Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
File: mT6BRnbzLyZHccetdnpN-H08Y-I.mft (raw, json)
Hash identifier: YZ49Q87zq1y22EAM1vzrl+Fum+sTEXLQob2u8RPsGus=
Subject key identifier: 2C:6C:5F:E2:EE:82:09:8D:A4:EF:AA:48:9D:9E:28:3E:08:48:F2:43
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial: 019D386617C23111B8232E6B248C634CA43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
Manifest number: 0120
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: mT6BRnbzLyZHccetdnpN-H08Y-I.crl (hash: CBGKIGVkMzM6Kw0pYZ39vu2eSLMYXtWPHv66eYEde7E=)
2: o0QAPM1ESuNP2J0PU6laacOjs-Y.roa (hash: KnHtoHGfNF+Yd+wrjg38jV7CFUUuu9lVP3v5WBtPzNA=)
3: wzhvVBisYwpfDxdiNkmYJjywz5I.roa (hash: vkonNhWWhUvXolDJXrRgZMBJWgHtThs0/Uh8jZJo5Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:17:c2:31:11:b8:23:2e:6b:24:8c:63:4c:a4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=2c6c5fe2ee82098da4efaa489d9e283e0848f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:93:80:81:04:c6:f1:b3:39:a2:54:3c:9b:
3a:8f:0b:5e:04:2b:94:04:aa:ee:24:30:ad:a6:dc:
c9:d4:1d:a8:79:f2:2c:d3:d3:0a:81:5d:2d:75:e1:
e7:79:a7:1d:f2:b8:00:97:7e:60:c9:77:32:17:1d:
54:25:53:b1:13:6c:73:1b:83:9e:f5:26:4c:74:8e:
51:87:42:49:92:17:ed:e7:87:82:98:67:8d:44:e7:
b8:49:90:12:80:95:af:42:0c:34:9d:f3:6b:28:bb:
e2:87:56:e8:07:15:57:c2:a8:e2:7f:4e:ee:dd:55:
44:4c:0c:2f:27:69:4c:83:d0:0f:85:e2:2c:30:2a:
94:53:23:cd:bd:14:88:26:c4:c5:ad:b4:50:88:52:
dd:d4:b2:9a:ba:98:e5:0e:9d:da:68:23:0e:4e:03:
fb:f5:d7:c7:e0:7a:2a:29:ab:de:ae:58:b2:8d:de:
27:68:a1:83:69:8d:ab:1f:9c:59:e7:60:c6:ba:2f:
1a:2e:4c:56:56:3c:1f:af:30:b0:b6:e3:33:89:86:
0f:63:22:61:97:ea:e5:b3:67:ef:96:f6:75:22:e0:
e9:40:38:66:a6:f0:69:26:44:e3:dc:09:b7:5c:10:
aa:91:49:47:15:d3:66:10:7e:41:e0:01:8d:85:40:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:5F:E2:EE:82:09:8D:A4:EF:AA:48:9D:9E:28:3E:08:48:F2:43
X509v3 Authority Key Identifier:
keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:f6:d5:5d:2b:d0:fb:19:10:53:f0:dd:ce:f8:0d:84:29:
c1:7f:d7:ba:c2:bd:be:31:e2:dd:89:c7:e9:64:68:66:a3:24:
ee:61:e6:c6:12:bf:bb:2c:06:dd:70:6e:51:be:c7:64:5c:3a:
57:36:ce:f4:b5:05:2b:ec:20:b7:36:23:51:ba:2b:8f:7f:18:
8c:af:f7:d7:aa:23:fe:be:5f:2f:57:33:7d:ae:9c:50:f6:3a:
be:c4:4c:8a:6b:c2:34:ff:9e:16:65:00:75:e8:8f:8a:8d:77:
ae:9e:c6:3a:24:d4:bd:11:93:4b:ef:75:cb:dc:bb:92:e0:59:
22:88:86:4b:3f:c6:0f:bc:34:e2:c5:19:6a:9f:2c:79:ed:19:
e9:e9:72:4e:da:bb:c2:4c:c3:8d:48:b4:62:d9:37:1c:4a:a6:
d4:64:5d:77:a7:42:46:f7:3a:a8:d1:5d:a4:3b:77:11:81:e2:
2a:c0:81:d4:6f:f9:d1:82:99:04:5e:b5:41:72:87:af:01:46:
f2:b0:78:4d:1f:2b:ac:db:ba:62:a7:a5:92:50:f2:af:06:0d:
0f:1c:a0:96:53:a3:3c:44:6b:df:ec:2c:c2:65:6c:dd:d8:ed:
89:3b:e7:e2:34:68:f2:59:41:07:92:ec:e0:48:07:e4:a2:48:
92:b3:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:19 2026 by rpki-client