Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: y34AKebV5t5/ZBM48ztKq25V3wxNxgJl2hpghloe8eg=
Subject key identifier: D9:1B:61:ED:82:0C:14:68:9C:7E:AB:8B:48:3C:69:CA:79:52:8D:D6
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 019D38D3B8867DD8A2466BFE5DF40B9C0744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 100A
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: aABSj3/lAjqs9NQo6wyNYaEuQHDxqTEw7gpgQOwC2SQ=)
2: jbegeHRHAQFS4OhjdqswttUxcNE.roa (hash: H77Ee/ql8r6fO3a7jEQG5BO9lvRzT2On1CkeHfT7sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b8:86:7d:d8:a2:46:6b:fe:5d:f4:0b:9c:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=d91b61ed820c14689c7eab8b483c69ca79528dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:e3:92:76:cb:88:56:7f:73:c2:df:97:5f:
7b:fa:b0:c3:b6:1e:0c:4f:5a:75:5f:29:8e:73:05:
da:76:96:c1:f6:86:8b:17:ee:b0:9d:8b:07:71:bf:
da:85:9a:0c:ee:85:52:08:2e:56:8b:97:f7:23:4a:
d6:42:0d:98:27:a0:d3:78:b4:06:ba:17:b3:19:e9:
7d:4e:82:1b:e9:63:24:de:98:08:18:07:cd:f4:30:
ff:0e:07:07:33:e1:bc:0e:fd:ce:b3:d6:34:7e:a6:
b8:84:f0:1a:ba:ef:b2:55:eb:1c:72:8a:b5:34:f8:
45:29:de:93:61:b4:d3:79:ee:79:37:64:71:73:88:
2e:80:1f:5b:16:3e:da:09:75:90:11:c9:40:a5:b9:
f0:c3:b2:77:c7:b7:2b:c8:ce:8d:e0:83:14:b9:e7:
c7:46:b6:72:da:97:7b:b1:7a:12:56:0b:eb:00:a6:
99:d7:c1:03:de:15:52:12:7b:85:54:f6:97:f9:7b:
1c:28:97:68:d7:57:96:61:ea:ce:b1:e8:75:84:80:
e4:12:3e:f4:87:91:56:61:43:6b:bb:32:c2:be:41:
4e:d9:42:c2:ef:2e:7f:0b:34:ce:32:82:e7:3f:b9:
de:52:fb:51:84:87:02:57:d2:f6:42:69:f1:4d:b1:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:61:ED:82:0C:14:68:9C:7E:AB:8B:48:3C:69:CA:79:52:8D:D6
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:69:67:fb:64:47:f5:3a:a3:be:14:60:f0:1e:36:69:82:
6f:1e:5d:46:cf:47:73:71:12:2d:a3:93:b1:cf:42:54:d2:c9:
51:24:1e:26:39:8f:40:ed:0b:ef:4d:3f:55:41:bc:af:75:28:
f3:c6:cf:20:28:5d:ff:8a:22:46:f4:80:c6:75:7e:25:a2:f9:
3e:a2:06:2b:1a:19:96:07:55:a3:bd:c2:fa:8e:22:6a:e8:5e:
94:c9:30:19:7e:3b:ae:4a:d1:0c:9d:54:ea:f6:30:3c:39:38:
2f:46:df:a2:5a:d2:d5:cb:f6:fe:bd:d5:14:da:b8:ee:aa:03:
c6:7e:99:9c:d4:8d:ef:5d:88:69:0c:23:aa:d0:6e:50:77:bb:
cd:cc:1b:e3:ac:21:de:a1:7f:6f:20:e0:79:d3:34:97:7b:25:
85:ad:e7:f6:1e:02:42:79:4d:4f:e4:b4:28:5e:9c:d4:fc:34:
56:88:eb:f0:c2:d6:06:75:1f:b7:25:e0:f0:9a:f3:99:cf:25:
5e:1d:9a:b2:2f:da:6d:11:7c:51:bf:42:72:6f:64:44:71:7d:
0c:f6:41:d9:ca:a6:44:56:53:0b:24:d5:cf:f0:77:e0:aa:d1:
1e:5a:5a:00:a0:70:56:1a:0d:c4:25:e3:94:c0:3a:82:79:d3:
02:fc:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client