Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File: 6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier: o5OsYmADxaEd0lcoR1iEW46PiwrF1ex/qFdQpFinrvw=
Subject key identifier: 99:00:6C:02:B5:94:BE:17:F3:5A:05:76:B4:F7:EC:55:09:9D:CE:1F
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer: /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial: 019D39408280CEC0F7ACB88B2A7172E506DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: /mUd+5g+LFouTnItBpA9gvhOMzaKc8R3T4lahHrBoH0=)
2: SjzLfenUX4kznR2y8ruZeOnFvmw.roa (hash: vzCbx03F8+rxM1liQuyxsAk6fpt98wQC2kvOe4mhFm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:82:80:ce:c0:f7:ac:b8:8b:2a:71:72:e5:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=99006c02b594be17f35a0576b4f7ec55099dce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:80:6f:e2:7e:c5:d2:7f:34:23:6b:1e:79:
11:0d:04:b7:19:60:1c:ab:02:e9:31:77:84:58:e8:
5d:22:da:19:e2:7f:a7:7a:f6:c9:ab:ee:0e:92:91:
7e:6d:4d:f5:a3:e7:7b:96:6a:66:02:31:d9:5b:e1:
4a:92:36:48:31:4e:ae:d2:4d:f8:e6:ef:00:eb:07:
45:0b:62:61:65:56:fc:18:b3:f3:48:d4:76:f1:ee:
31:81:85:dc:16:6b:0d:c0:b7:9b:86:99:fe:73:e3:
e8:02:2a:13:3b:03:a8:6e:a2:7f:79:91:d6:69:70:
94:79:43:2c:b7:ab:a7:b8:23:73:5f:0f:50:3d:75:
da:d1:f7:3b:e2:1a:4a:90:07:54:73:d7:59:91:90:
a3:10:47:f1:04:6f:0a:bb:4c:36:ae:f9:b2:13:a7:
b4:60:d8:6a:13:60:35:9b:22:a9:51:2e:e5:2d:c3:
21:74:fb:49:f6:ba:1c:f8:80:47:d6:8f:25:e6:ea:
d1:7f:91:99:23:94:7c:09:20:f8:e3:89:3f:4b:95:
87:42:c8:7f:f4:61:b5:76:42:7c:81:a6:88:fa:6e:
3a:ce:5f:34:fd:37:76:67:40:50:fd:a5:d1:80:97:
40:b5:41:66:d0:54:30:4f:f1:60:81:29:7f:f9:14:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:6C:02:B5:94:BE:17:F3:5A:05:76:B4:F7:EC:55:09:9D:CE:1F
X509v3 Authority Key Identifier:
keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fb:8d:a5:60:cd:42:2a:d2:ae:7c:55:57:8b:8b:f2:46:41:
04:56:e2:3d:06:2e:59:45:d9:b9:a2:f6:8d:11:c1:78:eb:ce:
75:e6:cb:2b:d3:52:26:51:c0:0f:94:a8:e9:71:b6:33:43:85:
6a:39:e8:c4:fe:13:f3:73:13:e8:8f:d0:83:15:24:c0:60:49:
38:9c:45:20:98:24:17:64:2e:98:a0:1a:86:c7:99:1e:57:c3:
d5:1f:cf:5a:e2:4d:e5:fe:cb:bd:06:c9:1b:37:21:04:c1:c6:
aa:1d:78:77:7d:a5:6b:c9:9e:b2:92:fb:38:c6:a5:e6:cf:37:
b5:cf:28:96:f7:75:37:c0:23:82:53:b3:75:9a:ca:68:24:f7:
63:5b:44:42:5b:8b:9b:45:db:a7:51:65:98:6b:ea:9b:e3:84:
ef:e5:a4:f9:fa:2d:d0:fe:6d:0f:ae:ba:1a:ca:93:88:a3:5e:
32:89:50:9c:63:d7:1d:98:b8:3b:1a:47:0d:ca:61:29:1a:b2:
fb:a1:39:64:7a:9b:95:a2:87:91:77:43:fc:86:3a:3d:18:11:
37:34:4d:d3:13:28:9f:f5:16:8c:f3:51:58:42:10:17:1c:0b:
f4:15:8f:02:b0:a6:08:13:07:b2:de:62:d1:0e:52:da:48:df:
c8:7d:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:46 2026 by rpki-client