Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
File: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft (raw, json)
Hash identifier: j3ikL8gLHggi2ka6/W3/uIO047e8Pi6iQZz+KLQPQ30=
Subject key identifier: 95:68:AB:6C:F9:1A:8E:92:7F:E8:04:CB:E6:C6:76:84:BD:CF:74:97
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Certificate issuer: /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial: 019D38D393703C4109423ADD90764366AF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl (hash: qJW/w27F3QgXLVWqvfW+isUcSeQa/CM4wd4bizpRxxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:93:70:3c:41:09:42:3a:dd:90:76:43:66:af:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=9568ab6cf91a8e927fe804cbe6c67684bdcf7497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:01:1f:9b:a9:2d:4e:f0:77:b7:96:80:7f:
8e:a5:b5:56:9d:0b:3d:af:fb:d9:fa:3b:29:cc:6a:
b7:b4:ac:d7:16:fa:e1:52:78:e5:74:2c:79:95:e4:
c1:93:19:46:32:79:1f:03:e6:dc:0a:8d:ac:0d:7e:
45:07:2b:77:91:ee:b2:d8:c8:27:5d:35:4b:d6:88:
61:d4:d9:36:de:07:77:e5:e2:5b:18:55:1a:f3:cc:
e7:9c:d3:d4:43:e6:32:4c:1b:ed:f7:ff:cc:7c:bd:
76:86:dd:86:dc:c7:d1:7c:1d:70:43:66:bc:0d:d8:
03:c8:f7:fb:d7:9f:89:64:92:dc:f2:8f:5f:7a:6e:
94:9f:ad:3d:e3:0f:eb:0a:59:b9:bb:55:c3:48:52:
64:42:e8:bb:8c:3d:27:ca:6b:7c:21:2c:08:19:cc:
65:b8:03:3a:10:14:d8:b1:d8:c8:46:5d:fe:4a:e3:
e3:6a:04:62:b8:55:54:c0:42:66:b8:46:dd:fe:a9:
11:a5:4b:90:a7:49:fa:f1:1d:08:f7:1e:73:3d:f1:
61:92:a7:b8:2f:64:9d:a2:63:d2:d2:d5:7f:10:95:
36:c7:11:ea:8b:16:07:2f:a3:c5:a6:94:82:1f:13:
c1:0c:43:60:e8:8a:bf:8d:7b:4c:39:73:79:59:ba:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:AB:6C:F9:1A:8E:92:7F:E8:04:CB:E6:C6:76:84:BD:CF:74:97
X509v3 Authority Key Identifier:
keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:82:d4:a5:0f:2c:eb:e6:b8:dc:0f:8e:7a:d4:b0:83:f5:78:
5a:99:8f:a3:2f:02:eb:f0:e0:97:79:e2:ad:6f:5d:50:71:c5:
0e:6d:59:76:31:74:30:0a:9b:21:9b:b2:c8:56:ff:05:31:79:
8d:ae:e7:56:8a:3e:ed:83:3a:2c:c8:ca:40:65:ab:56:42:a5:
28:0e:02:f6:95:32:3f:56:b8:15:7c:63:a2:84:9f:4d:be:fe:
93:9a:bb:28:5b:0a:c8:12:e0:da:ad:14:c8:f8:9a:89:ae:f4:
0c:03:20:00:3a:74:12:c5:46:b5:4c:f0:51:bb:b5:be:fc:e2:
70:66:54:cd:46:e2:39:eb:18:ed:d6:fd:a2:d0:d8:eb:76:8b:
78:97:69:1a:97:f5:e1:14:5b:eb:3e:e6:3b:3d:c1:ac:36:7c:
aa:82:92:14:4c:d6:99:f9:6c:bd:b9:b8:bf:e5:b8:71:4d:af:
72:b3:45:11:1b:db:34:de:43:49:2a:77:4a:f4:5e:a8:10:c7:
7c:3d:dd:86:ed:a9:97:42:60:67:2d:c4:ae:1d:85:6d:f2:03:
fc:06:6e:03:72:70:b5:bf:c1:35:50:df:8c:02:00:24:f5:6c:
23:92:5e:47:91:5d:35:92:62:21:c7:75:10:3e:68:85:a9:1b:
a3:79:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:53 2026 by rpki-client