Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: /cIYw9KZI/1e+TcGfZlRpfMQtvzHVioFuWdzyf5SLFQ=
Subject key identifier: 99:B6:0E:2B:3C:6F:D3:31:51:02:A0:BE:9B:EB:A0:50:43:2F:93:DE
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019CE41103C9FBDC55DBEAC1B2D4487A3CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 02CE
Signing time: Thu 12 Mar 2026 22:00:46 +0000
Manifest this update: Thu 12 Mar 2026 22:00:46 +0000
Manifest next update: Fri 13 Mar 2026 22:00:46 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: Y1DDQ8T0hR6B1WOzfQQOxQ2YiWKpzd5TfgAAGGmsDm8=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:03:c9:fb:dc:55:db:ea:c1:b2:d4:48:7a:3c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Mar 12 22:00:46 2026 GMT
Not After : Mar 13 22:00:46 2026 GMT
Subject: CN=99b60e2b3c6fd3315102a0be9beba050432f93de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:8f:49:49:6f:30:ef:d4:1f:5a:8b:02:8b:
f3:23:0f:fa:13:b5:be:4a:77:e1:47:ea:37:86:d3:
a1:b8:49:7f:6f:6d:7a:93:97:a6:95:d6:21:b6:b0:
5b:7e:44:31:8c:64:a4:0e:06:4c:b6:18:cc:41:30:
6f:1d:d4:c0:3d:f6:ef:13:93:ba:bc:bd:c4:eb:d5:
c7:b1:49:9b:75:f7:3a:79:d2:68:a3:2f:67:ba:03:
17:e2:4c:2c:45:4e:41:dd:f2:d8:0e:d8:e6:95:9c:
bb:3d:96:d0:89:87:be:cc:62:d9:3b:91:51:64:7a:
e2:a6:da:20:55:d2:72:a6:24:14:9c:9a:e5:54:2d:
4f:ec:8a:e7:89:b6:5e:2a:3f:0d:08:28:8e:e9:2c:
f7:4a:e9:32:19:8a:53:02:cb:bd:cb:d2:f6:01:7c:
b6:ff:44:c7:db:d8:82:87:80:82:93:1f:6c:db:06:
b3:c0:05:c2:b4:d0:fd:af:8f:77:89:b8:e0:eb:21:
0d:a7:d9:52:45:8e:0f:16:d4:1e:02:42:03:40:4f:
64:cd:ee:6f:cb:d2:39:d6:53:ff:50:ac:3d:d3:cc:
1c:ba:14:a2:1e:80:f5:03:1b:07:f3:ac:b8:a5:2a:
70:e4:5b:69:0b:51:42:8e:97:90:59:d8:9f:fa:94:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:0E:2B:3C:6F:D3:31:51:02:A0:BE:9B:EB:A0:50:43:2F:93:DE
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f2:82:02:ae:9d:16:47:aa:09:34:f7:e2:1f:e7:2d:68:68:
4d:d9:0d:46:c7:70:04:1b:ca:ae:d1:a9:78:44:4f:e8:4b:71:
ed:0c:9d:0c:5c:fb:50:25:43:6d:fd:4b:9c:bf:5c:8f:5c:b1:
24:37:10:cc:f2:08:a4:1a:f2:9d:36:18:9f:4a:c6:1f:6d:15:
07:ae:35:b4:9f:76:13:b4:d1:e9:aa:20:c9:2c:8f:cc:5f:b9:
45:b2:45:4b:22:49:64:b5:a4:30:97:d8:64:fb:d1:56:52:06:
f7:23:91:a2:5e:25:35:d9:e9:39:16:3a:8c:5b:25:14:b3:bd:
ab:a7:64:93:b8:c5:73:72:9a:04:ff:dc:2b:c1:0f:d8:dc:d3:
e5:4d:f8:e5:1f:56:4f:bc:12:4b:d5:08:49:7f:0f:e5:ed:40:
d7:24:15:d9:ff:d1:23:d9:67:7e:03:28:39:09:0b:da:50:bc:
b9:58:6c:e1:c8:4b:72:f1:13:4a:c7:88:18:53:e7:b2:a5:44:
09:19:af:aa:12:7b:55:28:ea:54:c1:49:79:55:b6:b6:96:1d:
22:b5:17:ce:10:ab:57:43:df:76:b0:2b:1b:0e:cd:82:33:ad:
50:fc:2c:ce:0c:ab:3e:1a:a6:67:ab:d9:65:4b:e8:69:62:a6:
f2:44:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:16:05 2026 by rpki-client