Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: TftGN0XxvOBpB3nWmPXS7rYdFKF3dIvwf697byvv9To=
Subject key identifier: AD:74:B2:23:57:FC:30:B7:B9:60:AA:1A:0F:A1:DE:BC:D9:FF:7B:FC
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 019D3977F2AA34B70B10D0BD02A04F4FF837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: XbqJr+4L85ycmO7OoU6yz4xwkEAUds9ZZvbg8tzs5Cw=)
2: hm0yzTK0b7qXlzutucuPmlCxGCU.roa (hash: hv0VBvVubXMhG6KhX/vN7Xc4XTlNc7CyGB6Tgv3eXXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f2:aa:34:b7:0b:10:d0:bd:02:a0:4f:4f:f8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=ad74b22357fc30b7b960aa1a0fa1debcd9ff7bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:ac:17:f5:c8:52:df:7c:7f:e2:59:be:24:
b3:bf:a0:83:07:49:5a:65:97:55:8c:a3:5c:11:64:
fb:6a:6c:6e:34:44:b7:2a:e8:6a:18:6a:da:34:af:
3c:4e:e5:b6:94:b1:3d:b3:12:29:ed:ec:fc:64:dc:
85:6e:2f:0e:8e:21:ec:fd:15:59:53:70:e0:3d:59:
b1:ab:89:e6:4d:f6:54:04:25:3d:44:7a:7c:73:33:
53:39:05:c4:0c:82:bd:2d:ff:2b:03:cc:62:b6:7f:
08:6b:76:59:84:26:de:d4:03:a4:ea:76:2c:d9:5a:
3f:d5:bc:df:79:74:b6:93:b5:89:a7:09:e3:2d:a6:
1e:b7:2b:51:23:b5:dd:65:80:4a:58:56:27:70:fd:
aa:ae:d4:34:9b:c1:c4:ca:8d:75:df:a9:ee:64:80:
ac:92:a8:00:09:5f:a3:f9:08:42:7e:d8:7e:15:bf:
c3:31:8b:f7:ad:a5:f0:2c:7b:2e:8d:b3:e0:63:fd:
84:54:5b:eb:09:98:52:9d:fe:4b:b2:63:3a:aa:3c:
68:86:66:84:de:fa:59:87:04:90:f9:76:63:b4:0a:
e9:22:6d:fe:89:ca:b4:9a:f0:40:1a:81:ba:7b:ce:
cf:a1:b7:42:b5:9b:64:a5:3c:d9:c3:14:93:bd:76:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:B2:23:57:FC:30:B7:B9:60:AA:1A:0F:A1:DE:BC:D9:FF:7B:FC
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4e:3a:72:f8:b1:0a:9e:20:e6:16:df:57:93:16:c8:5b:1d:
9f:03:32:e7:ca:cd:e1:56:ca:9a:3d:97:b9:4d:d7:b7:1c:bd:
06:ed:5d:a1:5a:00:61:7e:0c:f0:55:1b:00:91:d6:b7:87:23:
51:4e:8b:4a:74:fd:63:64:34:30:ab:81:0c:6b:46:72:b3:9c:
35:78:a8:55:7d:5e:0d:fe:aa:77:67:ff:84:9f:7c:da:2e:e8:
dc:f3:8a:94:d5:77:32:e8:d5:d6:ba:95:f8:de:d6:0f:10:70:
ae:12:56:03:e1:ec:ee:55:b5:86:67:7a:f7:42:b8:79:2d:9a:
90:2d:b4:59:5e:6e:1c:b3:30:a6:00:c6:8c:83:6f:97:10:d7:
15:3e:86:a9:00:14:af:8f:0d:ba:ac:9f:be:c0:4c:07:ca:e8:
8f:63:bb:59:67:7b:fc:44:36:e2:7a:a1:59:a0:c1:f9:c2:cf:
c9:f9:4f:47:e9:23:8d:83:0d:6f:4b:7b:8e:49:1b:97:8a:a4:
91:65:00:e2:d1:4f:65:9e:e6:81:56:0a:c7:42:07:9f:e3:01:
f3:8c:d1:f5:b1:0a:11:7e:b1:65:1e:7a:cf:d4:27:07:33:24:
fb:02:2d:c0:b9:34:2c:64:26:a1:59:55:8b:07:c6:db:a7:e9:
e2:af:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:12 2026 by rpki-client