Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File: 6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier: 08Guy9OT/ynuq8RMUwvJ+DYnDhZPsP/981nhgrJ3AiE=
Subject key identifier: 45:EC:65:63:95:96:35:81:D1:F9:87:7C:54:EB:6F:5A:A3:E0:5A:FA
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer: /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial: 019D38D2F48010D63CE561D5467E2B025850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: /mznifpmJ6826BT04bSJWcWKJjoqCFIFvEgdDhYkHNs=)
2: uKa6FxImXf06YNSnlN4nrccJ9Cc.roa (hash: ePdUA2mdutDGzHN2U8mQRRE7yoNYH9bgsLzTLHYrHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f4:80:10:d6:3c:e5:61:d5:46:7e:2b:02:58:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=45ec656395963581d1f9877c54eb6f5aa3e05afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:1b:34:f7:04:15:bd:9b:6c:d2:6b:41:3d:
32:59:70:dd:da:c4:ba:54:77:31:ae:a5:a3:f4:66:
8a:8d:a0:87:67:bb:e0:db:63:ee:d3:3a:77:72:9d:
94:2a:c5:d2:0c:17:c3:2f:6b:0e:ce:27:02:23:3f:
96:e5:03:ff:26:dd:4d:ff:c8:ca:b0:0b:61:bb:bc:
eb:8d:22:70:93:b3:2b:2c:c5:ee:12:77:fd:93:58:
2c:b2:7e:30:f2:a1:4d:c1:65:de:dc:51:f9:bd:af:
7a:13:90:40:0f:b9:40:c9:4b:fb:76:1d:f1:c7:31:
02:d1:74:45:c6:c8:da:50:ea:46:11:fe:b0:9d:93:
69:7c:d1:9c:cf:c1:77:3d:0e:15:7a:e7:65:a0:81:
04:01:66:d0:b7:c7:3d:1d:05:54:e0:d3:b2:b3:f9:
91:2f:6f:57:3d:ae:51:4d:4c:d0:59:26:10:ab:ae:
2e:aa:c8:0f:78:cd:6f:e3:fd:6b:5e:34:e3:5b:57:
4b:34:53:34:29:ff:e1:61:87:6c:c2:c6:37:0f:60:
8f:8b:08:cf:66:08:2b:f5:0c:73:34:46:13:7a:c3:
06:75:ed:60:7d:bf:67:10:06:53:d8:17:e7:b8:08:
90:bb:70:f6:74:8c:9e:dd:37:03:c6:f7:db:15:df:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:65:63:95:96:35:81:D1:F9:87:7C:54:EB:6F:5A:A3:E0:5A:FA
X509v3 Authority Key Identifier:
keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:66:78:56:5b:26:9e:6b:f0:04:66:e3:ad:8d:0c:66:eb:
c1:70:e2:9c:31:3e:60:cc:6d:31:69:c3:43:d0:10:7b:3a:77:
36:2a:36:be:c5:13:8b:65:bd:2d:47:41:45:64:92:44:96:a6:
71:e4:1e:f5:11:a7:45:91:76:20:5c:47:2f:17:5d:1f:01:10:
12:08:bd:30:e3:d4:fc:31:00:2d:c6:89:af:45:5e:29:c1:7f:
90:67:a0:7c:c4:91:7e:a3:d0:c8:d7:91:35:67:d9:96:ff:f8:
e5:6f:93:6d:69:48:c0:8e:3d:72:c0:77:d0:64:18:ff:cc:2d:
3d:06:2e:4f:95:69:a1:83:ca:ba:e8:ed:f4:bd:68:a6:ff:b9:
c8:88:42:6d:1e:15:22:43:b5:3a:be:00:b6:4b:5a:6a:26:c7:
d9:14:6c:82:ce:c4:84:ba:42:c7:a2:12:dc:a3:a1:78:0b:2a:
7d:c7:00:5f:ca:9e:4d:52:61:1a:ce:d3:87:99:07:15:ec:f3:
24:bd:b1:bf:43:a6:9d:76:07:64:cb:6c:b8:61:92:83:a5:f1:
76:99:13:f2:3b:bc:9c:72:04:9c:9a:d7:3c:8f:2a:59:51:73:
7e:13:30:c2:90:58:a0:a4:a8:ee:e2:42:46:ad:d9:f1:7c:ca:
13:dd:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client