Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier: XdnfJoWkd+VW2orDAib7PigANLfAYkUnrvAvItHZXAo=
Subject key identifier: 2F:0D:DC:CB:C4:21:C1:10:E3:83:C9:28:6E:FE:29:9F:24:AD:F3:77
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 019CAC7DC8E1990AC6FFA9E612AD72887D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: NE/ltK+NWNMuWcJtKI103oh7JIiEODGHzHHmyiLTV10=)
2: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c8:e1:99:0a:c6:ff:a9:e6:12:ad:72:88:7d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=2f0ddccbc421c110e383c9286efe299f24adf377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:fc:c8:06:25:9c:90:8e:f0:65:bd:8c:45:
e4:fd:36:a9:91:f1:b7:29:df:c6:f4:1e:0f:fc:3a:
1e:75:6f:67:f8:e1:61:10:69:7d:6b:4f:ae:da:ec:
9b:67:7d:6a:73:58:f2:c5:13:24:25:46:f0:9b:59:
6c:af:e3:da:df:88:3f:11:ef:db:ea:d3:62:3f:71:
61:4d:0f:73:d0:37:98:5d:03:0f:ae:d4:bf:35:e4:
ea:45:64:40:81:1f:0d:8c:56:f0:21:91:b4:68:a9:
6f:0f:64:da:2f:33:42:5d:fe:4c:63:94:c9:6e:74:
37:1a:f5:06:f2:c7:5b:12:45:4e:83:3a:1b:7b:b0:
76:25:dc:60:ee:08:26:dd:fa:12:80:ed:7a:74:eb:
0c:b2:20:14:b5:20:25:26:fa:56:07:e0:41:bd:a4:
8c:d0:97:33:38:b3:3b:96:80:6c:ce:dd:f1:2b:18:
ee:96:cc:9c:57:c9:f5:2c:c3:38:9f:f2:8d:50:71:
2e:c9:1f:26:5b:d2:b7:c8:af:b9:b3:6d:73:d0:0e:
16:0d:9d:66:e2:66:72:97:be:30:8f:67:ec:dc:f6:
a5:7a:ae:9b:fa:1e:1c:de:f8:7b:d8:22:c9:7a:18:
27:2b:e2:f4:77:6f:de:77:b8:13:a5:7d:68:23:8e:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:DC:CB:C4:21:C1:10:E3:83:C9:28:6E:FE:29:9F:24:AD:F3:77
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:71:1e:de:45:9d:52:af:fc:62:b8:a3:a0:de:1c:45:51:
5b:38:bd:16:64:66:51:99:65:a7:95:75:54:9b:9a:d8:64:20:
48:29:59:3b:19:d3:7d:2c:2c:84:b1:ee:a9:62:90:5e:7a:27:
85:c8:cf:1e:68:56:fd:a0:ca:a6:bc:79:2c:99:6a:83:18:c6:
79:84:19:14:55:84:d3:ba:d7:f3:97:40:55:05:a8:31:dd:9d:
57:cd:7f:57:3e:30:25:78:01:3d:ea:d5:6e:b5:55:fb:bd:cf:
2c:56:d3:64:c1:86:65:66:d4:87:0e:39:8b:3a:44:f1:39:97:
a9:af:15:1b:0c:dc:79:7d:7e:4f:0e:26:65:03:de:a2:56:09:
3d:47:39:e5:ca:20:77:75:f8:fa:fb:cd:db:c2:2b:65:55:7c:
ec:73:53:01:08:b8:08:26:e7:c0:93:de:3b:9a:5f:b5:32:52:
59:dd:0c:8b:e3:4a:e8:82:c5:28:48:b0:17:29:0e:e5:33:b6:
ea:99:47:dd:2a:91:e6:d3:ac:00:90:b3:d7:ba:66:68:c6:26:
8d:05:0b:3b:f9:a9:86:03:14:51:35:e2:36:44:5e:94:58:fa:
9a:2e:38:a8:a5:c4:07:bf:2f:54:d0:49:cb:9c:12:bb:64:1b:
13:c1:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:08 2026 by rpki-client