Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: V+GaYerHStTE/riwUmmejPKs8wqVKsYa3N/X6XsSywM=
Subject key identifier: 71:C9:21:B0:B9:8E:2B:1D:C8:75:65:6B:14:99:AF:C8:80:26:EA:CD
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 019D39099DF96DCE9DDB2F70DFB87AF37412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0BFA
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: RGLnrkf95J4/cYRJiEkn/o72RtGI3kRNQ3ydaWx7CKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9d:f9:6d:ce:9d:db:2f:70:df:b8:7a:f3:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=71c921b0b98e2b1dc875656b1499afc88026eacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:a3:57:21:45:73:7a:42:ff:e0:5a:14:d3:
55:8a:46:4a:ec:c0:99:26:4b:8d:ca:cc:c9:23:16:
34:3f:18:7b:2e:3a:b9:75:a6:3d:bf:a9:3d:90:e0:
aa:7f:74:23:16:aa:d0:1a:77:8f:0c:4d:8e:c7:22:
db:9c:db:85:2c:85:25:cc:de:b6:1d:3f:1a:53:ad:
ed:07:2f:31:a7:f8:ae:44:95:f1:25:e1:e6:b0:3c:
06:9b:2c:90:af:bd:c5:27:06:d2:93:48:fc:c9:a4:
db:67:0a:f2:7c:87:b3:4a:8a:d5:a6:1d:4f:19:47:
e6:f6:5a:7c:68:c1:ef:9f:71:00:9e:fc:6b:c4:61:
d6:26:57:33:4a:37:20:3b:d1:07:19:b0:b8:52:82:
e0:7f:8f:9b:f7:36:65:cc:45:42:e3:07:d3:5f:29:
60:03:45:ee:d9:59:91:4b:5e:f9:09:14:0c:2b:5d:
38:33:7d:1a:9f:25:ed:97:06:a5:b8:d5:db:08:d5:
12:3e:20:1d:18:c9:24:9a:4c:51:ca:6e:49:fb:22:
17:c8:46:a0:1d:e1:43:14:d8:a6:77:fb:ad:78:f3:
ce:2e:21:ed:30:2c:dc:60:3c:5a:9a:59:5f:2a:2e:
c4:b9:37:7e:46:0a:d0:5b:48:ac:02:c0:e5:75:49:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:21:B0:B9:8E:2B:1D:C8:75:65:6B:14:99:AF:C8:80:26:EA:CD
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e3:9b:d1:6b:ac:50:3b:6c:3f:48:21:9f:ab:56:22:67:bf:
bd:c7:4a:9c:a6:d6:87:af:55:df:d8:c1:84:2f:26:09:e7:1e:
02:1b:38:5b:57:ba:6e:b8:c7:95:11:44:15:65:68:30:96:ba:
0f:9f:0f:37:a5:0e:5f:b1:ca:9c:1a:c8:43:f3:7a:14:ac:7c:
9e:b9:34:95:92:34:06:46:c8:d4:06:95:c6:2f:f9:bb:07:9e:
2c:5f:8b:7e:ae:89:7c:5d:23:5f:b9:92:88:bf:f6:7a:36:f5:
2a:6b:c3:ae:93:ee:d8:95:2b:f7:55:03:36:85:85:68:dc:19:
0f:00:ea:0c:27:af:89:20:1e:48:92:d3:60:ec:79:2a:d8:60:
ff:9d:59:4d:aa:e9:5f:ce:1a:e9:bf:fe:24:7f:f8:7b:33:14:
03:f8:3a:ea:f3:36:61:5d:db:58:98:f0:9e:d9:b1:17:c2:0c:
70:2f:76:f7:d6:40:01:db:62:5f:18:8f:31:13:67:1b:0b:b0:
c9:63:8e:c5:59:67:fe:9a:03:fc:7a:07:81:d9:40:b3:a0:33:
76:8a:48:7a:53:18:96:0b:7e:c2:f1:ee:17:98:6e:6f:be:52:
e3:a9:74:1d:d8:aa:c2:b6:a7:1c:94:02:f7:95:8f:72:cd:99:
96:40:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:18 2026 by rpki-client