Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: EMyjC0F4Esd8pwj9OaRu7DebSVQTHnLACmuWssurPZ0=
Subject key identifier: E9:B8:E4:E7:87:CF:7C:41:56:FE:24:3C:95:44:8B:9B:21:0D:50:89
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019D386577721AE7C529879858C8BB137F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0CF6
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: gHsEr/hGeXXFU7Aws4TE6PZ2IZ2m9ab2tTz4JWB9q5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:77:72:1a:e7:c5:29:87:98:58:c8:bb:13:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=e9b8e4e787cf7c4156fe243c95448b9b210d5089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:f4:89:0d:10:29:1e:80:b7:01:23:99:2a:
cc:51:de:09:55:3d:99:ea:9e:6a:d6:20:5b:1b:96:
62:23:15:20:ee:60:3d:d1:97:1c:4c:49:eb:0d:28:
67:58:fd:cb:6e:26:59:2f:b8:3c:48:29:a5:28:11:
8d:08:c7:cb:49:fa:75:d8:6b:00:22:28:9b:11:f9:
7e:5c:fb:d5:77:c5:8a:0f:ed:24:ad:6c:e1:ee:d7:
8c:84:3f:c1:68:bc:a9:3e:fa:87:9f:cf:1c:be:84:
df:b2:75:92:10:df:6b:5a:32:1f:3a:72:cc:ae:d3:
94:54:2c:a4:be:a6:01:ed:a0:c6:0b:f0:fd:b0:bf:
3c:45:fd:71:57:6f:d9:19:1b:7a:01:c8:27:cd:88:
07:2b:1a:16:b9:e6:3c:6b:7f:7f:4a:7b:a9:be:f2:
59:58:a0:4e:10:43:f4:6b:ab:25:3c:df:ff:e5:e9:
54:d7:8b:77:5a:b9:4b:88:f0:01:0c:2e:4c:07:dc:
13:f2:4d:11:71:0f:09:33:3c:cf:3d:27:b0:74:8f:
1e:61:24:6c:35:c1:68:f9:d4:ae:c1:72:1a:57:19:
48:25:5b:37:45:68:a1:5a:94:d3:f0:99:0f:da:0e:
f1:b7:87:2e:c2:10:a4:8e:10:03:df:0d:2e:3f:f1:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:E4:E7:87:CF:7C:41:56:FE:24:3C:95:44:8B:9B:21:0D:50:89
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:09:78:25:bc:3c:c9:98:5d:8f:e8:17:cc:c1:b6:d1:e7:85:
21:1a:7f:e8:27:97:95:34:42:d0:33:f3:87:ac:9d:1b:03:b8:
b8:2d:08:92:46:e2:85:a0:b7:a2:23:b0:7f:0e:f1:30:2c:23:
f0:65:1c:d6:4a:af:12:61:6e:dd:fa:ab:4f:a9:5e:d2:12:02:
23:dd:79:b6:c9:e9:ab:45:b6:45:49:04:00:9f:3d:43:82:3c:
83:8e:75:0f:5a:68:6a:46:96:28:53:a3:b5:df:d1:18:06:70:
5b:11:bc:6b:67:1a:82:4a:42:2a:9f:ca:db:d5:bf:28:7b:48:
74:87:71:6b:04:3f:7c:7b:21:bf:16:d9:76:a0:72:6c:40:da:
77:21:bf:99:9d:36:34:0f:43:03:d5:f9:87:5b:4c:51:69:44:
e7:ae:3f:dc:c7:e3:37:46:79:37:44:d4:13:8a:58:8b:db:fa:
e0:d8:fc:ef:5f:7a:fe:ca:de:bb:42:4f:68:34:e3:64:3b:ec:
66:d3:ef:90:7a:9c:f6:b0:b0:fa:af:f6:1d:f2:5d:d9:da:94:
50:b1:aa:e2:fe:d2:c8:f7:9d:b4:68:7b:fb:1e:6d:a3:e0:3c:
be:c8:58:9f:95:a7:46:1b:53:f3:09:52:a4:a4:78:a2:b1:6a:
b6:e0:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:28 2026 by rpki-client