Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier: E5Dl4iKLQg9U/1DpLYw+1riGmdw07aAgeY5Jf8QGRbw=
Subject key identifier: AD:8D:8B:23:38:DD:85:12:84:2C:B0:BA:03:5B:FB:87:FE:FE:47:98
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 019CACB4FEE360A39107577B672E56702F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number: 1068
Signing time: Mon 02 Mar 2026 04:01:08 +0000
Manifest this update: Mon 02 Mar 2026 04:01:08 +0000
Manifest next update: Tue 03 Mar 2026 04:01:08 +0000
Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: JXMWl5W5APuUlmvsptGymOW73f0b0sV2gAefHXbiGp4=)
2: aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa (hash: 8KWuhZN2MwzTsWUN92o6fPQusuIkbhVe5Tp3v7UnNEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:fe:e3:60:a3:91:07:57:7b:67:2e:56:70:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Mar 2 04:01:08 2026 GMT
Not After : Mar 3 04:01:08 2026 GMT
Subject: CN=ad8d8b2338dd8512842cb0ba035bfb87fefe4798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:83:e6:0a:99:95:87:17:bf:ba:b5:23:9f:
40:fa:68:33:2d:ee:85:08:ef:03:56:25:da:4f:42:
b7:ae:17:07:e6:54:30:c4:8d:40:f4:43:28:fb:79:
62:fa:7e:7f:d2:0f:df:75:88:af:3b:61:33:61:55:
c4:10:90:19:d1:7d:65:0a:12:9b:cd:e0:9f:d0:30:
2a:3a:e2:46:92:cc:b5:2b:9a:7d:e7:1a:de:8f:9e:
53:8c:25:21:5e:7d:49:ec:07:27:94:b5:77:58:e9:
39:48:3e:85:f1:9d:03:95:54:a0:88:8b:97:1c:b8:
d8:7b:2e:55:04:ec:4c:7f:f4:33:27:ff:8f:b0:5d:
6d:f5:2d:70:22:db:26:f6:2b:2e:b5:47:a6:78:00:
1e:2d:26:47:e6:b2:c5:83:1e:bf:81:a5:dc:93:cd:
2b:b7:e1:ec:d7:1d:4e:7d:52:a8:c9:83:c0:53:77:
9e:3e:2e:b3:0c:91:06:e6:9a:79:b5:79:13:cb:26:
5e:fd:c0:29:38:41:7c:95:b0:4c:95:01:6f:18:ce:
93:64:00:43:da:83:4c:0f:99:eb:7f:f3:6f:78:bc:
c8:ec:d0:bc:b4:b0:9d:9d:25:09:f4:52:32:d1:8d:
0d:d2:88:97:bb:98:d1:18:31:75:76:07:b1:18:91:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:8B:23:38:DD:85:12:84:2C:B0:BA:03:5B:FB:87:FE:FE:47:98
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:18:c6:25:b0:dd:a4:2e:5f:79:e2:09:33:91:9e:e0:38:01:
57:26:71:fe:21:22:42:4d:dd:33:50:cb:4a:b7:97:67:c0:f4:
f6:0d:6f:dc:b7:9a:bf:cb:2c:38:62:a3:72:23:7a:c9:4a:66:
1d:9a:06:2b:f7:ff:5d:55:b0:0f:ce:ff:68:fb:4c:ad:e3:18:
fe:61:10:b4:39:78:15:08:41:3d:e8:07:47:ab:16:28:43:51:
cf:b0:e6:60:5f:2f:62:91:89:95:f7:af:cd:84:3d:be:7a:b6:
da:ee:43:ce:4b:19:33:1a:02:61:e9:09:3b:07:69:4e:d6:f4:
26:46:91:cb:1d:14:26:b1:83:6f:c0:f7:e0:b7:d5:ce:3a:8a:
7d:94:06:cc:c2:20:c1:3d:9e:74:6d:49:bf:86:0f:f4:54:fb:
c3:7b:d1:79:1a:75:20:e7:fa:7c:cf:03:d5:98:08:82:f4:c1:
c9:2b:a1:fd:07:9a:17:8b:e1:87:03:b2:2b:56:27:3f:49:55:
c7:dd:b1:a0:79:c0:ab:12:be:75:03:17:bc:89:96:b2:43:8f:
c6:a4:e9:ed:7d:ae:44:40:cc:da:f0:27:5c:a0:53:91:6d:31:
b1:da:51:5b:f3:f9:ca:1d:37:85:40:db:d1:7f:ad:5e:45:d4:
a4:cb:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:46 2026 by rpki-client