Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: pXAkbL0sihEvwgUR+I3a+Xkdf2mq6Gl+MFADO6ACxyY=
Subject key identifier: 20:C4:97:36:05:E9:A9:91:4E:FC:04:E4:5F:2A:E1:1F:60:62:3C:93
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019D386659BF83BC305814A297D6429B9604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0DEF
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: YEXp/9PdZk3o9++IUqom9oFsHIndXnnvbUpdyTLQcbM=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:59:bf:83:bc:30:58:14:a2:97:d6:42:9b:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=20c4973605e9a9914efc04e45f2ae11f60623c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:bb:6f:3c:e9:aa:be:2a:b1:b3:a4:94:cc:
32:9d:3a:bc:8b:a3:54:77:a7:40:a2:fb:fb:d3:08:
a9:59:dd:45:69:f2:37:cc:56:86:d6:37:bb:34:81:
2e:0e:e1:1d:7d:96:59:85:1e:20:4b:9f:05:0d:24:
c1:af:84:cb:02:83:29:fe:d0:d6:0c:27:d5:46:df:
7f:0e:f2:e3:74:0c:61:6f:81:ea:f7:fe:f5:8c:cf:
d4:34:1f:00:2f:14:92:39:3d:a2:6c:d0:7c:91:62:
52:ad:10:0b:30:d9:ab:7a:09:2a:aa:50:55:dc:70:
41:57:58:f1:25:d2:fd:43:b7:67:e3:5a:50:4c:0c:
b4:1d:26:6c:c3:3a:1d:b2:db:62:3b:0b:04:3c:fb:
81:52:71:4d:d7:bf:c8:b6:3c:45:31:ff:87:a8:67:
ea:fd:b8:b7:ec:10:b7:31:67:6c:7c:28:a6:54:37:
1f:f8:ef:f1:c2:7b:c6:33:b2:d9:5e:87:91:80:f7:
aa:c0:93:f8:a8:d8:ff:cf:d5:33:ec:60:c6:8a:32:
f9:1c:67:ff:58:5b:2e:cd:16:d3:38:fa:d6:d0:4e:
7a:3f:3a:1e:d6:e5:81:39:59:38:0a:15:87:cf:66:
dd:82:46:af:16:88:0e:1b:73:a5:d7:4b:c5:10:d1:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:97:36:05:E9:A9:91:4E:FC:04:E4:5F:2A:E1:1F:60:62:3C:93
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8d:24:45:5e:13:97:9e:63:79:24:05:04:f5:8c:fc:03:aa:
d1:02:3b:c4:ee:6d:91:5c:54:52:00:08:24:f0:2c:1d:d4:8c:
15:36:fa:d5:a3:ac:d5:8f:91:44:31:c3:98:1c:b2:37:34:38:
55:8a:20:e3:d0:69:fc:e8:b2:37:9b:fe:de:ba:a0:70:39:e9:
9b:e3:5e:ff:86:00:3d:e4:c1:7c:3d:f9:e4:8a:e1:3a:67:ad:
43:fe:c5:db:49:6a:c4:0d:d7:13:03:d0:cc:41:52:1b:31:e2:
be:6e:65:7f:26:f5:d5:6f:4c:94:0e:f3:05:07:17:b9:e2:0f:
10:09:cd:e4:bf:75:20:d1:28:50:4c:3f:6f:0f:2c:29:b0:fb:
a7:0f:49:22:02:f1:c3:a7:f5:a9:e3:d7:51:29:42:36:f1:1c:
0c:e9:3a:a2:f0:24:5a:98:e6:19:54:02:c2:2b:1f:e9:e6:89:
6e:83:f0:85:43:a0:91:da:0b:8e:c2:46:a2:41:3b:86:77:ba:
7a:bd:bb:97:79:ec:90:94:82:ec:15:4a:83:f7:33:64:09:6c:
b2:b4:64:32:39:a9:b0:2a:43:0e:bf:e3:68:4d:9d:7b:fd:dc:
74:91:bb:2a:0c:e9:3c:5c:73:27:2c:0e:c6:20:74:14:b4:dd:
e0:42:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:08 2026 by rpki-client