Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: GUOKQuI2lqDb+U5HdlPlDQZWghGlMkGblA/Xc9E3oPQ=
Subject key identifier: 50:46:21:02:0C:BB:7D:F1:02:E2:D0:83:D0:6F:F3:BB:64:51:AB:91
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 019CAB6BCC021217F862D338FBF2B771F399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 11AA
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: CTsyOUxJ8/yBkRXrlZ+LKm2d9xdCBfsJxkuaVuq6f7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cc:02:12:17:f8:62:d3:38:fb:f2:b7:71:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=504621020cbb7df102e2d083d06ff3bb6451ab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:ba:c4:0c:7a:f5:aa:b7:7f:45:01:3f:61:
e6:59:33:c5:9d:18:e8:6f:e5:e4:ab:38:8a:19:41:
ec:e4:3d:df:70:c1:47:87:34:01:f4:6c:95:e5:b6:
a1:45:37:ff:59:88:3a:4e:39:3d:6c:74:11:30:2e:
62:f1:7e:56:41:19:fb:4c:b2:9b:ab:9a:df:54:2d:
85:b1:17:06:51:b1:c3:94:11:e9:ba:0c:ef:9e:fa:
a9:dc:c9:ef:58:4a:87:e7:b9:4f:f2:24:43:2c:db:
4c:f8:96:b7:fa:c8:30:dd:5f:0d:f4:c1:e0:5e:bf:
bf:ea:2d:06:bc:95:c1:bc:69:26:18:73:2e:8b:35:
9d:e7:2c:20:70:21:99:a7:d4:7d:5e:51:40:6a:8d:
ad:4d:1c:08:9b:e3:0b:00:ff:9b:7d:09:b1:7c:60:
98:54:27:62:7f:c2:e4:37:ee:f5:93:d7:90:1b:71:
d5:e6:b6:8a:0e:7e:59:63:af:7c:e5:a3:eb:fe:8b:
a7:0b:5c:66:b1:b7:1e:0b:0f:80:4a:38:6a:90:3e:
85:0c:ac:1b:78:02:04:8b:86:02:18:57:e7:76:a2:
25:62:70:69:23:73:76:75:0c:19:02:be:12:13:f9:
8c:be:ef:00:18:06:7b:12:85:a2:d6:59:1d:ce:38:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:21:02:0C:BB:7D:F1:02:E2:D0:83:D0:6F:F3:BB:64:51:AB:91
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:1c:a7:0d:54:70:51:ae:52:55:a0:15:84:8d:c0:d8:10:
9e:1c:98:08:bc:72:29:a8:50:3c:77:73:3e:3c:0d:34:2e:12:
ce:d9:e7:85:dd:57:53:f1:31:3f:3c:4e:4b:35:9d:70:b1:96:
b5:2b:87:d9:09:ee:40:da:58:1e:e2:ce:c2:a7:31:06:98:d8:
1e:6e:5d:f0:86:3d:7d:7c:57:c9:69:1a:2c:37:38:c5:31:43:
ab:f8:95:31:f4:6a:2c:f9:5c:92:68:50:75:0e:66:fe:97:75:
de:fa:1f:42:63:06:14:7a:3e:4d:fa:4f:10:0f:24:a6:5e:f7:
f2:a0:bf:6f:d6:ef:16:f5:c1:81:0b:9f:a1:61:b8:c5:fb:28:
1a:38:dd:ee:98:77:19:af:4f:67:b1:f8:94:08:28:24:56:c7:
c0:c4:7d:81:f2:3a:53:86:c8:b2:f3:eb:84:c2:6b:8c:1e:8d:
5f:40:1e:08:f6:c7:fa:84:00:ee:75:62:c4:d9:0b:47:89:35:
3b:98:d3:cd:37:d5:60:e3:83:c4:f1:27:a6:a2:bd:c3:80:51:
b1:bf:ca:79:22:e5:90:aa:d8:9f:9d:e7:29:c7:d5:71:51:63:
ae:7a:56:1e:7e:96:1c:d5:7f:62:22:d6:fb:7b:74:f5:ea:ca:
ff:6f:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:32 2026 by rpki-client