Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: FMqTIBprsalhiV4xJYDpNAW9vDyFc5w6xECCI6S6fqM=
Subject key identifier: 63:35:B3:1D:14:E5:91:E2:03:BE:EC:4D:0C:3A:E5:CE:1E:35:E2:D7
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 019D39411796AF38FE4BE39DE2E174A5F6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 1007
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: _gW6_ATArxZNHvgaWQ05KuNKBX0.roa (hash: dFaWNsbS79y0+AVBCBe7DvN6VorOmUFS6jQbSvd7JW4=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: 31OayNzcnhcdWk2mx0q4jBh3l2bcfhMdG2hvnPGYh8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:17:96:af:38:fe:4b:e3:9d:e2:e1:74:a5:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=6335b31d14e591e203beec4d0c3ae5ce1e35e2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:24:2e:f8:d5:34:2d:44:29:d5:e3:84:25:
0e:e5:73:50:52:49:dd:7b:73:8f:d6:ee:0f:80:bb:
62:ad:30:40:b1:52:94:37:68:32:31:22:f2:82:1f:
ff:ff:bf:84:39:bc:4b:49:07:1d:bd:80:01:bd:a5:
74:46:91:be:6c:37:e9:d9:f8:44:0e:87:7c:9b:f6:
5e:a2:9f:1a:23:3f:f5:2d:d1:46:7a:ad:89:ff:81:
a4:3b:53:7e:03:af:c9:cf:7f:12:ec:4c:d3:fd:a1:
0c:8e:29:15:74:ca:ce:9d:de:f6:6c:b2:d8:64:c5:
81:f9:62:e3:82:b4:5a:ac:36:61:9e:51:32:5e:9f:
73:72:5d:3f:be:a7:63:ed:c5:79:c3:cf:c8:20:ab:
18:ab:46:34:17:8e:84:9a:85:46:e9:3b:8d:05:9d:
65:e9:4e:d4:85:fd:98:1b:b1:13:66:21:09:fc:1c:
d3:18:ad:6f:33:1a:c1:75:ef:93:1b:e7:a6:0d:17:
3d:ba:34:3e:df:e5:63:70:d2:9c:ff:03:c8:c4:22:
27:2b:67:dd:b9:5c:ac:b0:75:d9:7b:5f:11:54:97:
c9:fe:38:be:97:1d:3f:ab:d8:57:50:dd:8b:91:e4:
a2:ae:ae:2c:95:0b:80:9e:b8:99:16:57:d5:76:9d:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:B3:1D:14:E5:91:E2:03:BE:EC:4D:0C:3A:E5:CE:1E:35:E2:D7
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:ce:74:a9:a5:35:6b:cc:c0:19:13:5f:f4:db:03:90:00:
97:5b:89:e5:6b:c5:a9:11:38:a6:62:91:44:60:6d:e3:5a:54:
09:ec:7e:fa:b4:35:31:50:62:a7:7f:0f:59:7c:bb:2e:f6:c1:
dd:50:d2:7d:a1:c3:b6:a3:8f:f4:39:a9:80:b2:be:5b:bb:31:
32:7f:2d:a7:dc:b5:ec:1f:d6:61:0b:ea:d9:8a:b4:5e:50:bc:
1f:34:1f:26:ff:1a:0f:e5:e3:f1:5f:cc:3f:e8:13:3e:0f:2e:
38:01:79:56:f8:a1:f0:36:2a:55:c3:19:16:88:6b:e6:da:71:
70:d7:9f:65:3f:25:f6:d4:1b:5e:ae:0f:28:15:f1:65:6f:46:
20:92:4b:26:a6:68:da:c4:27:61:8f:e7:c2:a7:d3:ae:3d:76:
51:17:3e:68:ff:75:2d:ec:ed:e4:01:b1:f6:60:50:57:9b:36:
34:af:65:1b:fd:0d:fb:c9:69:b3:44:46:c6:ca:2c:b9:7a:6e:
50:4a:bd:6e:10:89:99:36:db:cb:b1:24:11:4d:7d:ef:a8:fa:
6a:76:90:ea:2c:3c:85:11:97:16:3a:2f:e1:83:c0:a6:f3:bc:
29:ae:8a:7f:29:69:95:86:10:3c:1e:80:bd:66:d8:8c:92:54:
27:3b:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:30 2026 by rpki-client