Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: g/apI+GJDXFewpmG9T/IjGOcsdVeS8UaonJOmxyt3sU=
Subject key identifier: 92:A8:FB:58:83:68:B7:BD:88:17:FC:BA:B2:50:71:9F:7F:92:45:E5
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019CAD5A46B843358A751F78951F39BA0F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0B79
Signing time: Mon 02 Mar 2026 07:01:40 +0000
Manifest this update: Mon 02 Mar 2026 07:01:40 +0000
Manifest next update: Tue 03 Mar 2026 07:01:40 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: zEI+6g8PwML9gyGD/m/ms0E84zKkJSloWB31EkssQzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:46:b8:43:35:8a:75:1f:78:95:1f:39:ba:0f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Mar 2 07:01:40 2026 GMT
Not After : Mar 3 07:01:40 2026 GMT
Subject: CN=92a8fb588368b7bd8817fcbab250719f7f9245e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:52:90:84:93:98:5e:eb:24:9a:70:bb:41:
a4:08:62:4c:df:ae:d6:f0:2d:92:5a:78:42:33:42:
6a:0c:ab:73:07:bb:5f:5f:22:34:32:7b:46:a3:d6:
7c:cf:06:4b:3c:41:c3:7e:42:be:e4:61:5d:8f:01:
c2:99:d2:87:e1:5c:39:a1:ba:f4:4e:ab:df:c6:03:
fb:2c:9c:ad:68:a2:b9:85:d5:d7:2b:60:e6:c9:89:
00:60:09:ee:7e:a2:d9:35:cb:fa:e9:d3:b3:65:47:
e1:3d:39:54:3b:2d:02:0c:88:3e:b0:7d:71:0e:0f:
d0:fe:7a:0b:ca:96:d6:8d:2b:b6:5a:0b:74:20:e3:
11:34:7e:2a:2e:c9:cb:92:8b:87:3c:ff:cb:a4:58:
af:6c:05:04:29:e7:c1:4d:76:1c:7e:60:40:cf:e6:
23:35:25:e0:32:24:29:14:3d:ee:1e:c0:ca:33:34:
93:ad:71:b8:50:12:74:44:3c:9a:95:c7:fb:55:e0:
38:79:90:fa:d1:dc:dc:b0:5e:f2:e7:9b:70:7c:66:
f1:8e:cd:dd:bb:d1:28:4e:8f:3c:65:c2:fa:cf:7c:
db:b4:7c:15:5e:3c:42:4e:1e:ed:5f:2d:b9:48:32:
0f:6a:80:4b:03:dc:19:8f:36:1c:44:8e:07:cb:3b:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A8:FB:58:83:68:B7:BD:88:17:FC:BA:B2:50:71:9F:7F:92:45:E5
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:22:0a:a2:3c:cc:39:ff:fa:a9:e8:ad:f2:f6:d8:d0:a0:7e:
ff:75:84:f6:7a:c2:90:3c:6e:65:81:f4:40:f1:66:86:e6:27:
4e:fd:23:bb:b7:23:35:d3:e1:42:5a:2e:3e:2f:74:b5:47:fa:
01:1b:1d:3f:b0:f6:77:f0:d8:f2:bd:f5:ad:2a:d2:4b:b8:4c:
70:94:94:5e:bc:ca:57:f8:ba:d0:9c:e5:e4:d8:97:2c:a6:54:
e1:34:46:37:55:02:c3:76:5a:10:53:e0:1a:cd:7a:d9:91:c2:
1a:f8:da:1e:70:94:e0:93:6c:06:fb:ea:01:ad:5c:7e:da:bf:
e9:e8:fc:5c:8a:53:dc:83:65:33:83:59:27:c7:b1:c9:fe:f8:
d6:89:23:da:a4:54:b0:1e:68:ff:e0:25:9f:6f:71:53:67:12:
36:2a:ac:dc:da:54:cb:3f:75:56:34:11:72:c7:30:d9:96:47:
53:1f:f3:08:6b:4b:cb:41:3b:30:1c:77:c7:c0:43:6b:e2:db:
35:2b:ab:6f:37:0c:cf:6c:0c:ee:55:d0:4c:cb:bd:45:c2:ec:
6e:04:b7:d9:86:d5:24:63:e8:df:12:7c:fe:de:60:a8:e2:a7:
94:e5:c2:62:64:a9:c3:ca:fd:87:c5:db:69:2f:80:4f:c6:66:
8c:8f:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:55 2026 by rpki-client