Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier: gcZdU8QStiXDDLQ5K4YTIskd5485FFHBBT+5X/KjFUk=
Subject key identifier: 33:5A:AF:FA:8D:33:39:B3:12:DB:45:35:39:E8:16:4E:95:EF:33:8D
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 019D389C4B275DB1919294D73DF58576025E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number: 0359
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: JG93F9JV0BMvbvLzi+VqbcOVVRgEir4pZGmkJV4AGmQ=)
2: hkxJH8qDns81hHO_TEwuH8z_Eac.roa (hash: WI/ahDUF+5IzjpWVPH44VyOD7TChtaZ1JW84a/hYGec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4b:27:5d:b1:91:92:94:d7:3d:f5:85:76:02:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=335aaffa8d3339b312db453539e8164e95ef338d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:d9:0a:41:6c:3d:6a:14:3c:23:39:ed:23:
42:3a:5f:aa:b4:dd:5b:26:62:9c:23:7a:dc:06:7a:
23:d2:ee:ac:35:84:a6:c0:1d:50:51:f7:65:ff:2d:
13:75:eb:e4:3f:f2:92:df:b4:2b:28:1a:57:1c:89:
5b:95:f0:64:a3:60:dd:ac:7a:f4:0f:e3:9b:ee:40:
11:4f:e6:81:50:9a:64:4a:84:ae:d8:70:21:26:d2:
aa:f5:38:e7:89:b0:0d:a8:13:55:e6:bc:7d:04:eb:
fc:0b:39:68:d2:dc:a8:2b:5a:95:68:2d:4c:e0:25:
0d:7f:38:94:54:6d:87:9f:c3:9f:9a:cd:68:3f:9b:
a8:46:c0:22:84:28:b3:d8:63:ef:ac:b4:7f:26:65:
5d:ae:25:9d:7c:b9:9b:66:a2:98:a4:ad:51:b9:d9:
8f:c8:b4:b8:fe:0d:7c:be:24:1e:a3:f3:06:29:87:
25:3d:ba:8e:2a:96:0d:2c:19:c3:30:b7:fc:ef:ea:
db:a6:12:c8:1a:25:30:17:98:13:f9:bf:73:3e:90:
fd:55:69:b0:ed:37:29:25:56:a9:96:ba:2c:75:51:
15:27:af:91:49:75:a5:cf:14:43:8e:a8:c3:9f:ae:
27:ad:90:b4:a6:6b:18:ad:5d:0f:d5:59:9e:10:7b:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:AF:FA:8D:33:39:B3:12:DB:45:35:39:E8:16:4E:95:EF:33:8D
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:66:2e:4a:10:f6:1a:66:d5:2e:3c:08:83:b1:3a:ca:9b:
a3:67:82:76:b3:f7:ee:64:26:3f:af:0b:17:60:c9:c8:0e:0c:
96:b9:68:f8:65:84:05:d0:cf:01:b2:c3:ab:e6:61:03:f9:9c:
1b:a9:99:e3:85:03:be:12:a6:3f:5c:ee:7e:c0:57:e5:44:6c:
46:e1:39:f7:78:d1:47:d6:d8:d1:83:86:96:73:35:e4:2a:28:
7c:c7:4f:1c:e9:89:e5:70:2d:fe:98:9a:46:c7:76:c5:d4:08:
5d:66:a1:04:2f:bd:d5:ce:d9:8b:9b:e8:fc:85:96:5a:03:0a:
4e:87:50:1c:56:00:2d:d4:db:e8:9e:8e:bb:c9:1d:9f:48:df:
c3:9c:f2:9b:1b:67:d2:70:c8:25:3d:d0:37:64:94:24:20:a1:
14:48:61:fb:41:08:cb:81:55:3d:de:90:0b:18:51:35:42:2c:
cb:4b:60:19:91:5d:d6:3f:f4:46:ac:ac:6d:e4:03:c8:d6:62:
92:95:3e:2f:00:c1:a6:a7:08:15:f5:91:20:c2:c3:25:38:6b:
6a:f6:83:58:cd:83:ad:ba:bf:57:7a:eb:18:f1:46:76:d6:69:
9b:12:54:54:40:39:d4:c2:81:92:1f:ea:7b:ef:9f:c3:78:07:
ec:5f:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:50 2026 by rpki-client