Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier: vlK3TaDMdNY3MxdsVLnxzkBOhc0i8Pd6mtns1ZTCfXk=
Subject key identifier: 63:76:AA:03:D5:9A:9B:59:11:07:46:A8:A5:0A:14:41:2E:18:37:28
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 019D382DCB8BCC6639F762711C760451ADA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number: 14CF
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: BIbEENkk1VYHKgEjraLUKclwiTY.roa (hash: Xt3A7RQYaDzUTGNw8VMdtqurMB1YlizmqkVXb08fVNk=)
2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: YI+rfMUXoQMNE4LJdhbMXyQnGw4Tafimrw3X+of6Kao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cb:8b:cc:66:39:f7:62:71:1c:76:04:51:ad:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=6376aa03d59a9b59110746a8a50a14412e183728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:d3:9b:8f:d4:7f:92:74:90:57:61:8b:94:
4e:a4:5d:45:4f:e3:32:b2:07:1b:d3:db:70:24:63:
b6:01:cc:2a:c3:82:29:2a:3f:ce:6e:6c:7b:19:0a:
94:a8:c8:da:3d:df:d2:95:f4:7a:a5:da:5d:b3:ba:
f2:0b:c5:44:68:b6:29:87:5c:0f:7a:d5:df:f2:b0:
08:d1:72:44:43:71:45:69:a8:c5:e6:3d:a6:4d:cb:
a8:8e:e4:3d:07:55:57:2b:77:fe:8e:be:9e:0b:62:
02:cc:66:01:9d:86:cf:cb:36:41:5a:01:63:21:56:
6d:bd:f5:fd:e5:a3:a7:a9:de:0f:25:56:b6:60:4c:
d6:22:21:b5:06:3c:bd:56:a2:b2:7b:b3:4f:aa:61:
3d:c0:06:28:39:94:85:ba:51:ff:c6:fb:47:8f:85:
6f:7a:4a:96:da:2f:37:e8:0f:1a:d1:81:02:5b:6b:
e3:3d:22:4c:35:7b:c6:b6:b4:00:64:c5:26:cb:0d:
6d:8d:2f:c4:d3:39:8a:f4:0d:0c:fc:53:82:4a:3c:
ac:6c:fe:74:72:2a:27:48:b7:52:48:69:db:3f:bd:
55:ac:f4:73:83:15:16:67:ef:9d:3c:2b:37:d4:1d:
d0:af:7b:7f:fb:2e:10:3f:d1:b4:99:07:46:1f:47:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:AA:03:D5:9A:9B:59:11:07:46:A8:A5:0A:14:41:2E:18:37:28
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:14:ba:61:9c:c3:97:4e:87:66:fa:57:ac:25:ec:1e:96:
9f:62:fe:bc:86:d7:ee:97:73:a0:9d:62:db:f5:01:2e:62:e3:
48:38:53:75:d3:a7:0c:d4:f6:d6:b9:6c:a2:88:d6:b6:f2:f1:
49:85:e2:0f:59:1e:5a:f5:ae:a0:10:f8:9f:ff:93:32:dd:d0:
bb:b2:f7:54:40:48:c8:69:d1:93:8e:96:e8:96:4a:74:8c:a4:
6d:4d:53:c5:35:fe:22:97:85:ba:05:39:4f:5a:a6:97:24:29:
a2:34:6d:b3:bc:83:86:cb:bd:0f:d8:9b:e4:47:ff:0c:7e:b4:
d4:69:0e:34:72:6f:e6:5c:1e:67:6b:e8:38:ec:97:98:d8:2d:
f2:6b:b7:7f:c4:b7:3a:bb:73:03:00:5e:e6:9d:47:2b:6a:1f:
c1:cb:7d:ac:53:51:c6:d0:7a:35:e7:7a:6d:bc:37:56:27:d7:
62:d4:78:4d:ad:f1:07:9e:b0:1f:73:9a:fb:ec:05:aa:1f:2f:
8e:fe:9d:c1:73:d9:ee:00:e4:31:19:2f:6d:e2:55:d2:17:67:
c7:5c:dd:d1:6d:64:10:ef:ec:c9:c6:af:d3:a7:aa:2f:26:74:
ae:b9:10:ad:03:1b:5f:db:02:3c:49:e6:a6:65:80:4c:34:fe:
9b:c5:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:37 2026 by rpki-client