
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: n6FvhO/vH2Ze65XuTp+Cy5CNsb88SftMaXsiFH+m9Uw=
Subject key identifier: 3F:61:46:0D:2F:C6:B9:47:33:39:56:98:55:02:AE:94:DD:9D:C8:CB
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 019D382DFC4C588C1AE54DAB1A67E6302569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: YvI1b9PS051K0Bxp4WbpUmkkGesFTRODaE2TLcJdSEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fc:4c:58:8c:1a:e5:4d:ab:1a:67:e6:30:25:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=3f61460d2fc6b947333956985502ae94dd9dc8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:22:9c:1f:47:af:9c:5b:46:07:50:00:dd:
0f:77:fe:d2:22:a9:cf:90:4a:3d:a5:1a:25:61:cb:
48:40:15:42:5f:bc:22:2a:b5:76:04:dc:db:bc:39:
df:b9:91:0e:ab:59:75:8f:87:36:20:c1:51:d5:67:
d6:e5:b5:2b:d9:01:78:b7:fb:cf:34:f5:70:b3:c4:
33:68:c6:5f:1d:b7:ba:63:c7:1d:1c:07:7b:05:86:
73:8f:1c:8e:90:28:48:9d:41:04:24:b3:ae:a4:d5:
ab:0b:f4:6d:df:53:16:cf:6b:b2:af:ce:3c:78:d3:
be:43:44:88:c1:be:2f:09:f8:cf:68:1f:8a:14:fe:
54:12:84:7d:84:1c:f7:a4:db:81:35:85:55:3e:0a:
58:55:88:55:40:4b:35:ab:42:9f:9f:c3:c9:26:bb:
b0:2c:bf:6f:b2:36:e0:0c:3f:0e:0b:b9:6e:d9:ef:
56:5f:79:0c:0d:29:4c:d2:ce:57:84:53:8e:bd:23:
cc:97:ed:95:fa:b6:8c:62:12:d2:fa:b1:02:be:9c:
91:0b:7b:f0:69:31:d4:42:96:cc:60:d2:f8:85:91:
53:fa:75:b7:c1:86:68:e4:c7:d1:3c:9a:c3:c0:df:
ca:72:39:67:c3:93:ed:d2:d4:ce:65:ab:6a:e0:fd:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:61:46:0D:2F:C6:B9:47:33:39:56:98:55:02:AE:94:DD:9D:C8:CB
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:55:b8:7a:25:fd:ab:ca:e5:32:14:e1:88:c5:88:ce:8d:6a:
dc:b1:b4:62:31:e2:d4:7c:c3:38:37:c8:26:aa:58:c4:75:60:
fd:97:a4:f0:d2:bb:cf:26:99:c6:c5:8e:6a:ac:42:2f:90:3d:
92:b5:a5:b8:67:82:fd:3f:13:17:2e:bb:1b:73:48:99:81:25:
a1:40:21:81:6f:4d:b8:70:61:65:ef:47:1b:7f:ca:9f:3d:9d:
83:40:92:9b:ff:30:76:38:7f:30:91:64:8b:7b:d9:b7:ef:c7:
b3:a3:69:4a:f5:53:26:33:4c:02:e1:9f:42:4f:30:5c:02:f3:
cb:e7:a5:e4:c9:b3:50:64:53:f4:70:b3:f3:73:9e:24:8e:6a:
8e:db:8e:52:3d:e4:d8:83:30:b9:ff:3e:6f:5f:8d:2e:f7:9f:
33:cb:bf:b5:47:ce:83:ab:c5:e8:39:a5:e0:dc:ae:c4:a7:42:
3e:27:64:f0:ab:e0:d2:40:9f:86:22:82:4a:71:dc:15:1d:55:
5d:b6:61:c8:13:45:1b:03:3b:85:f1:c6:d5:bc:28:af:04:18:
0c:04:58:ea:df:e4:50:07:70:42:c9:3b:5d:ae:3a:06:a7:94:
bf:b9:8c:36:0a:00:f3:7d:6a:63:d2:63:24:58:99:34:4e:5b:
33:74:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client