Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier: qkDXGjJx4uJbydYsyTJu0clUF54HSzdR5EjZcwrGC40=
Subject key identifier: 00:0F:B8:9B:BA:AC:67:C1:26:11:A8:AA:0A:70:3A:0E:32:E7:8F:B5
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial: 019CAB6B408444B138A97D7FBF53314F8781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number: 0E9D
Signing time: Sun 01 Mar 2026 22:00:58 +0000
Manifest this update: Sun 01 Mar 2026 22:00:58 +0000
Manifest next update: Mon 02 Mar 2026 22:00:58 +0000
Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: BOyCLhD1E9GMlnh2ABs3E/aMfpfXg5fzmG8L1HCk0Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:40:84:44:b1:38:a9:7d:7f:bf:53:31:4f:87:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Validity
Not Before: Mar 1 22:00:58 2026 GMT
Not After : Mar 2 22:00:58 2026 GMT
Subject: CN=000fb89bbaac67c12611a8aa0a703a0e32e78fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:6d:98:a6:2e:6a:03:92:c8:47:b9:b8:d4:
60:b6:f4:f8:76:39:32:93:54:91:eb:56:cd:e5:b5:
6c:97:8f:5e:9c:dd:fc:df:b2:57:d2:56:90:f8:9e:
47:df:6f:67:07:70:8a:b5:4c:12:d9:86:8b:71:6a:
1b:3e:dc:fd:5d:fb:e1:e5:53:d7:60:db:77:9a:64:
e3:11:14:7a:12:51:ae:78:20:65:c8:f7:96:95:4e:
06:45:e2:23:ac:87:3d:2b:db:cd:99:4a:51:b5:5c:
6a:7f:50:d7:4e:17:5c:5c:11:06:73:18:4b:ac:f7:
db:29:30:fc:be:da:17:83:03:cb:64:d4:b6:2f:ef:
c4:dd:c4:e3:2e:94:41:38:6f:8b:1b:2b:70:a9:57:
62:c1:42:ae:02:3a:bd:c2:06:d7:00:e2:0e:7a:f7:
14:20:06:35:56:1f:e5:2b:14:cf:42:a4:3d:1a:aa:
1f:ba:10:ca:6c:e2:3f:4b:66:3c:ee:a0:82:2d:0f:
52:f5:ac:ea:9d:b0:f4:ce:62:dd:dd:76:b3:ca:c6:
fa:e4:09:e4:2e:c5:65:57:a1:9c:d0:31:dc:00:b5:
71:a0:63:3f:82:f3:29:6a:5f:ee:3b:a8:7b:5a:99:
f7:bd:db:35:72:d0:0b:a0:4f:e7:f1:ab:d4:ec:ea:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:B8:9B:BA:AC:67:C1:26:11:A8:AA:0A:70:3A:0E:32:E7:8F:B5
X509v3 Authority Key Identifier:
keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ae:97:d1:16:11:7e:cb:e7:68:b8:57:e5:bf:eb:06:07:b6:
6b:b9:3e:68:40:2d:f4:ab:a0:8e:b0:ca:c6:a8:eb:77:f1:cd:
30:d4:d0:b5:98:7a:b8:be:57:63:0f:ad:f3:2b:b4:ed:71:0b:
3a:ea:b4:59:5a:cd:07:14:f8:af:fd:0b:7a:eb:b8:9d:fe:a2:
aa:a0:20:76:24:c4:03:77:05:a6:68:2d:83:c0:67:be:c3:30:
4c:39:dd:3d:30:9d:70:37:20:af:bf:78:89:43:aa:4d:5b:e0:
a6:88:a9:b2:a9:d6:71:d9:d3:b7:1e:7c:0a:bb:35:2c:33:90:
7f:06:fa:81:ec:60:f8:4d:ad:d4:93:d8:40:3e:e2:2c:8f:27:
fd:b5:d8:f7:ad:63:a4:7e:2f:d7:ee:39:ed:d1:88:98:3d:ab:
76:07:af:79:ea:7b:75:52:76:c8:2f:5c:f8:8d:a8:67:45:47:
80:1a:20:68:6c:d3:0f:56:01:06:91:d9:b2:6e:e5:e9:0a:76:
80:83:06:b3:fa:58:0c:11:9a:c5:98:fe:b0:f3:65:69:66:f1:
4f:a3:e7:a9:01:1d:df:a9:60:c7:51:9b:65:7a:a3:da:4b:42:
e6:b0:34:34:61:51:97:dd:ff:17:a6:c8:5d:53:c1:6b:ec:12:
4a:bf:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:36 2026 by rpki-client