4:79:a4:24:60:d9:d3:7a:f8:d5:28:
d8:79:12:b8:8a:24:c7:da:f5:ed:c0:68:0c:fd:89:7b:36:2e:
f8:90:a6:1c:7a:58:24:ec:35:03:e4:50:30:37:08:e6:ed:01:
ec:4b:c9:2a:19:85:0b:6b:d3:0f:37:10:31:2a:60:19:56:00:
01:c4:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:55 2026 by rpki-client