Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: NLoANmHxcMPabCWm7xzhY/SN1b2MHEVmZxOvTI+kMM4=
Subject key identifier: 2B:43:C7:F9:54:BF:C5:F5:8B:3D:FC:5C:AC:18:06:E6:0D:82:18:C9
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019D3752D666A3190C178026F6B75A345519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 061A
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: 80lD/9wCE57KRDCW8JhXGeuUzLLeh7RS7j9IFGR/+k0=)
2: vatD6IyOJfXLFso-oQNdkHZ0B5A.roa (hash: CF8afvvRrtxwksEOb+htGDBoa1bLNCvDnWuii8t0Lrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d6:66:a3:19:0c:17:80:26:f6:b7:5a:34:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=2b43c7f954bfc5f58b3dfc5cac1806e60d8218c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:d2:ca:5f:1b:89:f8:66:ae:5c:09:a7:50:
27:03:9f:a6:26:60:12:b1:44:b4:88:2e:eb:a7:f7:
18:9e:20:80:f7:33:d6:df:5b:24:63:2c:61:e0:33:
70:0f:b5:db:b8:5c:9d:c1:78:be:6e:25:ad:67:7d:
12:34:6f:f7:ad:ef:1f:c5:bb:ad:5a:cd:95:51:f8:
ba:84:82:fb:ef:52:95:19:a2:c1:05:be:7e:10:e4:
64:29:f5:fc:cb:41:96:29:12:03:47:82:71:85:c9:
1c:cc:13:e4:8d:63:2e:86:27:e2:77:d0:f2:1f:83:
1d:18:81:17:51:67:d7:5a:76:98:c5:c1:a9:c2:66:
c9:4c:07:00:f6:7e:6b:1b:b7:39:95:e1:48:a0:fe:
d9:fd:18:33:4b:2c:23:28:0d:39:c2:24:28:50:93:
c2:1c:cf:05:83:48:f3:d0:8e:a2:cc:23:f5:96:4a:
5c:22:72:ba:e2:a1:2a:9b:84:99:18:25:2f:c5:7b:
ee:30:7a:d4:4b:db:25:b0:77:44:18:97:11:b5:ad:
4b:16:1e:bc:3b:df:70:78:f7:46:72:7b:3e:55:50:
cf:ed:f2:d4:6e:51:92:9e:b0:68:4d:11:ef:f4:64:
aa:ce:90:3d:96:c6:8d:f6:70:c6:92:67:c9:7d:fb:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:C7:F9:54:BF:C5:F5:8B:3D:FC:5C:AC:18:06:E6:0D:82:18:C9
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:53:72:6d:2c:11:a4:03:dd:5f:7c:28:e7:a0:e2:9a:01:98:
1f:b2:01:67:68:bb:b8:b3:31:cb:9c:66:e7:33:74:77:7a:79:
b6:7f:3a:08:79:dc:57:52:df:1b:42:f7:2d:f9:34:d3:1e:2c:
37:98:35:82:f3:7d:79:62:aa:56:7b:ed:b6:8d:40:bc:06:48:
62:3e:d0:09:34:c5:12:db:87:53:ae:82:c3:55:38:f7:dc:b8:
8c:96:de:0b:a0:a1:df:71:36:57:e4:fa:83:84:3f:40:17:2e:
c2:67:75:4d:99:6c:7a:4d:39:00:a9:8c:ca:cc:b4:54:21:08:
f5:ca:80:bc:c5:97:af:7f:a4:41:7f:90:00:b1:87:d7:80:b5:
02:eb:20:94:4f:5d:87:b5:70:e2:06:3c:b2:a4:41:b8:e4:03:
1e:34:a1:3e:6c:ae:d0:22:22:f6:e7:aa:38:4a:c1:63:1e:b7:
f5:fb:22:1a:13:ec:cb:09:f1:d7:f2:60:53:f9:39:62:c6:37:
9c:0c:3b:de:1a:72:65:ce:9b:ab:8a:fb:48:c1:ec:42:d5:42:
0a:30:49:39:49:d9:3f:f8:50:e6:87:f6:f7:71:5a:27:61:07:
58:7f:43:a4:7b:69:db:1d:60:b5:d3:8b:95:6b:67:87:de:f3:
61:48:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:59 2026 by rpki-client