Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: QdmhFf3W20ykoNX4RVIQnb2aPe2lZLBYFYcbPTzLRdk=
Subject key identifier: C9:E5:14:3F:44:F7:CF:DD:BE:09:45:ED:33:65:D0:DE:83:7D:56:F9
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019D38661843F33D7B274AF7EC97C956A2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0BC1
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: NvJ2Iweq2/fJVfsyfdnnWimCN0EMzFNdLBBkWRK6Q2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:18:43:f3:3d:7b:27:4a:f7:ec:97:c9:56:a2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=c9e5143f44f7cfddbe0945ed3365d0de837d56f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:13:1e:aa:b8:e4:66:97:61:f3:1f:bc:00:
f9:49:f5:2f:fa:ee:d7:ce:e4:8b:15:92:bb:57:c2:
04:8e:cd:ec:72:85:60:55:12:8e:1c:90:bb:e9:6d:
ba:c6:77:33:be:86:6a:36:7a:4e:b8:1d:d0:1b:ec:
eb:2f:c3:7d:3e:49:ef:9f:2c:3f:c1:7d:8f:fb:5d:
28:79:6f:d7:69:42:d0:bc:9a:8d:42:1f:94:97:2f:
0a:dd:3e:66:93:62:a9:19:7f:51:f8:26:c2:bb:77:
7c:b1:21:29:5d:94:c5:75:c7:9d:e9:c7:41:42:43:
cc:fd:74:84:da:d5:ab:7a:97:19:ca:73:2e:7a:4d:
34:47:96:8c:9f:1d:cb:1f:bf:91:f6:7a:fd:27:e0:
ff:e4:00:14:9d:e2:93:14:c9:43:66:2e:de:07:43:
3e:07:88:9f:f9:73:1f:9e:2b:79:1f:41:7a:b8:11:
ec:1d:39:d9:be:b4:2b:96:3a:f1:8a:93:d1:61:e9:
8f:59:82:e3:c0:eb:fe:66:bd:89:c0:b0:bc:18:c0:
72:11:2e:e5:e9:58:b5:fe:8f:da:03:78:f2:de:33:
69:a6:ae:0a:4b:d9:55:83:cd:e3:79:03:5d:77:14:
28:a0:e1:98:98:4c:18:1b:50:3c:c9:27:3a:94:6e:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:14:3F:44:F7:CF:DD:BE:09:45:ED:33:65:D0:DE:83:7D:56:F9
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:b4:92:dd:29:cf:67:bf:29:f9:eb:28:8f:6d:b6:97:d4:
46:29:a4:41:d1:b7:26:3a:88:dd:9b:34:00:2c:98:04:c0:82:
5d:75:b1:de:40:54:bb:73:f5:6a:10:e5:f7:dd:86:95:d1:11:
53:4d:3b:47:23:10:91:13:e6:96:48:c2:11:bb:77:46:a7:ac:
a5:eb:b4:fe:fd:4c:04:e6:7e:32:b1:ab:14:ad:58:9c:e7:82:
c1:91:8b:d4:49:df:55:1e:69:04:c0:82:53:2d:5a:3e:c0:97:
72:d1:97:13:45:28:9c:07:88:33:89:c1:2c:22:b8:11:7d:8b:
9c:79:fb:47:66:59:b9:b2:0b:6e:09:ec:4a:54:06:98:b7:0d:
3e:2d:28:82:f2:bd:21:44:49:dc:45:0e:d2:d5:6f:11:3e:12:
37:ea:2b:47:df:c3:79:fc:b3:e8:8c:73:3f:eb:57:f3:c8:3e:
9c:cd:3a:f7:65:8a:05:6f:ea:d6:bb:ef:a7:a7:6c:95:bf:cf:
de:c3:75:f5:7b:a6:14:2e:e2:62:ef:78:9e:07:11:0e:27:f3:
a9:50:24:4e:2f:5c:6e:5e:77:86:e4:10:a4:bb:6e:73:60:a8:
18:e9:b8:fb:35:cb:5c:a1:24:85:02:4f:d3:e3:40:31:0b:aa:
e6:f1:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:21 2026 by rpki-client