Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: 22t0gFX31d0inKZ17L4DMPy9JXqRP63n0TwaEVr2Yk8=
Subject key identifier: E2:BD:1B:12:34:3A:FA:0E:CE:7F:D0:D2:18:B2:1B:E0:0C:FA:8B:1D
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 019D38D3CABB4F53F297EB6F5BAD3FEE05FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: Us+h9lfunz2jrQ7Ck39JD+Ym657gWldi3re0WpgmaZY=)
2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ca:bb:4f:53:f2:97:eb:6f:5b:ad:3f:ee:05:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=e2bd1b12343afa0ece7fd0d218b21be00cfa8b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:2d:d0:fd:4a:9f:5c:ed:14:b7:51:41:99:
f1:b2:da:2e:5b:bc:a2:eb:23:76:2a:df:15:9f:8c:
5e:dd:c0:79:af:0e:6e:e6:c1:c4:81:50:bf:68:73:
23:3a:cd:0d:74:c2:1e:43:9f:ee:25:49:d5:13:89:
4b:78:f6:8a:e5:b9:48:dd:2d:5e:73:45:e5:45:e5:
ed:c9:2f:94:5b:26:ec:e1:08:77:14:1e:63:ca:84:
db:25:02:96:f7:39:42:33:4a:77:6c:02:63:87:af:
ca:d4:ed:f2:51:ca:4c:8d:b6:ff:21:b1:6d:cf:26:
f2:a3:87:c4:81:a5:b9:af:7c:22:f3:ac:ff:5e:ab:
7c:59:2e:83:5a:9d:bd:85:4e:53:51:5c:96:20:5e:
24:da:ac:6a:0b:57:b3:8a:67:14:8e:a7:d6:a2:71:
31:fb:12:3c:8e:a6:43:83:50:a0:64:f0:6d:d3:28:
f8:15:da:dd:72:fd:03:36:16:0f:54:53:37:7f:6c:
6d:78:26:76:31:44:e2:77:90:f6:68:6d:0f:9a:ca:
18:07:1a:34:33:21:16:f4:24:2c:a9:6a:88:57:86:
32:8b:e3:fa:e6:94:08:8a:3e:92:39:06:e6:94:a3:
fe:85:87:98:ea:7b:e5:8d:4f:c1:b7:9c:d6:f8:a4:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BD:1B:12:34:3A:FA:0E:CE:7F:D0:D2:18:B2:1B:E0:0C:FA:8B:1D
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:33:89:8a:a2:a4:41:96:75:f0:f1:b4:e6:a9:18:2c:dc:b3:
c7:cb:b1:a4:c0:d3:e2:9b:11:75:00:00:80:a7:51:45:12:47:
c2:83:40:5f:3c:a6:06:d2:4f:d2:4e:01:53:9c:80:7d:63:d1:
c2:3f:fb:cc:be:8c:53:00:89:b8:1a:1b:c3:e0:1f:0d:40:48:
19:99:9b:59:08:a5:57:82:10:e1:d9:c8:1f:15:7c:6d:24:ef:
a6:45:a2:d6:f3:f1:7d:7c:b0:54:15:99:a1:1a:21:68:4e:d0:
2b:75:86:a8:e7:79:ac:ae:2b:69:02:d4:67:af:18:cb:dc:34:
0d:0e:c6:cc:b9:aa:29:ac:ee:6b:98:42:ef:c1:1c:58:02:ea:
f2:57:9d:88:7c:5e:6f:c7:81:7f:76:2a:59:32:a3:3d:44:da:
0f:b3:d6:0f:f0:8d:74:05:60:52:b3:9e:f6:0e:37:06:8f:b0:
9c:ec:14:5d:5e:67:86:ed:a7:8e:50:2a:98:cd:ed:6c:b0:8d:
e5:37:12:f2:5d:e0:dd:4e:26:96:60:a4:87:c3:9d:73:25:f6:
18:42:7d:cb:d5:d7:1c:b1:64:24:e7:ce:e7:4b:03:1a:a2:29:
f8:f5:96:01:f3:55:39:27:6f:73:ba:ff:bd:a0:66:e4:44:77:
f0:78:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:55 2026 by rpki-client