Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft
File: RTgz11hvD3jiC4BXaXbQm3rZYDE.mft (raw, json)
Hash identifier: X/M06kwkfUdUxIIWheaQX/U757Gs8sKctegAt0O+7RA=
Subject key identifier: 5B:C9:61:8E:A1:F3:33:94:85:14:E4:EF:A0:87:73:5E:F6:83:10:99
Authority key identifier: 45:38:33:D7:58:6F:0F:78:E2:0B:80:57:69:76:D0:9B:7A:D9:60:31
Certificate issuer: /CN=453833d7586f0f78e20b80576976d09b7ad96031
Certificate serial: 019D37F6FF0658A696FEF0232EB360D4ADBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: RTgz11hvD3jiC4BXaXbQm3rZYDE.crl (hash: wmX9pa7gaPC6gbGCHh97GYMABl0qxQzoNa5Q9qdRXlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ff:06:58:a6:96:fe:f0:23:2e:b3:60:d4:ad:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453833d7586f0f78e20b80576976d09b7ad96031
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=5bc9618ea1f333948514e4efa087735ef6831099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:12:27:c6:7f:15:57:7f:89:90:29:12:c5:
ba:aa:cd:57:97:8a:b7:62:9f:fe:42:68:1f:93:ee:
70:e6:73:32:fa:cb:aa:cd:27:2d:19:a7:4c:1c:e0:
c5:53:fc:77:3d:92:62:7d:bb:7a:e6:a2:2d:d3:35:
d5:ac:70:12:b0:85:fa:08:89:e5:b4:4c:4d:cc:18:
1e:3f:2c:8e:94:b0:f4:25:52:b6:91:97:6f:8e:c4:
a4:52:17:7e:cc:9a:cb:54:76:75:fc:71:59:ff:a2:
4e:0a:e8:59:ba:33:a5:ad:0d:c8:91:c6:3b:cb:b2:
7d:24:36:48:13:e0:8c:9f:5c:b6:0b:45:25:ba:ce:
94:c4:17:18:03:00:4a:29:d5:ed:3d:98:69:99:28:
b2:c6:47:77:16:df:40:44:9e:01:40:07:be:b3:03:
42:d2:e1:4c:9b:23:e9:cf:c6:74:45:bd:64:ab:9a:
fa:36:5a:33:7f:26:75:ff:30:e0:88:98:d6:b4:53:
76:ab:99:c6:54:b8:07:2d:69:24:e2:39:c9:95:af:
da:95:a1:bd:c0:cd:18:c9:4f:9a:d3:b5:2b:37:c0:
54:fa:ff:18:35:8c:87:c6:24:53:bc:83:bd:f8:9e:
1d:e1:d2:14:68:08:ec:f3:eb:05:69:d9:1a:db:aa:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C9:61:8E:A1:F3:33:94:85:14:E4:EF:A0:87:73:5E:F6:83:10:99
X509v3 Authority Key Identifier:
keyid:45:38:33:D7:58:6F:0F:78:E2:0B:80:57:69:76:D0:9B:7A:D9:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTgz11hvD3jiC4BXaXbQm3rZYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bafb6d-d875-458a-a20b-25ecacdb1106/1/RTgz11hvD3jiC4BXaXbQm3rZYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:2e:29:6f:58:40:9e:4f:f9:7c:50:4c:ac:a7:bf:8f:47:bb:
06:a4:d8:0d:cf:64:5d:20:cb:ba:28:b8:6c:b6:64:74:49:c9:
4f:89:91:5e:eb:23:7c:62:37:25:15:e7:3c:fd:b0:8d:0b:76:
16:d0:0a:63:c3:ae:dd:87:3f:5e:f9:66:e3:4d:08:67:bb:99:
66:f0:38:6b:51:23:c8:20:f3:14:59:74:59:94:78:ca:84:56:
0b:38:1c:75:4e:15:64:ab:88:76:10:7f:8d:a5:11:3f:fe:00:
e4:06:a9:c8:65:b8:4c:8d:8d:59:4e:e1:e3:7f:11:f9:6c:85:
cc:62:3a:92:07:ec:cb:01:bb:d8:2f:ae:e2:61:9e:e5:a4:c6:
d7:80:dd:d8:b1:bc:3e:49:f2:fc:48:e5:98:67:f9:cd:c1:89:
ba:7a:3f:d6:f4:f7:f7:ac:c0:67:23:fc:0d:a0:fc:28:88:4b:
f8:77:80:bf:a8:b9:f6:47:b2:f0:21:48:86:c9:44:1c:09:7c:
32:c1:6e:a8:d8:05:26:e4:33:53:41:bf:9e:b2:a8:64:52:74:
09:f1:9f:fa:33:d3:34:e7:48:e9:f6:d7:32:9c:75:a5:84:c8:
bf:b9:15:7e:1e:9d:5a:b1:8b:17:4e:9a:0c:0b:65:96:2d:ef:
69:a0:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:32 2026 by rpki-client