Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File: 6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier: Q1gnO0/PnxF9pwRZJNpx6u2NcAU+rvz426+OCFGiFQo=
Subject key identifier: 54:46:85:78:67:89:E6:9C:D5:A3:33:3B:A5:EA:DD:E2:C3:74:2D:2F
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer: /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial: 019CACB4AE7F5F16021DB1153C97B3C0A007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number: 0EDA
Signing time: Mon 02 Mar 2026 04:00:48 +0000
Manifest this update: Mon 02 Mar 2026 04:00:48 +0000
Manifest next update: Tue 03 Mar 2026 04:00:48 +0000
Files and hashes: 1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: YysDCSQpw/Szau4kUgj8QWIBxRvvqJ0/uw4NvzHqVKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ae:7f:5f:16:02:1d:b1:15:3c:97:b3:c0:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Validity
Not Before: Mar 2 04:00:48 2026 GMT
Not After : Mar 3 04:00:48 2026 GMT
Subject: CN=544685786789e69cd5a3333ba5eadde2c3742d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:0c:b5:b3:63:79:73:67:b2:11:b6:71:80:
97:70:a5:a7:90:50:8b:28:71:e9:ae:12:de:63:76:
c8:2e:b9:5a:98:1d:63:f1:51:a3:b1:bd:46:4e:24:
37:53:6c:c8:0e:b7:e4:89:64:8c:e7:fd:04:3e:6d:
63:16:02:9b:8a:95:84:b1:c7:d1:e0:cc:8f:cc:fb:
09:03:c4:c5:bb:d8:6b:ee:99:5b:ba:0a:69:98:88:
03:58:c2:86:60:6c:e2:58:bb:39:ff:d6:dc:f4:88:
01:f2:e7:e1:50:3a:53:9d:49:ac:07:1b:89:df:58:
9a:e4:cd:8e:b4:c7:2a:87:a2:3f:c0:12:64:e7:10:
8b:99:ce:e8:65:25:7b:42:ab:0f:8b:8d:bd:3f:97:
84:95:83:e3:db:cb:3e:36:af:d1:11:34:2e:61:ea:
96:8b:2b:db:c9:00:95:a3:cf:b8:64:68:b4:27:35:
bf:a5:24:61:9e:62:33:8d:fa:5f:3b:3a:99:48:33:
10:0f:9c:da:53:93:42:20:68:9a:c6:d4:72:21:19:
c1:fb:dd:c8:a9:ff:ee:72:a4:31:fd:b8:4a:25:39:
b9:30:ef:4a:10:63:9d:dc:68:f7:e9:56:9d:9e:7c:
4d:da:d4:8b:24:6f:21:84:94:d0:6f:bc:4e:ee:5d:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:85:78:67:89:E6:9C:D5:A3:33:3B:A5:EA:DD:E2:C3:74:2D:2F
X509v3 Authority Key Identifier:
keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:e8:42:97:46:06:65:4b:51:59:ac:cf:9c:10:d2:d8:2d:
b5:16:44:47:b8:12:1d:ea:09:40:ff:c1:65:cd:ca:b7:46:72:
ef:e8:10:54:84:a2:56:9c:f1:94:7a:50:ee:25:c0:e7:44:45:
5f:3c:ea:86:ce:d4:38:0f:45:57:3d:f3:10:df:98:a5:35:51:
a0:42:2a:1e:3a:d8:26:0d:fa:e0:bf:36:32:ad:d9:a2:d0:f9:
d1:f8:4d:3e:4e:df:b8:f2:77:da:f9:28:b3:78:2f:77:b4:ad:
ff:3c:ff:15:a9:7f:56:a1:7b:23:eb:97:14:65:4e:9e:ec:50:
f6:e1:13:d4:ce:8d:4f:ba:90:20:81:78:75:fd:c5:0f:57:89:
9c:7e:18:b8:eb:72:30:00:49:2a:5c:01:61:27:60:22:b6:f7:
96:6f:15:10:2e:e5:61:61:98:08:2b:d5:01:8e:70:3c:da:08:
62:e7:a5:de:50:39:11:5c:a0:fb:e2:95:9c:8e:c9:b6:57:a4:
68:11:5a:d4:d7:50:bc:14:36:10:be:c7:8b:40:b9:54:08:ed:
d1:3d:a9:97:bc:e0:08:64:b3:36:74:4f:68:f8:59:c2:ef:59:
16:18:56:fc:6d:64:a8:92:46:c1:2f:9d:5c:b0:49:47:32:a7:
46:3b:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:52 2026 by rpki-client