Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File: 6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier: T8Lk+E72ufNurKTIL0LmbzJ7Z/Ipi9naozXLcnvMkjQ=
Subject key identifier: F6:E5:BA:15:A8:90:7D:49:99:07:F1:04:E7:38:55:D3:14:98:FE:2C
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer: /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial: 019D3865BF4623D415704AFFF37BD26F3903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number: 0670
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: j5VLGMpdqCjGe0EE4yqBB+B6xT6GlSZ4qc/zo3jFpdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bf:46:23:d4:15:70:4a:ff:f3:7b:d2:6f:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=f6e5ba15a8907d499907f104e73855d31498fe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:de:6e:7b:c8:55:6c:f0:09:ae:94:87:05:
14:4f:4d:72:13:f7:25:b8:54:51:c6:4b:96:a0:60:
7d:9b:aa:0e:b4:54:1f:f3:5a:5c:07:05:25:8e:67:
6b:66:2c:19:21:5b:00:e2:7a:7b:7b:1b:03:f9:a2:
28:c0:cd:de:f2:e1:5c:6c:09:fa:56:ca:e2:c7:42:
a8:a7:c5:88:26:5c:9d:0f:ad:79:c4:88:48:79:fb:
76:35:01:b9:af:87:ee:66:a6:3b:cc:18:23:c4:52:
70:8f:5d:dd:71:af:37:d6:e5:2f:99:0d:2a:1c:f7:
e1:96:7b:37:f3:60:29:6e:42:09:21:07:89:7c:c8:
5f:27:74:33:64:38:d3:0a:3a:94:8f:0f:90:0d:a4:
f1:53:73:4c:c7:99:a8:ec:9c:01:4a:fa:f9:66:ad:
c9:3e:0d:04:ce:21:82:fa:8d:84:d9:e5:03:ab:cf:
40:5f:c0:5a:4d:bd:23:bd:7b:41:25:46:0c:39:e1:
6c:87:32:4c:ce:a8:9c:7d:36:c4:5e:71:75:bd:a4:
49:11:e9:23:6a:b0:52:a5:dc:07:f9:55:30:af:0a:
73:5c:77:77:75:fe:df:42:bd:93:f5:c3:09:76:ee:
1a:09:e0:28:b8:a8:14:05:e5:be:b3:66:cc:27:d1:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:BA:15:A8:90:7D:49:99:07:F1:04:E7:38:55:D3:14:98:FE:2C
X509v3 Authority Key Identifier:
keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:aa:06:83:78:0b:42:61:8a:9f:14:a5:04:eb:72:81:3e:
fe:4b:34:d0:d1:71:4d:13:06:88:4f:5d:43:ba:74:97:fd:5b:
ba:d5:76:53:d5:06:e4:eb:9c:50:be:ac:ad:ee:d2:1c:88:25:
80:d7:98:15:88:d3:8b:bd:52:6f:49:9b:99:1c:9c:97:34:3a:
5d:01:c0:cc:46:48:65:98:d6:f6:b0:ef:9b:bf:a1:17:e2:f3:
e5:8e:d9:8d:53:dc:05:f4:0e:ec:32:36:3d:f9:15:d7:82:47:
82:06:34:d0:cc:5a:f2:48:1c:e7:e9:cd:87:5b:6f:3f:b0:41:
33:2e:fd:9d:db:c8:cf:89:7b:19:8b:ea:54:16:95:ea:fa:21:
7f:27:58:b5:30:e4:30:ef:2c:b6:9b:1b:45:d6:c5:28:01:1b:
74:e8:10:f9:49:b7:59:b2:95:70:2c:d4:fd:f7:2c:97:bc:79:
3c:9b:93:cb:38:61:20:8b:09:fb:77:81:4b:76:0d:b9:62:93:
5b:55:76:17:76:bc:8b:81:43:c8:ed:c3:ef:12:af:5b:c0:66:
f5:e6:c2:57:4b:eb:84:62:a9:0c:a2:e2:95:79:34:b0:ac:1e:
7e:11:dc:92:66:c5:02:16:21:f1:84:a2:22:88:d4:3d:3b:3a:
5a:db:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:41 2026 by rpki-client