Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: oFwMuPE6kMLCSaRQrOdUJEY7o+jw+pzelSfhTLNAC/k=
Subject key identifier: D4:A0:6B:13:5B:C1:7C:66:46:B3:FC:E9:20:9E:5D:C8:E8:C8:3C:D1
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 019D37F798E89174CE72F690B738FA50167A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 15C6
Signing time: Sun 29 Mar 2026 05:01:06 +0000
Manifest this update: Sun 29 Mar 2026 05:01:06 +0000
Manifest next update: Mon 30 Mar 2026 05:01:06 +0000
Files and hashes: 1: aSMqnDsU4yHUtfUAR3DS4WrgNQk.roa (hash: pODty0+G8b8JUuUCA0mPgthTxofZmMjylNtO8cAJ+IU=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: XVIbIBR1ec2ITH4/PNhE/9nAPWKXdT3XtfDLamEvzwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:98:e8:91:74:ce:72:f6:90:b7:38:fa:50:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Mar 29 05:01:06 2026 GMT
Not After : Mar 30 05:01:06 2026 GMT
Subject: CN=d4a06b135bc17c6646b3fce9209e5dc8e8c83cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:91:04:74:f5:dd:4c:4c:82:f0:40:a4:42:ad:
ec:6e:32:12:0f:33:b9:85:38:59:7c:e6:48:9b:01:
37:dd:19:0c:cf:39:60:ec:f8:68:a2:89:75:18:15:
9b:d0:b0:c3:0c:cd:cb:0c:6b:f9:27:6a:21:57:ab:
08:f2:5e:07:09:37:e8:e3:46:1d:3a:7b:26:65:2b:
ad:70:21:98:d2:f2:d9:a8:41:bb:da:5c:2f:a8:54:
a6:cf:85:6b:e1:5b:66:ce:8b:29:9b:a9:18:62:83:
b6:1e:1d:37:7f:4f:37:e2:24:27:cb:85:7f:d8:a8:
40:aa:c7:51:60:33:78:45:5e:5c:11:46:44:ab:1c:
74:af:53:36:c8:f0:f8:98:af:b1:9a:65:d4:ba:70:
1e:08:2d:70:b9:e7:7d:9c:a8:4e:f4:86:f9:47:31:
dd:e8:29:d9:9d:ad:82:f2:54:b0:31:ca:9b:5e:cd:
03:6f:d9:28:69:cd:0d:04:f9:7a:e4:89:4d:1b:63:
c6:5f:fd:b6:97:f7:1a:5a:8e:a7:09:82:bd:35:ef:
d0:08:ab:b4:8d:e7:9a:4e:1c:06:a2:72:73:14:72:
37:bc:cc:20:3b:e1:03:f5:b0:a7:8b:0e:13:51:33:
31:eb:50:10:7d:b6:fc:13:3f:a4:2e:4f:1e:5f:cd:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:6B:13:5B:C1:7C:66:46:B3:FC:E9:20:9E:5D:C8:E8:C8:3C:D1
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cb:1f:95:18:a1:d8:be:70:c5:17:73:ef:f0:ca:37:ac:64:
62:4b:c8:00:65:33:9d:de:d1:4f:d2:c4:8a:bd:5f:da:fe:01:
9c:d1:a7:cf:3e:e6:ae:a2:5e:61:b6:63:c1:db:50:d4:af:8f:
b6:c7:16:25:58:97:9f:c5:ba:24:9a:4e:fc:1e:be:a6:85:23:
c3:6d:43:8c:0f:b8:85:0e:cc:b0:70:b9:cf:25:e5:21:4c:92:
84:0a:e9:7e:9f:94:2e:df:01:74:bd:e8:8a:83:60:6b:32:fb:
73:62:2b:0a:ca:30:6b:73:d5:26:88:4c:ca:b3:54:96:89:c1:
e4:30:18:8d:81:dd:b0:c3:d1:f2:ad:62:66:b5:6e:b7:00:df:
98:86:92:0b:e4:29:4d:ce:af:4c:61:e1:fc:bc:21:e2:6c:74:
58:19:f4:86:6e:d7:2f:32:75:4b:c2:9f:30:98:c1:a4:69:2c:
c8:a3:3a:2c:7e:a6:5b:e6:65:05:b7:8f:54:9b:8b:2b:1e:63:
89:74:98:05:b4:5f:f2:ca:6f:71:df:68:5d:9e:84:18:5d:5c:
af:94:12:d9:e9:62:e9:e2:ce:bf:24:84:34:9c:c7:9a:da:2a:
a6:d1:44:1c:bb:a1:21:2b:7d:aa:16:12:2d:26:3f:60:05:cb:
09:b9:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:03 2026 by rpki-client