Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier: Jlcv2tfYWR/IwjOVzbpBmPopO+aoR2MI7epVFxmMp3s=
Subject key identifier: 92:0C:19:3E:4E:28:84:57:97:8C:65:D9:38:69:72:0C:DC:99:C7:B7
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer: /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial: 019CAA8F655B9569C237ABE9AD8A5A8C5C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number: 0CA9
Signing time: Sun 01 Mar 2026 18:00:49 +0000
Manifest this update: Sun 01 Mar 2026 18:00:49 +0000
Manifest next update: Mon 02 Mar 2026 18:00:49 +0000
Files and hashes: 1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: 18pxRRAJElrvOAxfVgH6hVt6QvuPJ0CIc46KnDTQWPM=)
2: CT0Lo8VqgOEZdE58c7bBWBtTHnI.roa (hash: COzxSOoTIXr0/+GY0oTls2bQVmuSF6l3DwdEZltDeBI=)
3: NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa (hash: z833UxZscO7V0+hUaFeEIUPRXOX0hAwFsN5RSRmYdiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:65:5b:95:69:c2:37:ab:e9:ad:8a:5a:8c:5c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Validity
Not Before: Mar 1 18:00:49 2026 GMT
Not After : Mar 2 18:00:49 2026 GMT
Subject: CN=920c193e4e288457978c65d93869720cdc99c7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:fc:a5:35:f3:03:fb:b2:22:ac:3f:a5:04:
53:23:73:f6:f1:7d:a4:66:98:6d:39:ac:40:fe:80:
c1:78:94:a1:de:b0:53:f1:90:61:15:0f:75:81:41:
7e:5b:ec:f7:41:fb:52:b9:33:d7:4b:17:e9:ac:93:
75:33:2a:39:54:18:b8:39:29:1f:9f:03:4c:d2:1b:
b5:65:96:0b:19:7b:43:6d:11:ed:7e:7c:a0:da:81:
94:84:9c:3f:70:38:8f:03:60:db:c7:30:ad:79:49:
e4:67:38:22:79:54:94:ed:ee:71:ef:c2:69:e7:0d:
e3:1f:e7:bb:90:e6:a3:8b:ad:e2:8a:8b:83:f7:c3:
64:57:52:dc:4e:ee:58:7e:e6:1e:99:59:e1:af:5d:
6b:fe:a3:1e:c2:1c:e6:55:29:d0:63:19:66:44:eb:
9a:4e:fc:a7:6c:80:8d:a2:0e:49:5d:9d:97:d4:2f:
ef:05:dd:e6:cd:37:78:ae:df:f9:ee:cc:b5:78:88:
a4:8c:da:80:13:16:59:74:e5:2e:a7:c7:82:7d:ab:
25:03:6d:74:83:35:a0:72:4c:82:9f:f7:57:bc:2b:
5f:b8:d4:51:ca:82:ab:1b:cf:70:1a:e1:a5:7b:57:
05:4f:5f:da:c1:88:7b:ae:ba:a4:25:07:89:c8:96:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:19:3E:4E:28:84:57:97:8C:65:D9:38:69:72:0C:DC:99:C7:B7
X509v3 Authority Key Identifier:
keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4a:67:80:cf:a1:39:b6:85:89:09:fa:8c:10:db:1c:a1:24:
8c:f6:a2:6d:92:b3:7e:3d:6e:b0:88:dc:b8:17:b1:23:d7:2f:
6b:be:a1:67:ab:8c:8d:1e:ba:20:98:05:13:39:64:b3:80:bb:
7e:74:7a:56:a7:bb:21:58:5d:80:f6:0d:2b:72:92:4f:6a:35:
cf:4f:50:81:cb:10:72:8b:92:1c:c2:f7:b7:38:d9:86:72:6d:
c7:ad:7f:d3:96:1c:18:13:e1:f0:cf:34:3c:30:6d:b3:0e:02:
d7:f4:e9:79:83:0b:0b:dd:b2:e3:c3:0a:d8:5e:71:8b:33:53:
d1:b1:14:ee:16:16:5a:1b:a8:97:ac:1f:62:ed:bf:7f:27:99:
b7:93:8a:b6:a6:56:03:0b:fe:30:7c:d1:ff:8e:5b:2d:52:64:
b5:46:b1:39:e0:0c:45:c0:fa:1b:7f:9a:88:18:67:53:2e:2f:
3e:dc:fb:8e:3a:d0:07:74:0e:55:73:ed:cc:b5:c1:f2:49:02:
0b:6d:c2:27:ce:48:39:a0:8a:36:2e:ab:08:e4:8d:b6:54:b2:
78:ad:95:44:6b:6a:9d:70:b8:c5:18:13:b0:60:d7:8f:ec:75:
2e:80:66:82:d6:0a:09:24:e6:e8:9f:27:ce:d1:6e:04:d7:4f:
74:3f:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:47 2026 by rpki-client