Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
File: 6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft (raw, json)
Hash identifier: 65ZC5rVq5/k0dpTn0jP/KMOV4nwsRZZQFMrMVsTSmtA=
Subject key identifier: 5F:17:C8:C8:A5:59:6F:25:16:23:51:A4:B3:B8:4E:9F:EE:9D:21:9F
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 019D378940ABEE742C0538A0056758552A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
Manifest number: 0AA7
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: 6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl (hash: c5W+tK+BydSGA8ZG2F7sTl6ibrjQ/HcFBGJG4QOaU90=)
2: d9WFrnc4pmf5pLTzIhIdisR_d9k.roa (hash: /xfSchjnKFgR4NLG+ItdhW/yNfERRAOpD3QUNhJFcUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:40:ab:ee:74:2c:05:38:a0:05:67:58:55:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=5f17c8c8a5596f25162351a4b3b84e9fee9d219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:0a:2b:f8:80:a1:f7:35:2c:bc:00:2e:37:
60:7d:94:5b:4f:fa:b0:d0:9a:4d:2d:5f:5a:b1:5d:
03:21:45:32:d2:76:1a:cb:7e:26:6d:cc:e2:9b:93:
0f:56:84:9a:dd:c4:bc:99:2f:98:d6:98:5f:fe:06:
b0:dc:7d:89:68:00:12:f9:7b:3f:f7:46:30:25:24:
8a:f1:f4:21:83:02:83:10:fd:f3:db:7f:6d:b7:cf:
3d:19:33:a9:a5:17:81:f5:57:83:6b:29:34:f4:0b:
b1:97:c4:c5:1c:62:a2:df:20:10:13:b6:c4:4e:f1:
98:d4:ef:c5:ee:14:a9:10:10:41:95:72:81:4e:15:
e2:92:b9:ca:c1:c5:b6:9f:07:77:6a:ac:7a:d6:b6:
04:a0:eb:ab:ae:e8:8f:fb:4b:54:5b:30:7b:bb:ac:
ee:6c:f6:3f:2a:82:f6:2f:60:b9:8b:a1:92:6d:69:
2c:58:f7:9d:1c:00:43:f7:2c:e8:57:3a:d3:3c:cb:
2f:72:e5:83:a5:bf:67:73:f2:e0:16:c3:6f:3e:56:
91:12:72:41:fb:6f:59:aa:c3:8d:4b:62:c8:78:ab:
c0:00:98:12:94:1e:83:8d:77:c2:ec:65:63:4b:4a:
22:9b:96:35:bd:b0:e3:3e:fb:ea:21:ff:01:e8:fc:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:C8:C8:A5:59:6F:25:16:23:51:A4:B3:B8:4E:9F:EE:9D:21:9F
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:99:b9:cd:2d:43:6e:3d:67:85:a0:8a:fe:54:be:24:c9:9b:
17:fc:ce:e8:e2:05:a4:1f:93:3d:a7:33:9e:7b:12:aa:84:33:
02:3c:53:64:d3:0d:04:35:04:fb:c4:3d:9f:7e:ab:fe:1e:6e:
bd:48:fd:6f:4a:b1:4c:4b:89:4f:29:8d:99:99:85:1a:1d:26:
b0:52:14:fa:46:e7:d8:af:c4:52:3c:52:70:aa:e3:eb:17:7e:
4f:d4:30:f2:20:a3:db:0d:20:05:ac:c0:0f:52:47:ab:e4:6a:
fe:24:d7:b3:51:84:cf:dc:d8:e9:7f:02:37:64:9a:a0:07:7c:
cc:f1:76:36:60:07:18:08:7e:77:44:a7:97:09:09:ea:f2:09:
d7:0f:5c:09:7a:ad:94:2b:cf:93:f3:2a:99:71:cf:2d:45:06:
7f:41:a6:dd:69:11:fd:78:85:48:2f:de:a1:6a:a2:04:7f:8f:
b8:96:33:43:66:07:ef:76:68:aa:03:02:89:40:51:cb:1a:2d:
7b:49:52:fd:c1:e5:90:30:0d:ed:59:db:9a:6c:81:ec:75:50:
9a:56:e5:8f:e4:c8:25:0d:be:13:c5:91:04:59:71:14:63:f4:
eb:be:ff:b2:b2:be:38:7a:4d:5b:c6:a2:e0:b7:e2:e3:72:16:
f3:32:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client