Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: 7qJI//7J6tQ5Nj6wDHpzge4jlCiWh89zLEDe4gMcEEM=
Subject key identifier: 04:11:C3:E5:2F:44:32:0B:43:29:A9:35:EE:2E:95:DB:F9:87:2A:22
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 019D37BFFAFF4D57E7B3AB87E4A2FA046BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 0E3C
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: 4e4LZqVhQnHUfoVwSXZhUITMLOO/yYW45rEIgk1Rlts=)
2: BKV_fu3YFOoxYmo6YqQLV_km-4E.roa (hash: ifeOZt3xfJQ0veX8MeURu5Xl/bcGWTOWIc6ZubLu+6U=)
3: mUi0nnAum7kZ4MV9jKDfBhFb4JY.asa (hash: bojd8Moh0D6d4DIF/avFXQDI+7GBVfVdL/RyMurONoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fa:ff:4d:57:e7:b3:ab:87:e4:a2:fa:04:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=0411c3e52f44320b4329a935ee2e95dbf9872a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:15:3e:ce:a4:82:1b:c5:1c:09:b2:7a:00:
37:75:2d:dc:66:12:bb:dd:5b:04:74:da:04:bd:e7:
ef:bf:d0:45:9a:5f:c2:62:c1:9c:5c:6d:40:f6:96:
21:88:d6:e3:fc:5e:85:94:94:0d:fe:02:d2:10:62:
0f:46:79:9f:2d:d4:ff:95:c8:75:04:19:79:57:96:
da:eb:84:8b:9d:69:78:d4:8a:df:7f:11:a2:eb:72:
7c:8f:37:3b:3d:9b:e2:d2:90:bb:82:44:9f:51:1f:
c6:47:82:f3:9b:31:9a:f3:58:16:a7:f3:7f:99:07:
7f:3a:fc:cf:8d:fe:a9:f4:7e:35:49:29:29:d3:27:
63:59:8f:c8:5e:12:ca:b4:73:8f:a4:32:62:79:58:
cb:e2:36:73:3e:60:69:e1:b1:be:69:02:f6:4c:7c:
b1:97:76:db:71:77:87:3c:4e:c4:a4:1f:7b:e2:2b:
53:43:f7:92:51:0f:06:84:9c:9e:f2:cf:92:3e:d0:
ab:3f:3a:ff:76:83:0f:32:9d:09:04:9c:51:97:4b:
81:33:0a:7b:14:4c:3c:65:13:e7:6d:29:a7:0d:a7:
e5:ab:b8:c5:95:73:65:18:bc:38:ed:81:4b:5f:43:
2d:85:67:cc:43:43:fd:b2:ca:b6:32:32:d4:4a:ae:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:C3:E5:2F:44:32:0B:43:29:A9:35:EE:2E:95:DB:F9:87:2A:22
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:24:52:eb:5d:4a:c5:95:99:cc:f5:22:0e:e4:57:9d:4a:82:
59:ef:0f:fd:e2:b9:99:b5:b4:4c:ce:15:7a:10:eb:6e:e3:ac:
5d:15:a9:b9:0a:53:4c:eb:7a:84:2d:b0:cb:6a:b6:01:2b:d6:
04:6f:e8:03:6e:b0:4f:19:bf:ce:e3:5a:a3:63:4e:75:e7:9d:
ee:0c:72:e0:64:63:dd:f4:bb:7d:57:6e:ca:a7:12:97:7e:b3:
92:05:41:2d:58:74:38:eb:4d:23:1f:53:1c:42:cd:4c:88:41:
79:14:52:12:be:6f:1a:a7:8f:2f:f4:c1:4d:53:ef:2b:a8:22:
15:90:1e:54:81:00:03:f7:16:42:83:9d:3e:63:69:7d:a1:10:
d5:da:00:f2:46:f7:3a:61:61:e5:56:2f:34:d5:b9:8f:7d:e6:
a7:92:f6:c2:de:97:0e:d5:8e:4b:0e:af:f8:ad:a2:9c:4d:f2:
b7:9b:ab:a4:c6:ce:77:d2:e0:e6:ce:28:e3:b5:68:c1:8c:39:
db:44:9b:1c:95:e7:19:a4:63:7a:81:f8:4b:7f:61:50:dc:1d:
9c:b2:d8:af:c7:b4:01:a3:9d:3a:a6:bb:f9:03:6f:89:6f:5a:
55:e9:ed:f7:91:20:99:37:b4:0e:65:c4:f1:2f:6c:10:61:6f:
80:c2:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:35 2026 by rpki-client