Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
File: R2ehIMt9otZLgS5viOE4CVMFVWw.mft (raw, json)
Hash identifier: lYNS5UVNPHwBYmvKvKPgl9uz/QBPj6g1QbLX7JJksio=
Subject key identifier: AF:6D:FE:91:DC:B7:81:44:6B:C3:91:06:37:E2:6B:11:59:D2:30:16
Authority key identifier: 47:67:A1:20:CB:7D:A2:D6:4B:81:2E:6F:88:E1:38:09:53:05:55:6C
Certificate issuer: /CN=4767a120cb7da2d64b812e6f88e138095305556c
Certificate serial: 019D3A1CFA89042C06B19AECE3C3F7EDCC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2ehIMt9otZLgS5viOE4CVMFVWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
Manifest number: 6C
Signing time: Sun 29 Mar 2026 15:01:10 +0000
Manifest this update: Sun 29 Mar 2026 15:01:10 +0000
Manifest next update: Mon 30 Mar 2026 15:01:10 +0000
Files and hashes: 1: R2ehIMt9otZLgS5viOE4CVMFVWw.crl (hash: rXGqahZOjG62XZjZgTKLYgLiUtwAMEeZINnoCH5n2Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2ehIMt9otZLgS5viOE4CVMFVWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:fa:89:04:2c:06:b1:9a:ec:e3:c3:f7:ed:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4767a120cb7da2d64b812e6f88e138095305556c
Validity
Not Before: Mar 29 15:01:10 2026 GMT
Not After : Mar 30 15:01:10 2026 GMT
Subject: CN=af6dfe91dcb781446bc3910637e26b1159d23016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:89:78:1d:a7:bb:97:6d:c8:bb:bd:68:d8:
c1:c3:8a:52:14:ee:de:8f:00:29:9d:01:70:4a:f3:
65:7b:60:e4:38:32:33:68:f8:44:6e:68:78:34:fa:
6b:d4:42:5a:ff:b2:e7:6c:0d:27:8b:75:c8:9d:54:
ea:10:e8:f3:20:1c:a9:06:19:77:08:cf:37:f4:96:
bb:51:44:06:4b:af:eb:fd:21:a8:99:55:01:96:55:
fc:73:f0:64:54:12:13:f1:ec:ed:66:53:00:0f:3e:
1f:49:e3:c2:c7:ff:28:19:c5:ff:a4:83:ec:3f:90:
99:b4:c9:dc:75:07:a5:eb:53:a3:68:da:5f:a6:c4:
10:e9:27:46:91:5d:4b:63:64:6c:36:7f:5a:57:54:
6f:19:99:d7:0e:d3:da:c3:21:87:b3:e2:a9:a3:50:
df:cd:82:ac:fc:58:b1:28:1b:ce:69:a9:53:e6:18:
c9:a0:c7:ac:f9:a9:f0:4a:1b:ad:cc:b2:36:da:c7:
32:fb:f2:44:80:ce:76:0a:19:3e:2b:1e:ff:07:7b:
7d:06:6d:d2:c4:ff:a6:a5:06:20:1e:e1:aa:6c:00:
90:3f:b2:b4:ff:64:95:ee:ee:71:79:1e:e9:96:d9:
f6:47:a3:ed:38:2e:83:64:44:fc:72:22:5a:df:87:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:FE:91:DC:B7:81:44:6B:C3:91:06:37:E2:6B:11:59:D2:30:16
X509v3 Authority Key Identifier:
keyid:47:67:A1:20:CB:7D:A2:D6:4B:81:2E:6F:88:E1:38:09:53:05:55:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2ehIMt9otZLgS5viOE4CVMFVWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/190ba6-c4b3-4a52-800b-4352e880a8f9/1/R2ehIMt9otZLgS5viOE4CVMFVWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:96:70:d8:de:b4:5b:5c:41:ad:ca:be:b8:8a:b0:da:4d:31:
71:26:1c:4c:17:25:b3:79:e9:90:19:a1:c8:46:ce:8a:16:e6:
98:9c:ee:3d:87:62:7b:82:49:9d:f5:98:b2:97:f9:80:2e:5c:
dc:ff:bd:ac:9f:71:9d:f5:93:c9:8e:42:53:71:44:75:7d:9f:
95:c0:9b:64:6d:fe:74:b9:b1:f4:26:9f:47:7a:58:34:b4:3e:
0b:88:26:75:f8:0f:fe:f6:e8:6b:56:c9:a9:b7:e0:9b:b5:38:
63:bf:7e:0b:d6:e8:b9:bc:f0:b2:04:70:e2:ca:1f:8c:19:5d:
bb:6f:07:0e:a2:85:cf:2e:93:f1:0f:05:46:3a:23:14:10:30:
0a:85:bd:90:8f:8d:a4:30:ca:c0:f2:2f:20:08:bf:f9:dd:65:
b4:ff:73:15:53:4d:be:e8:9c:48:b4:12:f5:fa:35:1b:d7:f4:
ac:65:6a:97:d2:20:77:e7:db:8e:34:4e:b8:ca:0a:ba:8d:5e:
1d:8f:70:89:a3:13:00:d9:4b:d8:c2:a0:9b:fc:82:ea:c4:08:
00:74:c8:b1:88:65:4c:0d:86:00:b8:a6:df:f9:e8:83:40:74:
73:6a:ed:a2:28:c2:31:14:8b:a3:7d:d0:b5:95:32:f4:f1:76:
1e:aa:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:26 2026 by rpki-client