Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: jwGPu0u34QT0KXRy27LmMtOlnvVGeDos6ApoJzsnd9o=
Subject key identifier: 65:48:7E:28:1E:21:59:53:18:EF:F7:29:DB:2A:28:5C:85:F0:C5:1E
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019D39AEB83D9D51FD8D3D08146385E60A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 0D06
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: jknP3qlA117SC52Hlk1MrxXta/NqtA+tdEyVFD9uXbk=)
2: vHXepVpKIWkVP3xDk93G1Kcb1DM.roa (hash: hhAFdaETyQv2y4V0RVthnkONgbjAxOm2okzHuxGf6Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b8:3d:9d:51:fd:8d:3d:08:14:63:85:e6:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=65487e281e21595318eff729db2a285c85f0c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:b8:4a:99:6f:cb:0f:25:de:eb:27:ab:ef:
79:05:66:fc:8a:12:2a:1f:ba:b4:8c:1b:1c:8b:6b:
e1:88:60:c9:88:a3:cc:77:b2:9e:c3:ee:53:0d:8b:
57:1d:1c:76:cb:9d:14:bf:16:2e:34:47:bc:17:11:
e7:be:c2:af:5f:fe:8e:79:93:7d:89:70:2a:d9:6d:
e3:5f:68:c4:7f:f9:f7:c2:9c:0f:a1:d5:59:7c:d3:
18:b5:30:25:be:a6:d8:ef:37:c9:39:c4:1e:0d:71:
a8:24:eb:bb:41:13:69:db:10:c5:34:d4:78:fd:e9:
13:31:11:83:18:cb:33:95:3e:e1:35:09:ea:65:49:
ca:bc:62:5d:91:97:89:0b:42:72:15:eb:16:aa:84:
1d:21:e9:0c:d5:80:ab:5a:9b:89:3d:ca:91:cc:2c:
83:00:db:f2:24:4b:33:13:2a:75:c5:b8:6d:1f:1f:
b8:6b:e3:6a:ef:46:0b:e4:f6:66:76:df:ba:db:8b:
f6:27:c7:c5:5b:8e:72:ba:2d:34:2d:da:2e:eb:8b:
70:62:f5:f9:5a:b5:71:78:87:d7:2c:b3:b1:39:72:
da:9a:7b:f7:ea:46:d1:a6:16:d6:d7:14:ad:70:79:
d4:fc:12:33:39:bb:6d:28:0a:13:5b:eb:4b:af:d7:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:7E:28:1E:21:59:53:18:EF:F7:29:DB:2A:28:5C:85:F0:C5:1E
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:ff:d0:dc:85:c1:b6:61:fb:44:2c:61:81:3f:b3:62:32:
52:86:2e:f5:d4:49:39:96:fd:bd:c2:16:18:db:47:32:6e:ce:
02:70:97:b9:ca:5a:f4:ed:59:08:ea:75:99:19:84:81:d5:3f:
91:ad:17:5d:43:03:87:9f:26:dd:8d:24:8e:e2:0a:c0:d2:86:
c9:cc:d5:b7:ef:b0:ac:a1:0e:a8:37:9a:8e:33:c0:19:2b:be:
8a:c2:44:6c:1a:a8:c7:38:8c:60:d5:e7:90:ff:a7:94:86:57:
17:56:37:3c:00:ea:7f:81:d5:52:36:5c:e9:3b:5c:8b:7c:6a:
21:71:a4:35:8a:e7:59:3e:11:34:c9:4e:f3:c6:e5:3a:53:3d:
ad:5f:76:20:8b:85:84:15:33:55:ae:55:7e:d2:b9:19:5d:66:
20:1b:c3:e8:ee:90:10:6d:ae:a8:96:ce:04:5c:d5:fd:c8:05:
ca:e5:9b:f3:44:1d:07:34:5a:fe:9f:48:43:10:5b:35:f6:71:
73:2e:ff:65:8f:74:da:be:e0:6f:b9:b3:a6:4d:0f:b9:56:bf:
10:67:ec:b3:87:31:73:13:88:56:9a:60:6d:6d:74:af:3f:fb:
67:0f:39:a2:f6:c9:58:18:27:0c:de:6d:2f:a7:de:d8:9d:50:
a4:b9:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:30 2026 by rpki-client