Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: uOMl2p7ArSLxnEavby0Yy4gEuO/UssY9xA8j6EiPhsg=
Subject key identifier: 3E:05:DF:B0:07:82:59:5E:DB:F9:50:2B:4B:78:81:76:85:CC:65:0A
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019D12D8AB06158AB519DB20C5127EB46D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0BD3
Signing time: Sun 22 Mar 2026 00:01:22 +0000
Manifest this update: Sun 22 Mar 2026 00:01:22 +0000
Manifest next update: Mon 23 Mar 2026 00:01:22 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: OlXau2K9IixC459yYvAoA2ugdWVFSLRuASouAViejEg=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:d8:ab:06:15:8a:b5:19:db:20:c5:12:7e:b4:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Mar 22 00:01:22 2026 GMT
Not After : Mar 23 00:01:22 2026 GMT
Subject: CN=3e05dfb00782595edbf9502b4b78817685cc650a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:ef:55:be:4b:2d:6c:a6:28:a2:9c:21:c0:
88:6e:a2:52:4a:99:d3:63:56:7d:ad:24:4a:09:99:
b3:d3:96:e9:35:3a:3d:75:8c:90:e8:a1:57:aa:67:
c2:1a:aa:42:bd:53:86:3a:3e:57:5c:cd:ae:26:e5:
bf:1b:02:f2:d3:d0:6a:a8:f6:01:43:74:5b:b4:90:
9e:27:27:37:a1:d7:87:67:c7:ec:5f:c6:0d:74:d3:
24:3e:dc:1f:d2:f5:88:fa:94:97:a1:b4:40:cc:d8:
c5:08:a9:02:55:13:99:cb:60:b7:ec:4e:8f:45:2c:
e8:1a:52:31:9f:7d:f3:7e:95:ff:da:a9:e4:3c:f0:
82:86:f3:5f:02:3a:15:a9:50:17:62:3a:01:f9:58:
d9:60:8d:fa:12:55:53:ad:f4:35:55:22:21:e7:e6:
77:61:6b:b7:da:52:d8:11:22:dd:73:e5:fc:21:cc:
56:9f:9b:ea:f6:6f:ad:1a:e7:3b:a0:5e:8f:aa:8e:
97:e5:e4:a6:14:b0:78:52:77:21:df:4a:de:29:9e:
e4:e9:25:d2:f8:0a:be:dd:e7:ed:10:15:c0:ba:6d:
23:59:f9:64:3b:ed:29:2a:0b:31:a9:dc:28:d1:93:
7c:7b:1c:ec:b3:b7:01:34:f4:3a:33:2c:4e:a1:30:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:DF:B0:07:82:59:5E:DB:F9:50:2B:4B:78:81:76:85:CC:65:0A
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fd:0e:9b:ac:1b:87:36:56:33:5d:f0:11:a3:9d:f1:ed:dd:
41:26:67:e4:49:bf:fd:27:23:0e:7b:c0:91:cc:b1:b3:03:bf:
9b:5a:fb:0f:a8:e3:d7:0f:98:3c:63:9f:6c:8a:4e:06:36:90:
67:39:70:96:8a:33:a6:f0:20:89:6d:66:51:e7:5f:a9:ac:a5:
72:e1:46:27:ff:43:87:09:2a:45:48:4e:ce:63:09:52:2c:7b:
8b:56:6c:d6:ad:0f:53:9e:bc:5a:60:e0:6c:28:dd:d0:43:0b:
19:ba:7a:c2:e5:06:4f:23:0f:9a:67:d1:80:c7:d1:2d:16:e9:
39:81:6d:c0:6e:0b:10:99:6e:f2:25:21:f7:c3:22:e1:72:b3:
13:01:4f:93:c9:ee:db:07:2f:49:8a:a2:ba:89:7d:4c:31:3d:
52:b2:ac:97:9d:22:3c:da:d6:73:55:35:0e:e3:2d:e4:88:12:
66:ce:62:34:44:11:91:36:48:18:d4:a2:90:0a:fb:9b:32:c5:
d1:10:74:55:0f:1a:aa:b4:da:3c:ae:70:29:2e:7b:31:c3:47:
7b:68:a9:ea:5a:1b:73:a3:c3:77:35:50:3e:52:72:f5:99:2e:
8e:26:b9:8b:77:eb:ea:e8:be:eb:56:17:07:90:00:7f:bb:b0:
4e:fa:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:36:41 2026 by rpki-client