Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File: 6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier: varrWG8JjtOq74p3mpORoAYXZpi2yBS68PGHr/NVG50=
Subject key identifier: 6D:F1:A8:0B:D1:EE:E7:75:DC:93:8C:48:69:E1:99:92:B6:5F:3C:CF
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer: /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial: 019CAB6BBC4CF2DAF403B7FA1A786A4A21E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number: 1339
Signing time: Sun 01 Mar 2026 22:01:30 +0000
Manifest this update: Sun 01 Mar 2026 22:01:30 +0000
Manifest next update: Mon 02 Mar 2026 22:01:30 +0000
Files and hashes: 1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: OwSkNmVZRdXc1A6fQk1uAuHU4w1NLP5QEhlBPgcWak0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:bc:4c:f2:da:f4:03:b7:fa:1a:78:6a:4a:21:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
Validity
Not Before: Mar 1 22:01:30 2026 GMT
Not After : Mar 2 22:01:30 2026 GMT
Subject: CN=6df1a80bd1eee775dc938c4869e19992b65f3ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:67:65:e3:6a:52:0c:45:e4:4f:13:2d:96:
04:2b:fb:93:8e:5d:5a:3e:b6:1a:cb:ba:29:05:d5:
68:53:a0:e3:fa:b1:df:98:1d:e8:4f:ca:4b:63:d7:
84:89:0b:cc:7d:ae:13:6a:a5:7d:4f:73:3a:35:79:
35:bc:4f:1f:1d:fa:fc:38:5d:c9:39:fc:18:3a:70:
29:39:8b:15:bd:c7:21:01:6e:77:fa:7b:b8:40:5b:
7c:32:73:bf:bc:f8:ab:b7:0b:b9:4a:91:76:98:5d:
00:a5:75:4a:a8:1f:0a:9a:56:ef:fc:a0:48:e7:d7:
22:4f:8d:b8:71:58:5e:c2:30:09:77:5e:be:8a:dd:
2e:3d:bd:45:7a:4e:d3:dd:38:f9:28:1f:6f:32:aa:
18:10:22:11:63:f2:63:a1:9d:46:01:bd:d2:6d:c3:
1a:fb:b7:2e:2a:a6:3e:43:67:bb:a5:27:ff:30:91:
6f:f6:57:f1:e0:6f:f7:ea:ca:af:3c:61:86:c4:98:
1f:08:e8:c2:02:4e:26:22:2a:ab:77:87:75:3a:01:
aa:fd:ca:f9:26:67:ae:fa:b8:9b:1e:c9:d3:b7:32:
e9:a5:b0:79:78:44:a9:6f:72:78:36:e7:dc:b6:d2:
15:4f:86:52:f0:69:b4:75:bd:3a:8e:73:45:60:9c:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:A8:0B:D1:EE:E7:75:DC:93:8C:48:69:E1:99:92:B6:5F:3C:CF
X509v3 Authority Key Identifier:
keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:38:6b:a0:94:b9:95:90:15:b8:36:ac:5e:a1:bd:20:c4:75:
ee:f0:9a:a0:18:cb:b8:90:0f:76:78:0c:df:85:fd:3a:58:78:
a4:25:a4:ff:fd:97:4c:5b:37:6b:89:b6:33:c1:a8:c7:26:7d:
ab:12:ee:57:87:e8:aa:7d:27:fb:b2:8a:73:e2:36:14:b8:ab:
bd:2b:ae:65:42:0b:fd:d9:74:35:e3:22:6f:db:dd:4f:61:25:
92:7e:f0:51:18:1f:00:d2:10:87:0d:37:25:eb:14:d3:56:0c:
19:e6:49:33:04:0d:28:73:7e:8a:d6:91:26:72:d0:69:5e:a7:
ba:22:e6:3a:c1:be:7b:0d:fd:ef:90:5e:ca:3d:d1:36:3d:27:
9f:cb:04:d2:a5:14:88:13:d9:5c:f0:88:72:9d:79:1a:b2:3f:
79:47:df:b9:40:da:3c:34:00:06:01:6c:2e:12:0a:9d:fc:1c:
03:a6:29:21:02:73:cc:68:d1:2d:5d:57:d2:fa:a8:bc:6c:bf:
bd:e4:76:f1:5b:75:49:b1:62:36:38:db:f0:2c:0f:b4:f8:ec:
d2:8d:fa:8d:5f:7e:15:0a:b1:f5:10:25:bf:c8:7e:36:13:63:
81:0f:5b:77:b5:6e:8a:6b:60:7c:ba:29:5e:89:3c:15:9f:67:
27:cf:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:28 2026 by rpki-client