Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
File: 6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json)
Hash identifier: 5Z8k96Jt0QQciBUKhlvbWDvtutb57erW1qkbWvETMxk=
Subject key identifier: F6:98:8B:2F:F6:B6:36:40:82:E8:01:4D:EC:BC:3D:6E:86:46:F5:2A
Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
Certificate issuer: /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Certificate serial: 019D38D3555180E5CD199E8677D40B9B5633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
Manifest number: 0228
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: 3dATy8Rz38vfJ7auur2bAEUal5SpXU5XewnWthtiA/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:55:51:80:e5:cd:19:9e:86:77:d4:0b:9b:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=f6988b2ff6b6364082e8014decbc3d6e8646f52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:fd:53:2c:77:8a:da:1c:59:a3:89:64:f7:
8c:74:bb:7d:ef:27:b2:2a:9a:7f:86:df:c3:5c:aa:
98:f2:63:4d:c2:f5:a1:e2:c3:c9:60:23:9e:ac:3b:
b0:af:79:ad:1a:25:e6:be:f7:92:7a:3e:37:5f:0d:
cf:81:84:9d:20:1c:ed:9d:d1:f8:26:d1:87:5c:80:
18:67:f7:43:68:25:a8:40:28:cb:e6:9f:4f:bd:52:
a1:62:92:b8:7a:4c:6b:b2:9c:ad:5b:6a:c2:05:77:
6e:6d:21:2f:3b:dd:28:17:3b:60:8d:9b:a3:64:a6:
81:4b:91:14:d4:4d:df:ff:9b:36:a3:5a:22:a7:ef:
ec:de:8e:b7:89:d7:71:73:41:f7:e7:91:78:3f:62:
7d:d3:a4:c0:43:db:5e:c5:54:12:ce:9f:a2:49:97:
84:0e:3f:5c:93:04:c3:19:23:50:3d:86:90:6a:d8:
62:c0:c4:d5:68:a3:82:23:8c:ed:10:8b:33:df:f6:
89:ff:8d:b6:fd:64:6b:e5:dc:b3:c3:15:1e:57:1b:
4c:87:f5:30:9e:9e:ad:50:bb:c8:a1:14:7a:f4:0b:
d8:c8:15:cb:01:32:9f:f6:56:9b:20:ab:1d:75:dd:
53:f3:51:75:63:ab:4b:a7:10:5a:cd:ca:4d:06:e3:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:8B:2F:F6:B6:36:40:82:E8:01:4D:EC:BC:3D:6E:86:46:F5:2A
X509v3 Authority Key Identifier:
keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:16:bb:1d:6b:56:f8:8c:f2:db:7b:8a:d4:11:d3:55:b5:75:
43:50:12:d7:18:0e:5e:f9:30:ef:a8:65:6c:4c:5b:6c:1b:b6:
37:ef:14:84:82:44:df:7f:fd:94:40:41:bc:67:18:5d:c8:16:
e1:b5:ad:e5:02:8d:2f:fd:31:3e:64:54:41:b6:72:99:86:a9:
80:a3:4f:65:95:45:3a:81:b7:0c:76:b5:4b:11:d2:92:8f:54:
38:35:b1:dd:69:b5:c8:a6:d8:b5:a8:36:5f:9d:1e:ee:6d:c7:
8f:f1:76:05:9a:d0:a1:c4:9c:50:1f:1b:2b:71:fc:05:9b:6b:
30:b8:86:a4:1e:22:d3:c3:02:92:0e:b5:24:0c:d9:59:ea:44:
a6:bc:cf:c3:fc:c8:ad:8c:a4:16:a1:2b:8e:44:d2:5c:38:18:
15:73:09:ce:84:f7:5b:34:ff:97:82:12:e3:dd:a6:f1:ae:2d:
c2:42:00:f0:6e:9f:c8:f9:f0:f6:fb:64:07:dc:be:ea:03:4d:
6e:38:9f:5b:ee:42:1f:46:0e:6c:30:16:25:70:a7:a5:de:0c:
ec:c7:4b:26:d9:76:ec:3f:14:22:26:54:ae:d0:ed:70:03:8f:
53:8b:2f:51:71:29:a0:9e:95:bc:17:3e:a7:77:4d:b1:12:18:
b3:a3:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:20 2026 by rpki-client