Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: v0yvF5iHK7bkbGV2dmm4twiVOByzy6hFTeOJFo0cN04=
Subject key identifier: 9B:DE:6D:FC:75:7A:B7:DC:4D:99:7B:70:D6:0E:0B:4E:A1:00:85:36
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 019D371BD9BBC420325ED611603A799E37EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 0766
Signing time: Sun 29 Mar 2026 01:01:05 +0000
Manifest this update: Sun 29 Mar 2026 01:01:05 +0000
Manifest next update: Mon 30 Mar 2026 01:01:05 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: NL9ouSH1ja8g+RFbcqMQ6sxwtoe2SgK1KIQ1r9cafcw=)
2: Bo61RTRTOhfwB50Bqs5zl4FzjGE.asa (hash: fR/GqKb8wiw/0kJKnHBnbPsaaq7HXPxVfPXam3jXJ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d9:bb:c4:20:32:5e:d6:11:60:3a:79:9e:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Mar 29 01:01:05 2026 GMT
Not After : Mar 30 01:01:05 2026 GMT
Subject: CN=9bde6dfc757ab7dc4d997b70d60e0b4ea1008536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:7b:5d:d6:35:b5:9f:89:81:ac:e5:14:c3:
14:35:4e:05:c0:b5:48:5d:65:d7:98:10:b3:d2:80:
94:44:48:10:b8:18:7a:c8:03:8b:f7:15:86:da:a5:
cb:4f:90:73:dc:b9:9d:47:66:e2:2c:13:07:6c:f5:
ad:5d:48:ad:16:35:07:80:c5:c9:1a:1e:14:be:28:
04:06:7d:ad:62:cc:52:c8:72:10:3c:50:e1:8c:09:
df:90:fd:cb:77:89:8d:9f:25:51:ab:ed:65:e5:2d:
4a:ed:4b:b5:f2:2d:32:ca:0c:61:9f:e6:c3:76:55:
74:47:d1:5e:35:b3:32:23:7c:25:ab:7b:15:80:f6:
c4:32:53:8f:d1:49:f7:19:b1:85:01:a2:d6:64:08:
08:75:14:d5:c4:d4:d5:b9:18:7a:bf:c2:34:99:4e:
9f:71:c6:cf:e8:77:7e:fd:a1:4c:87:c8:0b:d7:77:
cd:2f:53:1a:24:bf:6e:c5:cc:9d:b5:d6:89:f6:1b:
e6:99:73:5c:86:49:0f:69:84:d4:fd:7e:65:b6:fd:
ea:12:fc:b9:f1:41:7d:75:a1:f2:17:f6:1e:e3:d7:
3a:e3:43:ba:88:bf:46:8e:19:c1:13:2d:b2:a8:e8:
a9:15:42:a7:b9:3e:71:cc:16:ab:af:dc:cf:1d:5f:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:6D:FC:75:7A:B7:DC:4D:99:7B:70:D6:0E:0B:4E:A1:00:85:36
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b8:b3:b7:09:8f:8c:34:c4:e2:a5:1a:47:5e:21:0c:42:16:
fb:af:8f:97:e4:c6:c6:a8:46:e2:03:4a:b5:62:04:17:a0:a0:
fc:42:d5:8b:71:89:d5:63:68:14:34:80:31:2a:8a:83:66:71:
23:52:fe:6a:20:bf:a6:36:ba:81:b3:b8:dc:2c:72:b0:5d:b5:
fc:63:65:bf:70:e7:df:76:fc:68:19:ff:20:16:c3:5d:0f:6d:
44:29:43:cd:60:dc:22:a7:d9:c7:a1:2a:97:d6:79:40:ad:44:
ef:0e:3a:bf:5c:af:bc:ba:35:d7:8c:9f:1e:67:18:4e:66:c6:
40:7a:81:6f:a6:b5:cc:e1:a4:84:66:7b:15:26:3b:01:a7:ec:
39:41:4e:a9:13:08:1c:52:81:37:33:c1:3f:94:0a:31:ec:53:
5d:ac:71:18:70:b0:91:1f:f8:3c:1a:8e:b0:46:5b:ad:ed:05:
ee:20:20:38:89:24:b5:f7:2e:9f:a2:b6:55:26:0c:37:17:32:
6d:5f:08:4a:32:01:ca:2a:13:33:fb:99:27:67:5a:ad:aa:3a:
7f:9b:2f:e0:63:c4:59:ce:8f:60:85:ca:0b:33:6b:cb:71:00:
b8:0e:5c:61:90:f9:d6:82:49:be:60:c3:d3:a8:44:d0:d3:9a:
0f:eb:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:32 2026 by rpki-client