
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
File: h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft (raw, json)
Hash identifier: izW0Yy9ItCTxwIm6kxjpMqF2Mxsq8qaxRFXYj5waMfY=
Subject key identifier: B3:AB:A6:7A:46:1F:62:EF:CF:C1:C2:45:B9:49:57:0C:6D:A6:D3:74
Authority key identifier: 87:A4:29:48:87:30:4C:FC:DE:5F:F4:A8:93:9B:91:98:E0:53:9C:B5
Certificate issuer: /CN=87a4294887304cfcde5ff4a8939b9198e0539cb5
Certificate serial: 019D39E5614AFE5F7B1B6D7E680F1D004EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
Manifest number: 59
Signing time: Sun 29 Mar 2026 14:00:27 +0000
Manifest this update: Sun 29 Mar 2026 14:00:27 +0000
Manifest next update: Mon 30 Mar 2026 14:00:27 +0000
Files and hashes: 1: h6QpSIcwTPzeX_Sok5uRmOBTnLU.crl (hash: OZqkhHYk+YGRkPoPOBV9r/P9llOUGykPWLWDnCTkhUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:61:4a:fe:5f:7b:1b:6d:7e:68:0f:1d:00:4e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4294887304cfcde5ff4a8939b9198e0539cb5
Validity
Not Before: Mar 29 14:00:27 2026 GMT
Not After : Mar 30 14:00:27 2026 GMT
Subject: CN=b3aba67a461f62efcfc1c245b949570c6da6d374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:a1:36:2e:df:68:97:23:23:43:cb:ef:af:
68:34:f2:56:a8:9f:0e:36:df:35:50:db:31:69:44:
11:94:4c:0e:0a:7d:c3:13:f6:df:5c:db:39:5f:25:
ac:7b:03:db:44:27:6d:a3:43:e3:10:f0:bb:33:0f:
a9:1b:be:f7:d8:82:dd:30:1a:8e:b5:35:03:8a:6e:
a6:a9:1e:51:e6:bb:79:7d:d9:ae:64:5a:a0:9c:92:
1d:3d:87:3e:ab:f3:1a:6b:0c:13:bc:b8:f8:b9:db:
8e:28:f6:4f:4a:9b:30:fe:c8:a2:b4:2a:cd:6b:8f:
d9:66:f4:98:eb:50:42:5d:53:78:77:ef:b0:f8:f7:
91:98:5a:87:92:e5:bf:9c:83:b1:e7:ae:f4:9d:d1:
18:b7:82:51:65:c6:45:5b:d8:53:8e:0e:88:f7:16:
84:91:06:05:0e:ec:13:fc:5d:30:3e:5c:f2:d7:70:
4b:53:31:0c:22:71:2f:32:95:09:bf:ba:b8:e8:94:
2e:1d:33:f8:c9:e7:d6:f5:91:82:4d:56:eb:14:0d:
6c:e8:58:64:5d:8f:ba:cc:17:fb:73:49:72:1f:f6:
1f:2a:c8:09:93:3b:d7:df:aa:c9:4c:0d:0d:91:b1:
2e:8c:46:81:78:4e:27:60:2f:21:62:65:af:28:39:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:A6:7A:46:1F:62:EF:CF:C1:C2:45:B9:49:57:0C:6D:A6:D3:74
X509v3 Authority Key Identifier:
keyid:87:A4:29:48:87:30:4C:FC:DE:5F:F4:A8:93:9B:91:98:E0:53:9C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dc:f6:b4:f3:5b:99:1b:69:1e:8c:e6:49:8c:f0:98:f4:c2:
23:46:ae:1d:26:16:f4:a0:18:de:ac:8c:45:f6:d5:03:41:71:
21:4b:3f:c7:32:e1:7f:4e:5d:e8:96:32:f3:0c:75:0d:02:d8:
34:fb:d9:fb:5c:a2:94:7d:f6:9f:9d:68:4f:8d:e0:89:b9:63:
a0:96:bf:8f:4d:9e:80:89:37:d8:9a:4c:56:0f:92:ea:43:91:
f8:c4:e2:c1:ef:c7:b7:47:1c:e0:80:0d:c3:ac:87:05:d6:3d:
ca:25:35:da:71:5f:9a:01:bb:aa:b8:67:97:0e:c8:d0:ae:50:
fd:49:c8:06:04:d2:96:4a:d2:e1:30:2b:36:5b:4f:23:26:10:
99:3e:6f:af:cc:75:d4:4b:ec:de:f9:9d:30:e9:ec:fe:49:39:
30:77:ea:33:2b:a4:8d:36:50:c5:41:a9:18:93:c9:f0:67:42:
cf:1f:4b:b3:e0:01:b2:9d:01:5e:e1:70:d9:60:f8:49:bc:eb:
fd:81:c0:77:fb:5d:1d:1e:c1:f6:8f:39:42:0f:41:be:05:52:
d8:94:40:8b:64:2b:a7:19:f6:9f:42:dd:bc:51:fe:52:d1:4f:
a5:43:c6:0f:37:22:a9:26:41:26:e6:1a:7c:49:55:89:75:79:
1e:73:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:36 2026 by rpki-client