Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: G+wgKzsiAGPN5nRPkRoAzowS+yQm9dYreyThExiprak=
Subject key identifier: FE:0C:B8:88:80:99:BB:D7:F4:F6:61:D7:E6:1D:17:FD:25:19:4D:80
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019CAA58E621FB65271CBE4D02E880C095FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: fy9Kl3j5i1sNVGNKdTylIO5X+78v/q6Zrbiv8vjIrZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e6:21:fb:65:27:1c:be:4d:02:e8:80:c0:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=fe0cb8888099bbd7f4f661d7e61d17fd25194d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:5c:42:df:81:c7:12:a6:cb:a1:12:4e:28:
d5:37:02:65:08:d2:69:c5:2d:51:72:99:35:c9:0c:
19:f4:39:7a:f1:99:7f:06:65:a0:18:11:70:1d:09:
cd:e1:af:9e:27:1d:16:5e:45:72:61:54:bc:f3:3e:
f1:4b:a5:ee:74:e7:23:a3:b0:7d:e9:92:75:60:73:
5f:12:21:30:5f:07:0b:c8:76:75:8c:5d:de:13:76:
f1:d4:d5:5b:e7:d1:c9:b2:c5:a9:46:d8:5c:10:84:
48:0e:8e:5a:ec:a1:64:4d:fe:45:fb:ad:63:29:b7:
41:3f:17:a7:29:9c:ae:82:5f:ad:64:27:54:ef:72:
35:c4:d4:c7:ca:d6:2d:e0:0d:a9:13:ab:45:9b:3d:
11:9f:9e:d2:ec:82:de:b4:fd:4a:b0:4f:a7:ba:ba:
51:8f:9e:9c:96:44:a2:9e:d6:d8:79:51:87:23:83:
01:01:b5:d0:e6:f8:ca:60:4e:f0:16:72:b3:3c:95:
8d:b3:a3:6c:c2:49:ab:fe:f7:3b:85:a6:6d:aa:67:
06:d9:a5:30:7b:83:37:a9:67:07:35:74:6f:9c:e7:
0c:c2:a2:6e:67:a0:50:65:3a:87:16:81:ac:b3:ab:
10:c9:7a:ed:9c:b1:53:00:64:da:09:60:e0:51:8c:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:B8:88:80:99:BB:D7:F4:F6:61:D7:E6:1D:17:FD:25:19:4D:80
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:30:fe:4d:bd:cc:dd:db:a0:f5:14:2b:76:76:9e:01:1d:
b3:de:62:8a:2f:e2:61:36:d7:e3:cf:ef:9a:0b:d8:86:64:55:
e8:9d:d0:8f:3c:46:32:2e:a6:de:5f:54:8b:5a:38:01:bd:bf:
a2:e7:4e:51:c4:21:3c:67:e5:0c:7a:76:cc:a9:44:fb:04:ef:
a9:e1:76:5f:45:23:a0:8b:d4:10:c5:03:ca:89:13:2b:a2:4d:
8a:61:e9:71:32:0f:ab:e4:64:46:33:2f:18:96:50:d7:7a:c6:
cb:23:e0:54:d2:2a:d2:00:20:3e:8b:48:7e:87:98:32:85:df:
94:64:dd:1b:2f:c2:a1:be:2c:4a:1e:61:d2:b0:cf:f0:bd:be:
07:63:df:88:6f:5c:4f:02:21:02:36:93:60:aa:1d:6b:45:59:
dd:f7:be:8c:af:86:91:61:43:fa:f0:ab:8e:49:74:9f:e2:46:
68:aa:46:36:22:4f:c2:ca:e0:ac:f4:ac:70:a2:d2:b3:ea:04:
11:39:d1:b0:03:f7:cc:fb:c9:fa:f6:51:3a:82:ae:64:4a:0c:
be:5b:d0:db:34:fa:49:88:2f:71:5d:be:97:7d:a8:6e:5c:c9:
61:b2:dd:a9:a7:48:10:8d:f9:82:01:ff:b3:11:ac:80:cf:14:
26:99:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:31 2026 by rpki-client