Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier: RK7u17IPkiPXwa4P/pxFmNJam1dlsQREmXdlSE7JXTo=
Subject key identifier: BB:1C:3C:E8:10:07:70:33:04:C4:8B:9E:64:66:D0:71:62:88:9F:62
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial: 019D3941A94F40F0A7C81F918081F2C5CBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number: 02A9
Signing time: Sun 29 Mar 2026 11:01:37 +0000
Manifest this update: Sun 29 Mar 2026 11:01:37 +0000
Manifest next update: Mon 30 Mar 2026 11:01:37 +0000
Files and hashes: 1: 40mGcXCMHPuRla1zKGXyXZBVzvs.roa (hash: WfYQcn+9zI1kuNsKzotUcFlUBcLcTv4/3QyWYbcWs7o=)
2: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: OpT9JG65dlYlMqoTDQq7WN2qeNlNaG1ShyaomtJaDJU=)
3: OtBfd7lwBBx9oZDAv86N0_1cG1M.roa (hash: mYV8iF1/FRjdO4p86cpzPjgZ6mNMXzTtT3N1Gdwv9LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a9:4f:40:f0:a7:c8:1f:91:80:81:f2:c5:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Validity
Not Before: Mar 29 11:01:37 2026 GMT
Not After : Mar 30 11:01:37 2026 GMT
Subject: CN=bb1c3ce81007703304c48b9e6466d07162889f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:f0:3a:f4:41:24:36:7a:5a:6c:8d:18:2d:
df:0f:b4:69:11:0a:c9:12:06:dd:1a:96:30:d9:bd:
fb:0d:44:34:15:ce:29:b8:16:65:8c:fb:69:dd:a0:
ef:f1:e9:eb:b0:48:7a:f9:af:ac:5e:08:15:a2:19:
67:6c:a5:cd:ff:03:14:14:69:f9:7a:b5:22:ea:56:
9b:8b:97:ba:b2:3f:15:3d:ce:9c:8e:67:d9:4c:a9:
24:18:d0:77:f2:9e:a2:58:cf:3d:d8:8f:ae:6b:72:
5a:7c:d5:70:c2:7e:de:4f:82:4f:36:48:71:fa:b2:
52:d5:07:b4:ab:90:9f:f3:f9:ab:50:c0:3a:c4:53:
47:28:d8:10:38:b0:ee:91:bf:03:31:29:95:a4:1b:
1c:f9:ca:04:17:bf:5f:35:a7:f9:67:a9:4d:60:e9:
09:c5:a4:1d:8f:95:9a:6c:f8:c1:e7:ec:0e:cd:97:
4f:6e:6e:d4:33:b7:03:c9:06:96:e4:80:96:24:07:
c6:13:e0:ec:73:1a:0c:98:a6:82:8f:88:7d:ab:cd:
5b:82:d5:fc:1a:c0:63:b5:11:cd:32:bc:4f:c7:0b:
cd:52:83:fd:fc:c6:b3:e9:57:61:02:d0:2b:c4:18:
c2:41:67:92:13:12:d1:e6:5a:a3:65:57:aa:4c:03:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:3C:E8:10:07:70:33:04:C4:8B:9E:64:66:D0:71:62:88:9F:62
X509v3 Authority Key Identifier:
keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:f5:61:04:20:30:04:d8:93:45:e8:68:50:ac:34:a3:7a:
37:73:bc:1c:29:81:ad:24:03:93:14:41:32:4f:49:4c:be:76:
ce:24:68:0c:73:db:65:0a:9e:e5:87:ef:4d:2a:bb:8d:a2:56:
9f:2c:7e:67:2c:3c:89:31:03:4f:4a:91:2b:6d:3c:69:97:14:
1e:08:28:74:7c:d4:55:31:72:0d:57:28:e9:8a:e8:05:88:ff:
90:77:72:d4:f3:44:d1:24:f4:dd:b7:96:df:a7:45:96:9f:f6:
34:17:14:86:53:06:00:76:7f:24:38:87:09:a9:ac:6b:01:ee:
84:89:ed:34:47:ad:df:81:7f:79:72:7e:05:39:b9:ff:a7:30:
55:d6:43:22:82:82:ff:3b:70:b7:b7:6f:6b:4d:45:e6:52:b9:
4c:83:2e:b9:1a:27:55:8e:8e:78:4a:77:19:d2:c9:34:13:9b:
cc:ea:5f:a5:0b:be:29:cb:e8:39:57:29:32:70:01:c1:85:1c:
d7:ab:97:1e:c5:da:88:55:f2:61:bf:88:b2:c2:d2:58:05:6e:
ef:a1:75:2a:e7:07:a9:5c:7a:20:51:64:8c:79:a6:38:7e:34:
05:dc:a3:ef:d6:b2:bb:78:b0:06:e7:63:56:36:cc:97:0c:42:
2f:5c:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:35 2026 by rpki-client