Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File: pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier: u9uAHhj/aWXOAe21yPqLQF5y1GqOYDExuquahL5fGsA=
Subject key identifier: D6:38:58:8B:A0:D2:84:1E:4F:76:BE:21:BC:FE:51:CC:23:06:37:70
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer: /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial: 019D3866A1357A83C9FB2302EECB6A21C5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number: 15D0
Signing time: Sun 29 Mar 2026 07:02:23 +0000
Manifest this update: Sun 29 Mar 2026 07:02:23 +0000
Manifest next update: Mon 30 Mar 2026 07:02:23 +0000
Files and hashes: 1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: 4lsUrLz5XbhIaMZ+/ujdABxXIhHq6arJbnd7EyaAelk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a1:35:7a:83:c9:fb:23:02:ee:cb:6a:21:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Validity
Not Before: Mar 29 07:02:23 2026 GMT
Not After : Mar 30 07:02:23 2026 GMT
Subject: CN=d638588ba0d2841e4f76be21bcfe51cc23063770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:f6:79:57:af:ac:80:bf:53:2e:a8:15:e5:
97:8a:2d:56:71:b9:88:96:c5:7a:ef:cc:76:95:a0:
ab:43:ba:ef:15:75:2e:0c:2c:de:e6:9e:7f:3a:80:
c7:b5:d2:21:2b:3f:fb:dd:9b:70:37:bc:60:d2:81:
aa:ea:9c:c4:23:87:5d:e9:62:ca:48:0b:15:2c:aa:
b4:47:bb:d9:d5:42:f6:07:19:83:94:9c:1b:94:96:
b0:b5:70:58:cc:37:58:da:c5:4f:97:7f:3e:ae:a3:
05:76:47:5e:6f:86:fa:28:5e:e8:c0:29:e4:41:61:
f4:37:3d:1f:3d:42:3c:10:72:4f:ab:90:9d:b4:c0:
e5:e1:0a:bb:8b:72:61:96:ec:b7:6c:41:d6:25:be:
c3:de:8e:b0:d5:b5:37:90:07:c1:8c:05:55:59:fd:
3d:54:b9:4f:88:a7:d4:45:27:8a:d7:a9:5f:1a:ae:
28:0c:4c:a0:e9:07:d4:45:ad:c0:81:26:99:e0:07:
64:a0:8d:9c:dc:95:22:2d:f6:92:22:9f:9d:97:6d:
d5:15:35:a5:c5:81:81:4b:5f:9f:8d:20:e3:ba:c8:
6e:ca:be:c1:ba:08:23:9a:c2:3a:61:41:70:2a:7a:
2c:b3:2a:95:c8:e1:e1:34:cb:24:77:cb:b9:82:61:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:58:8B:A0:D2:84:1E:4F:76:BE:21:BC:FE:51:CC:23:06:37:70
X509v3 Authority Key Identifier:
keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4b:ac:15:10:82:95:b9:05:d2:dc:fc:6d:c6:63:12:43:29:
54:59:d8:81:c4:66:57:45:02:d1:64:71:f6:6c:ad:d0:c8:d8:
c4:e9:d5:76:42:d6:da:93:b8:76:e5:4a:b7:d4:bd:43:a6:40:
dc:09:2f:6f:66:d9:90:e6:db:8a:05:fc:9a:4c:57:ff:20:ae:
a7:7b:98:4b:4f:77:ed:e5:5f:44:cf:eb:3c:29:4c:20:89:0e:
67:9e:df:1e:94:be:7a:2a:3e:a9:f2:ec:47:0d:f5:5c:c3:cd:
8e:52:14:5e:c5:6c:60:4c:97:e6:a8:a8:9b:ef:9c:60:43:6a:
af:1b:42:d3:4d:e2:b9:c5:af:23:de:18:0c:38:a2:f0:db:3d:
99:af:67:20:7f:13:44:45:b2:3c:f6:0e:54:3a:1c:33:75:89:
20:aa:1d:b4:4f:3e:6a:bb:2e:b1:43:cd:fd:4e:2d:69:0b:10:
75:7a:79:86:87:46:e0:8c:d7:f8:b7:82:a8:18:e2:28:d9:e1:
c5:09:af:d0:b9:6d:fb:db:ed:71:c4:25:c4:b0:7d:0f:11:5f:
d3:91:a8:f1:d9:a0:72:0f:0e:e5:3b:cc:e3:ac:62:bf:cc:cb:
64:e9:fe:05:07:d6:df:af:1e:13:81:04:00:0a:3f:4a:76:4c:
29:36:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:57 2026 by rpki-client