Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier: iEYlkEMWzY5M01ECRIIeFzN3ez4EjquHLq4dDollfs4=
Subject key identifier: 44:EB:FC:2D:51:3A:0E:14:DC:55:BD:AA:3F:23:AC:78:6B:4C:87:03
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial: 019D390A126A360D5AD18F2FCB89E727EE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number: 0CB6
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: zpWfsjjPbF5cqIBh3G3STvMMkJbUR83juij0CPwLBJg=)
2: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (hash: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:12:6a:36:0d:5a:d1:8f:2f:cb:89:e7:27:ee:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=44ebfc2d513a0e14dc55bdaa3f23ac786b4c8703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:25:84:46:29:be:f2:98:5d:b3:c0:98:2f:
c6:43:ae:de:83:e3:d7:db:8a:e3:f6:72:53:e0:c2:
ec:58:f4:32:bd:1e:73:42:62:c3:cb:1a:33:1e:e2:
a2:df:28:62:38:60:37:fe:c6:45:d7:1b:ab:78:93:
6f:ce:19:f0:fb:16:d6:fc:47:cb:5b:44:6b:e5:2a:
97:9b:75:9d:98:8f:fe:27:7d:cb:50:cc:ec:03:41:
1c:c3:e7:2f:30:f7:bb:cf:b8:59:cd:1c:2c:85:c9:
b0:32:f5:ed:cf:ff:7a:38:62:a1:8e:0f:c2:35:64:
2f:03:5d:ea:06:1a:32:ca:29:ff:38:d5:e2:3e:38:
38:50:23:5d:e8:1b:f0:5b:3d:57:a0:8f:d3:62:73:
c9:a7:3b:2b:a4:f7:82:93:67:0e:74:1f:b6:aa:d9:
48:2b:74:0c:e0:ad:8b:54:b0:42:8a:4a:29:1e:69:
25:8f:17:17:31:23:29:c4:35:82:4c:98:3e:98:72:
77:e8:7e:62:86:94:8b:19:96:cb:ac:c2:1d:cf:1d:
de:8d:cc:ce:19:7a:ec:e6:5f:84:4b:d8:d3:fd:b2:
be:2a:bb:a1:70:8e:f7:72:a5:c7:90:f2:59:47:7c:
ac:0c:bc:0a:4d:bb:62:45:6e:3d:49:5a:f9:98:e4:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:FC:2D:51:3A:0E:14:DC:55:BD:AA:3F:23:AC:78:6B:4C:87:03
X509v3 Authority Key Identifier:
keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1d:cd:12:74:c7:17:5f:2e:5a:7a:ca:52:3d:9a:0b:35:e5:
9b:57:2d:a2:47:f1:74:9b:4c:ac:4f:7b:a2:6f:1e:99:4a:7a:
bd:0b:17:f9:93:08:32:e7:b6:ba:c5:35:49:90:14:96:8e:ce:
a2:78:03:60:5e:49:34:53:66:b2:2e:cd:e2:36:4e:e0:90:f3:
db:d0:7e:5e:e6:0b:1f:55:bd:46:85:c6:51:79:48:15:ae:1b:
41:20:bc:92:24:a6:fe:ff:cc:83:f9:5d:e4:64:af:b6:25:5b:
58:36:9a:55:02:b1:1b:83:f8:7e:c3:71:b0:be:16:df:8c:59:
d9:5d:77:68:11:2c:b4:e9:21:ed:00:e9:3f:c1:40:7c:18:79:
20:fa:f8:9d:fe:74:71:aa:11:bd:93:31:70:5d:c7:a4:a4:06:
8f:c8:e0:8c:00:b2:3a:9e:1f:dc:f0:97:18:ae:df:6d:01:4b:
71:97:0c:19:7d:5d:2d:4f:f0:d4:8b:d9:15:31:f6:cf:b0:62:
68:82:64:b6:1b:63:9a:d9:6d:ee:94:11:9d:9b:5e:aa:6b:c7:
80:d9:c0:2e:12:f3:f6:0e:e4:3e:8e:a8:fe:85:8c:02:1c:a8:
e3:6d:40:b3:96:03:39:a4:3e:e3:d8:01:e7:90:78:47:28:2d:
27:04:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:26 2026 by rpki-client