Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: gwvXVWzDg09k7jT7UvwZ8uOuckWQUkG5UF7725ehou4=
Subject key identifier: D9:A7:32:94:CD:AC:9C:E1:63:A7:B0:77:68:39:6E:FD:65:27:0E:22
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 019CAB34008F49F0EAFF7974D9A97B115DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: P+JNB92zyMwGefV/gDYpMXUIhx490ergOLjkhN6Y/q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:00:8f:49:f0:ea:ff:79:74:d9:a9:7b:11:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=d9a73294cdac9ce163a7b07768396efd65270e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:48:fa:ad:3a:32:52:8e:c3:02:f4:27:2f:
63:3f:67:9a:d5:91:15:17:e7:50:2e:56:3a:41:a9:
88:8e:77:d3:b9:bb:30:99:b0:c5:24:26:fc:57:42:
f8:98:0e:a0:27:e2:4e:32:ac:cf:bb:bf:e5:3f:16:
a4:ad:1b:40:c9:ce:c9:3a:1a:fc:51:08:99:89:ef:
e2:e7:d5:1d:7c:67:6a:a8:ed:ef:c8:de:50:2b:aa:
64:78:6f:aa:d7:1f:fd:40:72:24:0d:f2:c7:27:d0:
b8:a1:98:c8:e2:c2:cf:71:e5:bc:a2:b5:a8:c6:6b:
e8:e9:ee:55:02:9f:54:e2:c7:5e:05:cb:39:70:61:
cc:99:c3:01:9a:f8:46:cd:f6:71:c0:93:b2:c2:99:
50:36:65:43:a0:d9:9f:fc:6e:b5:ca:1e:24:59:94:
10:ad:9d:cf:b6:29:65:66:7f:e6:f1:87:d5:f9:a6:
b0:d2:51:a8:54:db:77:2b:82:ec:f7:6f:50:f5:51:
b6:aa:a9:65:cf:43:83:52:37:99:18:46:31:ad:72:
2f:68:41:34:1b:37:20:f2:58:63:76:a8:94:cb:24:
e3:6c:c9:f6:c2:5b:b9:9a:ff:ff:17:08:9c:0d:7a:
de:fb:9b:33:00:53:0e:10:d2:3f:81:08:0a:ad:fe:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:32:94:CD:AC:9C:E1:63:A7:B0:77:68:39:6E:FD:65:27:0E:22
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:2b:40:2f:92:41:cf:52:e2:f7:d1:87:1b:78:07:97:98:
a3:e2:3f:ff:4a:01:71:99:81:08:1e:80:12:d0:76:f5:53:97:
4e:de:17:80:20:e1:f0:4f:80:4b:11:0d:af:18:35:a7:4b:09:
f8:8d:56:56:e1:58:59:40:09:00:f7:44:7d:2f:2a:de:f4:10:
7d:0c:3b:5a:8c:65:24:d9:ff:a7:1f:62:81:4e:b2:19:b9:81:
e0:71:95:bf:a1:f9:8c:9a:d1:c9:86:22:e3:33:4f:ab:02:7e:
f3:44:8c:e4:d4:33:12:31:79:43:f1:ad:5c:12:3b:bd:05:d4:
7c:67:63:84:04:98:99:ea:42:d5:45:90:5a:d8:a3:8c:4b:d0:
ef:bd:cf:2e:62:89:71:af:cf:97:85:2f:08:70:89:5c:da:44:
49:75:76:5e:dc:5d:9f:34:0c:61:a4:59:e3:7e:83:b7:40:e6:
92:8e:a5:5f:67:4f:59:6e:d2:d6:6b:90:96:1e:96:9d:45:62:
ab:f8:8f:53:72:5f:b4:92:8c:f7:e4:9c:11:03:fa:b2:c2:2c:
b9:c1:87:18:52:65:b1:c4:27:fa:49:fd:1a:c6:6f:c3:45:00:
91:bd:9e:01:5c:71:42:fb:6e:4c:4d:12:fd:f4:6c:ea:47:c0:
f8:f0:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:32 2026 by rpki-client