Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier: OwpXt0M3jA6M6uRqJUFFaOz1E2wCpzJM6uvi/nb8xPc=
Subject key identifier: 88:0A:C5:65:BB:A5:5E:A4:C0:2F:F9:DF:7D:94:95:4C:98:95:25:E8
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial: 019D38D39FE5F29674C970EC0CB56419D24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number: 0C82
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: Puker5TOQtSfWfJiB2A1t3CHhACowgYbQ7rrES+1+Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:e5:f2:96:74:c9:70:ec:0c:b5:64:19:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=880ac565bba55ea4c02ff9df7d94954c989525e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:0a:0e:b0:4c:42:3f:c7:b0:5e:46:0d:24:
43:39:6e:2c:69:a4:fc:59:ab:1a:b4:7a:ca:85:68:
78:f2:ea:4b:6b:4e:4c:bd:2e:2a:b8:82:2e:4e:6a:
39:72:f8:88:a3:5b:3a:57:92:6b:c2:c9:60:7d:05:
21:1d:6c:28:cc:5b:1a:c4:f7:f4:f4:ac:a9:3c:0c:
17:08:66:8a:48:03:3f:8d:ba:8e:b8:1b:48:35:87:
8f:95:fa:f2:9b:7c:72:39:92:30:aa:1e:c8:d4:d5:
93:e1:f0:6e:a6:d6:a9:a5:f9:e0:53:2c:ce:34:32:
94:9d:bc:fd:84:25:fa:54:45:16:b7:ae:03:bc:63:
9c:7f:f6:be:ba:4c:25:16:25:2d:85:dc:44:6c:a6:
90:1f:61:78:4d:63:53:eb:80:96:40:79:24:40:eb:
c7:bc:ce:1e:41:ae:f2:46:57:1a:b6:b1:58:46:b5:
b9:0e:ce:25:9f:9f:80:64:20:92:1b:9c:35:1f:5b:
18:5a:02:92:0f:38:a8:d3:2b:f8:ec:79:ff:0d:41:
30:df:70:c4:4b:20:49:84:28:a6:ad:48:a5:78:3b:
af:2b:e6:96:11:72:c9:c0:e0:b4:4f:49:55:9d:a4:
fc:9c:df:d7:8c:6d:d0:7b:78:d9:33:99:70:40:52:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:C5:65:BB:A5:5E:A4:C0:2F:F9:DF:7D:94:95:4C:98:95:25:E8
X509v3 Authority Key Identifier:
keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:c4:25:c1:91:ad:23:f3:45:a2:59:cf:05:bb:12:e6:89:
c6:12:4b:04:e2:6d:fb:4d:36:c2:9f:2e:ad:45:08:51:60:0f:
55:d8:7e:0b:47:11:cb:23:30:84:49:6b:72:48:ab:f4:17:4c:
f4:11:3e:9e:08:3c:64:3c:97:a4:92:8d:e4:a6:96:70:c0:e9:
f7:58:8e:78:2d:4b:13:19:26:f1:48:fc:62:52:66:99:ee:59:
a3:25:17:23:4d:8f:3f:92:4c:11:fb:a4:1b:2b:cd:5c:51:23:
24:7c:44:00:91:ae:94:b5:cd:36:0e:b4:f4:53:c8:8d:ec:78:
d7:e4:72:e7:63:07:92:68:b1:f9:af:29:b3:bd:2c:72:2a:a2:
c2:dd:16:b7:92:ae:8b:43:de:09:6b:e7:43:9c:df:f0:91:49:
40:b3:fd:06:ac:5c:cb:71:e6:26:fa:f9:22:56:5e:59:8b:ee:
82:cf:5d:6d:47:a3:47:55:c6:e5:9b:b0:0b:86:6f:2b:39:64:
32:c2:eb:44:94:39:e9:2f:73:a3:a2:26:d7:b5:fd:54:bf:33:
b9:ea:fb:d6:e1:97:b8:a4:dd:1d:4e:7f:d3:42:f7:34:dc:d5:
d4:69:ca:03:5b:69:d1:fc:f1:8f:2c:b4:c3:57:b6:6f:9f:08:
5c:29:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:17 2026 by rpki-client