Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: iyX0xyXlkCTxV9VVIsOBDzSt8OsLqdKtmX4c+AWbZbE=
Subject key identifier: 76:9F:B6:F4:3E:46:D7:C3:11:A2:4A:3B:04:34:CD:00:AC:51:E9:D9
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019D3752D4EEB495BDAEC40CF7A94467438E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 094D
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: rgLBg5364fL8zcNfGBt/zUM4PCeujPlhckRUhXqt34M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d4:ee:b4:95:bd:ae:c4:0c:f7:a9:44:67:43:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=769fb6f43e46d7c311a24a3b0434cd00ac51e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:f7:9e:74:03:28:33:b9:e5:5d:97:da:1d:
a8:9d:b9:9a:e0:e4:9e:69:a3:23:c4:43:e7:7d:6a:
0c:6e:90:aa:76:aa:fa:50:03:fd:9d:7c:73:83:60:
da:32:41:ee:fd:e5:bb:cd:b1:85:60:49:59:34:5d:
a9:74:db:06:97:36:18:14:fc:02:4e:ae:60:63:77:
43:3a:bf:34:17:10:c0:b9:14:18:c3:5c:cb:9c:6d:
28:33:7a:64:d8:70:5a:53:68:ad:68:7b:49:77:96:
bd:aa:fd:39:03:01:5b:88:b9:75:1f:53:27:6e:fc:
80:a5:3f:96:10:2e:0c:1b:9f:24:5d:83:e3:58:7e:
be:e6:eb:f2:1f:3f:4b:16:3c:82:24:00:6a:d0:c7:
ec:b0:e1:98:06:a4:f1:27:c8:21:e2:57:7b:aa:92:
16:07:02:70:c6:df:06:ca:2d:a1:62:3f:00:ac:e2:
13:74:db:e1:98:9e:9b:b2:59:8a:20:83:7e:ce:a2:
a0:61:2a:fc:f4:2b:d8:02:93:3b:1c:f7:ce:57:6f:
c0:d3:54:37:36:03:d7:13:fc:04:1a:62:9e:f1:c9:
4b:da:2c:a7:6f:4a:6b:9a:3b:c3:13:66:ee:4c:ec:
1e:65:73:a5:23:bd:5c:3f:41:79:c4:1f:10:03:ec:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:B6:F4:3E:46:D7:C3:11:A2:4A:3B:04:34:CD:00:AC:51:E9:D9
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7b:cb:73:53:f5:a5:63:fd:56:73:1d:c8:84:71:ce:25:f3:
ae:e7:9d:6f:07:ef:be:07:93:79:b4:89:f8:1b:cf:89:b9:72:
aa:86:93:0b:49:1a:23:cf:fb:9d:8d:db:c0:78:3b:86:cc:e3:
24:63:c3:a8:d1:d3:33:bb:f3:6d:6f:42:5c:1b:16:7d:32:ef:
42:c0:d5:c6:7e:aa:8d:ad:89:2b:bb:24:da:2b:9b:0c:cc:e5:
9e:25:77:36:13:55:d4:1f:5f:71:11:c9:74:b8:d7:97:55:a4:
20:f7:ce:4b:4e:a5:2c:83:9a:f7:e9:b8:07:23:04:f6:13:39:
09:9b:dd:b1:82:e9:30:a4:5c:f2:87:c9:71:1b:2f:d6:79:3e:
73:b0:81:d4:e1:52:82:9b:44:e1:5c:6c:0c:b0:ed:1a:4d:59:
63:bb:ac:5f:ee:f8:fc:0a:f7:10:a3:d9:0f:c5:62:54:fa:e5:
27:71:0b:48:98:2f:6e:52:e8:01:cf:a6:d7:51:7a:06:75:f0:
6a:12:4f:86:2a:3a:34:90:90:29:c8:17:e7:43:02:0f:6d:03:
53:ae:f4:61:71:15:5c:d7:13:d2:c1:c6:92:ba:f8:93:7b:52:
4c:df:f0:dd:54:27:c7:66:a0:5d:61:04:42:91:a3:e7:ed:05:
9c:26:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client