Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: XUhOI5BzOwMMBxHk9F10JnEdJ6iRd/PM1q8aAxtRcXQ=
Subject key identifier: B8:06:FF:16:3C:AA:20:7E:A1:F8:33:97:37:B7:1B:75:44:FE:3E:48
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 019CABD9A0807EA5AA54F39206E46F0FDC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 0FC1
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: iuEoSx7MioQcxijg94IHTGWPsrgfWdDiOAav3FLO+W0=)
2: jbegeHRHAQFS4OhjdqswttUxcNE.roa (hash: H77Ee/ql8r6fO3a7jEQG5BO9lvRzT2On1CkeHfT7sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a0:80:7e:a5:aa:54:f3:92:06:e4:6f:0f:dc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=b806ff163caa207ea1f8339737b71b7544fe3e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:02:74:09:d7:2a:06:b2:31:f9:4a:fe:b3:
02:a3:a0:02:5e:65:50:68:6f:86:d7:f1:2c:a8:44:
6b:7b:ca:5f:4f:db:02:58:ae:a9:74:57:9c:ce:c3:
55:a0:64:a0:b7:3c:46:5c:28:9e:a0:d8:57:78:f1:
dc:e7:c8:c9:d1:da:56:b7:e3:3b:15:92:98:f7:9e:
9c:77:bd:58:57:af:76:73:92:27:27:76:d3:ae:4a:
71:0f:6c:e4:be:e8:c0:ba:03:6d:e3:23:91:7e:d3:
45:1e:f2:eb:03:67:9f:c1:5f:58:93:48:04:c7:e2:
8f:73:61:d1:c7:52:44:d9:ac:4d:d1:e7:87:60:a4:
eb:35:0b:94:d2:59:bf:72:5b:1d:a4:d1:bb:0b:5c:
80:d5:ec:dc:3f:62:be:f0:e9:61:2c:24:de:9e:de:
d9:58:d7:e8:85:4e:77:0e:f5:4f:01:6a:60:21:aa:
e9:c2:3b:70:a0:0d:19:61:4d:b8:cc:0f:11:94:51:
fc:3f:5e:16:12:ab:74:7d:72:52:cb:a6:55:ad:8d:
42:3c:c3:d1:d2:85:9c:4a:21:ac:a4:48:ba:bb:72:
e8:b1:9b:af:68:d8:ff:48:44:0b:13:94:38:94:f7:
87:e3:41:bc:8e:42:c8:61:78:cb:4f:0b:aa:d7:04:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:FF:16:3C:AA:20:7E:A1:F8:33:97:37:B7:1B:75:44:FE:3E:48
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9f:d6:7c:7a:d9:26:e3:73:98:f4:12:ae:49:d8:1d:97:e3:
86:70:68:a7:9b:ad:e7:f1:84:71:08:75:87:4d:c2:1f:41:0f:
89:d8:fe:d3:db:5a:7d:2b:bc:1b:92:a3:de:d1:6d:da:09:6c:
57:e7:b4:2b:8f:c6:2d:91:fb:9c:70:72:19:31:65:87:18:6f:
08:fa:61:4e:b3:42:0a:77:b5:24:95:80:d0:0a:1d:58:94:1e:
9c:2f:af:23:35:bf:b1:88:58:e0:d9:7e:8b:7b:d4:12:66:b8:
ba:7a:59:68:ca:80:21:85:97:c7:25:0e:f0:2c:3c:38:29:a6:
42:22:3c:3b:ae:3f:ff:78:22:49:6f:51:e4:92:7f:3d:45:5b:
64:19:76:5c:db:21:80:fa:2d:2e:fc:2d:a7:f2:56:b1:43:5f:
70:1c:5f:c4:12:1e:6e:06:b9:a5:2b:a6:81:c1:c0:a0:03:a9:
86:2f:d1:a3:5f:dd:91:60:57:b0:1a:5e:c1:f2:4c:bc:49:8f:
8f:8a:60:88:9f:fb:07:93:24:a9:e4:4d:2a:c0:0a:17:63:43:
b9:99:34:34:e7:b0:f9:00:a0:1b:9b:96:b9:92:9a:dd:64:8f:
00:96:bf:07:8e:01:a7:a4:02:70:f1:67:d1:7a:b6:e1:fb:62:
8d:d5:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:45 2026 by rpki-client