Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: foO1KhVjBzcN6mdebDt4Lr261UnkSQdGav+Da9m6afA=
Subject key identifier: 30:21:97:FE:68:2E:E4:C8:9A:32:E7:77:AC:4A:43:55:B5:50:8A:29
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 019D382E95CC2BDF87992AD70B10955FD9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0CCA
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: xC6h2R7EYqOrVrKPVX1twAU0I6snqE3xxA9QpjRg64g=)
2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:95:cc:2b:df:87:99:2a:d7:0b:10:95:5f:d9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=302197fe682ee4c89a32e777ac4a4355b5508a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:29:8f:39:28:b2:89:29:f6:33:9e:fc:15:
65:1a:8a:52:31:4d:a4:18:ae:90:31:3e:81:74:b2:
17:04:94:6b:50:15:00:b9:fb:04:7e:6b:f4:ee:e1:
1d:19:32:d8:63:ba:39:1f:aa:78:ac:2a:79:f6:76:
97:79:42:0d:0c:55:43:8f:fa:2a:d0:5a:72:17:e4:
3f:1b:11:84:ed:f0:44:7f:d8:ff:6f:40:7a:79:c2:
2c:63:43:34:17:62:7a:a8:8b:ef:92:11:9f:30:66:
01:3e:eb:52:0f:1e:b1:32:ff:05:99:c7:d7:ca:cd:
92:1b:86:2b:59:7f:4d:c9:50:af:c9:27:30:54:13:
e9:67:6a:10:7d:0b:7d:d4:64:7b:83:6f:c9:87:c2:
7d:0c:d8:b7:96:34:e5:e4:96:06:9d:52:04:11:17:
98:06:36:c3:ee:7e:bb:75:c8:f0:94:91:e4:e3:a2:
62:5b:91:00:98:62:dc:2b:d3:0c:34:c7:24:fb:15:
25:50:7f:97:23:14:35:ae:cf:77:f7:67:24:1c:cd:
86:08:4f:50:d2:d2:ca:1b:b5:31:87:c4:1b:f1:9e:
1a:69:a2:4a:3d:f6:54:c7:bd:45:07:a0:11:30:ec:
ef:69:59:2b:92:6b:ea:8f:7c:a1:73:b0:69:8b:f2:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:97:FE:68:2E:E4:C8:9A:32:E7:77:AC:4A:43:55:B5:50:8A:29
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:21:17:ef:cc:7f:29:91:af:43:bc:2b:e5:76:7d:a0:4f:de:
fa:0c:30:be:23:b5:c3:59:a2:d9:59:25:35:4b:7e:23:43:f6:
5c:68:af:e9:3c:ed:7c:9e:d0:7a:68:c0:cc:96:9c:cf:12:b5:
65:85:08:f4:3c:74:5d:62:b1:97:4e:8a:d2:26:ae:f0:ae:b4:
58:5d:bd:d0:d9:c6:7b:f9:03:57:0c:9b:99:84:73:03:10:d9:
df:9b:72:5d:08:b8:07:72:36:ad:47:e5:d0:04:72:64:1c:d5:
48:43:72:07:71:1b:7a:80:bd:03:4a:a0:91:24:fc:be:bf:b9:
15:cc:fb:37:80:6e:2b:cb:ee:79:71:5e:e5:80:59:60:01:96:
f3:ae:d2:66:ed:72:df:eb:48:0a:cc:81:55:f9:72:1d:4d:33:
5c:60:74:89:7c:c4:44:5e:1f:5d:6c:be:0f:4d:5f:4d:30:c6:
f2:2d:50:d4:a0:d0:66:bd:44:8d:0a:e9:c8:86:43:95:87:c9:
2d:73:19:d4:c7:29:6d:7b:a4:8c:1f:be:7f:85:a0:d8:77:c6:
a3:bc:be:cc:48:aa:58:65:e2:ab:8a:d5:5d:81:0d:46:a3:25:
80:4e:1a:d8:e8:d0:d6:5e:28:ac:22:a1:99:80:5e:ea:ac:80:
03:bd:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client