Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier: ohNEG/vEhYKtQYww5e0bGUXB3aGMr+/Y0+Omym/1Z3s=
Subject key identifier: 22:D7:CA:C4:F1:20:A3:12:98:1D:75:39:ED:7D:D2:0C:11:0B:96:46
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial: 019D382E31BA6B34D8F4EAAF317EEE5E4777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number: 0F5F
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: XMRwfMBajXxUEog7PjgSADv+IetX7+0lImMWyG42e2Q=)
2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:31:ba:6b:34:d8:f4:ea:af:31:7e:ee:5e:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=22d7cac4f120a312981d7539ed7dd20c110b9646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:2f:5d:82:32:52:96:f1:01:e8:51:af:39:
78:ba:6e:ae:6f:76:4f:85:08:8d:a7:fa:1e:e1:aa:
fe:16:d7:0c:36:e9:df:dc:8c:79:ae:1e:bd:84:86:
0b:f7:2b:2d:e1:61:e1:04:15:e1:aa:fa:15:b7:b1:
54:30:c0:52:f6:ea:fc:1b:6e:eb:20:02:2e:09:53:
b2:2a:d8:82:ba:f7:62:df:cd:40:dc:74:ee:3c:4b:
44:a2:73:5a:8e:2d:54:a4:9b:2d:fd:24:c9:c8:ae:
1a:dd:dd:64:f2:30:fa:51:29:38:f1:7b:29:95:e8:
cd:2b:2e:91:46:19:ad:f6:84:f1:39:19:44:f7:7f:
5a:1b:22:cd:3f:e4:0f:cd:ec:1a:fd:29:34:bc:3b:
67:2b:1f:80:44:70:42:dd:54:80:1f:f9:14:94:88:
ab:c2:c6:c7:1c:86:73:34:0a:c8:3d:b4:69:c5:db:
5a:22:b8:d2:07:0b:a2:fb:42:e6:3b:16:3a:01:81:
cf:35:df:b4:c1:ef:8a:aa:47:11:44:6e:18:77:25:
11:30:fe:4a:57:32:4b:f1:2b:ac:f6:d3:6e:c0:34:
d9:c0:11:5c:b0:99:37:65:c2:dc:d6:53:4d:1e:db:
39:aa:12:45:b0:95:48:99:5d:37:a7:95:38:78:ff:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:CA:C4:F1:20:A3:12:98:1D:75:39:ED:7D:D2:0C:11:0B:96:46
X509v3 Authority Key Identifier:
keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ce:36:7e:2c:e7:89:e7:b8:0e:28:b3:80:44:b0:18:b7:29:
33:84:c0:6a:3d:2b:39:e4:93:43:9c:57:a7:4e:52:c6:8d:62:
25:8b:b8:6f:b7:4a:10:66:41:ef:6f:e6:c9:9c:ce:97:25:21:
48:54:b1:08:c2:3f:29:f7:5d:55:6b:cc:95:ef:46:7a:ce:e7:
22:85:6c:46:f9:c3:b2:9b:e8:c4:a4:59:51:29:0f:84:cd:d3:
95:54:7c:98:af:ab:8d:17:c3:fa:64:06:71:ba:39:28:a2:60:
e2:b4:67:de:c4:f1:fe:a2:d2:b4:7a:b3:a0:db:75:e4:57:d7:
2e:ae:84:35:92:c0:72:06:0f:43:ec:30:59:21:6d:74:c0:46:
33:99:d5:90:74:aa:fb:c4:ea:56:36:b4:cb:fa:5e:5b:7c:9a:
34:0f:2c:69:b0:fc:62:26:f2:22:7e:f7:2e:ae:5d:79:d9:f7:
f1:5f:84:29:8e:c3:56:72:fd:c7:d1:56:ae:7b:89:36:6c:c3:
c9:57:9c:59:ac:f2:45:70:47:ae:7f:8e:18:1b:d9:c4:1c:d6:
88:48:21:7a:2e:8c:fd:ce:c2:67:96:6e:f6:ad:9f:4b:66:9c:
f6:52:ba:93:78:7b:3a:b9:be:9e:9a:1d:6a:ef:60:d4:d5:db:
9f:7c:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client