Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json)
Hash identifier: nzCtXHyBLDFNN9DtDDa4T6+czCvxyki+l2f9IOolDVw=
Subject key identifier: 62:5A:BD:E1:BE:3F:B0:06:B8:B1:9F:7A:7F:DE:DF:3F:7B:AC:27:63
Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Certificate serial: 019D38D3AE027FBC2AA1B32F8386B19A9B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
Manifest number: 037B
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: GeBD+m4m+7rN/aTu5J+/PrO+EJa0aHsBaJsYDwdmyKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ae:02:7f:bc:2a:a1:b3:2f:83:86:b1:9a:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=625abde1be3fb006b8b19f7a7fdedf3f7bac2763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:f3:6c:2d:9f:08:ce:23:94:fd:2c:3a:ad:
42:93:7f:9f:4b:51:42:54:04:29:09:d2:c6:2b:57:
19:94:23:65:10:8a:cf:fe:3b:21:49:3a:47:aa:8f:
6d:7d:16:02:d7:71:49:87:d2:69:3b:b1:3d:05:d0:
84:77:86:bb:28:d7:55:a1:55:5e:6e:05:aa:7d:c8:
7a:e2:d9:80:d2:d7:72:4d:0b:81:b2:de:4d:95:47:
c6:74:f7:33:b6:a4:09:c2:59:44:9d:a6:cb:e3:de:
66:fa:ac:02:34:f0:d1:ff:2f:ea:12:d1:62:0e:c4:
01:fc:64:3b:78:ae:e3:a2:73:3f:6a:95:2a:75:16:
22:44:c7:01:b3:6a:00:01:ac:c8:d4:c8:a9:37:a8:
06:f8:a3:69:2c:00:de:f8:66:eb:c5:97:6e:7b:13:
24:2a:4f:ce:5b:40:fe:72:67:2d:a5:df:f5:11:94:
3a:91:93:f8:0e:bc:ac:39:20:c6:47:3b:65:e1:1a:
bc:dd:7b:ce:4c:87:f2:80:e7:41:75:52:34:14:30:
9b:d2:c4:19:e8:bb:91:cb:32:0d:3d:8a:e4:59:9e:
28:02:be:41:cd:36:f2:6d:e8:5d:eb:9d:c4:01:7b:
82:b3:f4:49:ec:60:d7:fb:c0:41:5d:6d:1b:af:71:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:BD:E1:BE:3F:B0:06:B8:B1:9F:7A:7F:DE:DF:3F:7B:AC:27:63
X509v3 Authority Key Identifier:
keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bf:ef:da:76:36:06:d5:5d:5f:13:20:61:db:42:12:5a:84:
d3:15:4a:6b:34:1a:f9:b4:3d:c0:6c:24:14:5a:1f:f2:e4:4c:
c6:2a:62:f7:47:c8:89:c0:fb:50:f3:79:3d:16:69:f1:9a:50:
3d:c1:63:40:7d:dc:d9:53:9c:aa:6b:14:3e:6e:41:11:87:a2:
8e:b0:20:e6:4c:a1:57:65:df:70:6c:11:32:ba:25:7e:aa:3a:
8b:8f:a1:94:c3:fc:59:b9:fc:47:aa:05:dc:27:e6:50:ea:2f:
bc:26:c7:22:30:64:e8:ce:e4:c8:3a:42:41:30:b4:0c:10:9e:
20:3e:94:71:81:48:fb:59:ca:ac:e0:40:6b:18:73:48:10:9a:
6c:62:19:01:2a:63:30:56:c9:5b:e9:7d:00:13:19:db:44:a5:
54:fe:db:9e:3e:5b:19:c1:c2:b9:56:f9:dd:59:68:56:d9:93:
1f:6f:87:26:8c:34:89:24:57:b9:1a:ca:c9:1c:06:5d:eb:d8:
12:5a:1f:fc:6b:b3:30:f5:c3:d8:f9:f0:59:12:2e:4a:99:5f:
a9:ab:06:42:88:58:3a:5b:af:ae:63:79:2a:c9:54:b1:0a:19:
9b:6a:53:dd:f0:b9:1d:ff:80:1a:5e:53:92:87:16:a6:6d:9a:
d8:5d:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:43 2026 by rpki-client