Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: wHCywIiGfAJ1LWlfIuFHZJxKmIqEbnNwMi6dgLXrBTs=
Subject key identifier: 51:DD:B7:92:29:B9:6D:AB:3A:59:FF:3B:E3:22:78:7F:9E:80:65:6D
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019D386627B43DD5E000C9CB772A0CFF02BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 0749
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: Znji1xcXLeo463mwx3Dag6f6CIQiSNjT7/3bCTPNbkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:27:b4:3d:d5:e0:00:c9:cb:77:2a:0c:ff:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=51ddb79229b96dab3a59ff3be322787f9e80656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:20:8f:bc:73:90:81:4d:e3:8e:20:c0:00:
90:12:1d:5c:cb:10:29:6a:42:7d:c4:19:91:11:b9:
70:12:03:b5:24:22:6a:b9:6e:75:28:2e:30:49:f9:
b9:c9:09:80:36:ec:b1:46:8a:bd:36:1b:ae:cd:75:
d7:f0:89:4f:c2:55:7d:66:e1:e2:f2:67:03:62:de:
6c:ab:93:93:13:6e:9f:86:bc:88:63:67:03:c1:ba:
72:66:d4:2b:4f:21:08:ec:6c:ac:ca:79:ce:3b:68:
ff:c5:62:2c:5d:76:1e:01:2b:3e:1d:c7:64:6f:ca:
fd:df:74:4a:5a:c4:8b:94:3b:fa:b3:35:14:c1:15:
ef:4a:26:d1:cb:e9:13:11:0f:d6:7e:2b:36:43:67:
cd:37:47:fe:50:2b:d4:52:01:0d:80:47:ac:fd:26:
a0:2f:37:2a:0d:09:5d:55:4b:d8:95:3b:85:eb:a7:
b5:d1:e8:95:b3:a6:2d:a9:6b:f9:b6:26:2c:a0:dc:
5d:01:09:3b:3e:4d:b6:c1:74:41:b4:b6:70:23:95:
07:49:e8:45:cc:9b:09:57:b3:73:1b:ad:62:3a:a2:
a3:a3:6e:8b:b9:2a:68:55:3a:be:46:bd:38:fc:f5:
ea:e4:20:63:fc:66:ce:14:95:f2:c2:c9:e7:ee:b4:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:B7:92:29:B9:6D:AB:3A:59:FF:3B:E3:22:78:7F:9E:80:65:6D
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7d:e1:e2:9d:13:ab:89:c1:2c:4c:6b:bc:60:a1:26:66:97:
39:81:11:b2:44:da:ae:f6:47:51:cc:99:04:5d:9b:7f:93:6d:
3d:33:a5:14:99:7b:a2:3c:11:df:48:a8:1f:6d:24:27:71:bc:
c1:51:a5:cc:9f:58:5b:79:8d:8c:4b:7c:4b:30:d4:7d:66:c9:
bd:61:0d:d9:07:51:89:ce:8e:31:7a:d3:eb:a1:9b:18:f0:e5:
2a:8d:87:9a:24:86:8e:56:4e:bf:59:f8:54:2f:5c:f5:66:a2:
c5:7f:6d:78:3a:6a:38:3d:e3:d6:41:ec:27:8a:27:99:91:18:
df:b6:ef:e9:38:76:c2:94:4e:8f:1b:97:07:e6:59:7e:14:9a:
89:fb:1c:d7:c1:7c:9b:bf:06:95:5f:72:be:73:ec:74:6a:29:
64:98:83:3c:79:76:00:cf:b8:28:6b:c8:61:86:b2:16:e4:42:
09:f4:3c:05:e5:92:7d:80:77:7c:02:c9:67:6d:e9:ab:4d:03:
83:f1:78:71:de:0f:5f:d2:ff:99:b2:36:34:1b:b0:0f:d9:48:
cb:00:9e:c2:3e:ff:a9:9e:b2:18:3e:8e:00:4a:e2:be:62:a4:
98:3a:53:26:ba:19:ac:d1:a2:b4:75:82:a0:97:9b:36:b9:49:
1a:4b:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:11 2026 by rpki-client