Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: E9VekxhMuJum20kDqbRhPTV3yb/vfLXfNHQyP5cOV/0=
Subject key identifier: 62:A0:AF:73:02:97:2E:7C:22:84:FC:11:E6:F4:3C:7A:D5:14:6E:6C
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 019CAD598F0E862EF9B4CF78CB5D3729E743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 1327
Signing time: Mon 02 Mar 2026 07:00:53 +0000
Manifest this update: Mon 02 Mar 2026 07:00:53 +0000
Manifest next update: Tue 03 Mar 2026 07:00:53 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: uN+DgmPCirza8Uk9NtHW5cG/oYEmGvN7N0kntCqm1OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8f:0e:86:2e:f9:b4:cf:78:cb:5d:37:29:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Mar 2 07:00:53 2026 GMT
Not After : Mar 3 07:00:53 2026 GMT
Subject: CN=62a0af7302972e7c2284fc11e6f43c7ad5146e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:1c:0d:29:bd:61:ce:f8:fe:c0:0a:08:dd:
45:e9:28:40:99:de:cb:62:6f:39:61:1f:87:87:04:
fe:1d:dd:30:21:c4:dd:d6:ae:15:d2:9a:20:41:07:
77:f6:b7:40:7f:ba:c8:33:50:a0:2a:7f:be:eb:77:
1f:b2:c6:51:a2:c4:71:14:25:f0:23:59:f8:48:ef:
72:be:15:08:09:65:dc:38:41:9d:4f:29:8c:78:33:
38:49:23:42:7e:12:ef:a2:fc:9f:89:af:09:fb:b1:
86:76:dc:36:53:ff:3c:13:dc:1f:98:3b:4b:08:02:
3a:bf:ca:ca:d1:f1:2e:28:72:1d:14:6d:ed:29:a6:
0c:d0:a6:b3:62:5a:3d:76:ce:71:3a:71:49:80:9a:
5a:10:1c:78:2a:c9:12:91:af:1d:e6:dc:5e:2e:f9:
31:44:5b:09:61:bc:e8:ab:ca:97:a0:11:e3:30:6a:
8e:89:77:01:43:c8:4c:7a:5e:fc:90:9c:ab:c6:1a:
09:f4:78:02:54:8c:27:c5:56:08:8c:bb:1d:f8:36:
56:c5:12:eb:fb:87:9c:cd:6e:6b:bc:d1:b4:44:29:
1e:dd:a8:5e:b3:80:10:ad:65:74:80:88:e3:a3:47:
04:ce:76:00:3a:26:c3:16:a6:a5:4b:4a:07:f3:fe:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A0:AF:73:02:97:2E:7C:22:84:FC:11:E6:F4:3C:7A:D5:14:6E:6C
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:f7:b9:c7:ca:fb:16:ca:1a:64:97:4a:5e:bb:8a:71:d2:
8b:4a:91:7b:a1:78:d6:1b:6b:e4:35:2b:bb:18:b6:c4:90:66:
b1:8f:70:56:90:1f:17:c5:3b:9a:b3:59:c0:cc:16:1b:a6:7d:
3e:62:0f:5d:ed:f2:87:d8:2f:13:c3:04:c3:4f:20:fa:4f:ed:
bb:73:cd:93:b5:13:61:14:9c:a8:54:d5:53:44:e0:da:77:6a:
26:57:61:fd:da:f2:f4:4e:eb:82:2f:ea:f0:7a:c7:e5:09:70:
1a:aa:74:c4:61:42:ef:75:39:e2:5d:db:b1:c3:03:af:fb:b5:
53:87:e4:9b:2c:c2:2e:90:16:36:60:e6:71:ba:db:3d:fa:32:
21:3f:83:a1:0b:06:6c:a2:0d:32:47:28:46:75:43:08:9d:46:
ae:b6:c7:4b:0f:06:e6:66:6e:bc:f1:d9:86:ce:b7:d2:a7:0c:
d9:5f:3e:c7:39:64:2c:26:b6:52:32:83:ce:3a:13:cd:61:57:
85:ee:b7:96:16:33:ab:e4:91:81:07:70:15:d0:b1:f6:7a:bc:
9e:ed:20:2a:71:00:05:15:80:b0:a9:c1:9e:17:f6:f2:52:ff:
9c:ee:45:36:4a:95:b4:79:54:68:0d:de:46:4e:ec:40:13:f7:
4c:2d:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:51 2026 by rpki-client