Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: hC7PXAGSvneQyQuX30w+aNlnxey4yStbbg6mSXa+RV8=
Subject key identifier: 5A:51:22:E7:5C:B4:97:4B:7E:51:20:72:C2:11:88:3C:0A:EC:1A:6D
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 019CAC1001DFD81F8C0EEE838CAFD222FB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0F2B
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: Hl/7npU/GlMB6Z+Q6cdoSHZXS77d9Nffm3K6gbi3gV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:01:df:d8:1f:8c:0e:ee:83:8c:af:d2:22:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=5a5122e75cb4974b7e512072c211883c0aec1a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:b0:fd:fe:9d:2c:28:2a:81:fe:51:c6:52:
f1:ce:8d:8e:01:08:4e:20:da:05:e5:49:cf:32:08:
e6:3a:73:d4:eb:f0:06:3f:03:ef:4c:56:ba:04:3a:
00:81:4e:1d:00:28:4e:5b:40:80:d3:dc:21:f1:32:
22:c8:03:a9:ae:16:e0:18:8d:85:98:3c:36:74:2f:
cc:d6:e6:d3:b0:45:3d:50:13:2c:bd:79:1e:b1:1b:
19:94:73:41:37:38:e1:2c:94:3b:a5:20:49:22:af:
e5:85:9a:39:a0:9c:a8:9f:5c:5a:07:57:04:9f:aa:
96:21:cc:9b:be:64:23:50:8e:c3:c7:5e:a7:85:51:
fe:c1:1d:fd:cc:7d:d1:02:35:69:e1:c6:a8:71:8e:
1e:00:5c:ca:3d:67:8e:b4:3d:d6:cb:52:e5:cb:b4:
68:a1:95:c8:30:fc:23:ee:4b:20:de:b1:24:73:6f:
70:4f:7a:71:e1:1c:e3:cc:66:66:52:6b:2d:99:52:
ae:e5:81:b2:87:24:93:79:e6:c3:96:71:0f:16:96:
9a:35:3d:fc:e5:f1:cd:61:3a:6b:10:b5:4e:a4:5f:
c6:4e:59:07:ad:51:c9:fc:97:71:c2:77:14:d3:02:
16:16:75:6d:38:93:d5:92:74:3e:d7:fc:4d:d5:6a:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:22:E7:5C:B4:97:4B:7E:51:20:72:C2:11:88:3C:0A:EC:1A:6D
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:36:28:95:09:89:43:03:ba:42:01:67:c4:55:64:20:0a:
9a:a9:cc:f2:ef:a1:70:db:71:93:7d:d7:71:c5:a3:cc:9e:1b:
db:07:be:c4:3b:53:4d:a5:1d:c9:61:91:40:3d:03:23:c2:01:
b1:e4:5a:05:b5:31:2f:c0:ef:3a:4a:76:04:df:eb:30:93:85:
95:bc:da:7b:42:3d:c3:5b:92:2a:50:49:d2:fa:64:ab:d3:28:
62:9a:90:5f:2d:7f:59:2e:ec:b6:92:ff:c8:46:6c:6b:e7:0c:
15:e1:24:9a:71:38:14:7d:ae:58:ae:72:e6:8c:41:7f:81:0a:
3f:41:6a:c8:5e:75:46:df:42:97:f5:73:3a:23:56:fa:ac:79:
6b:f7:72:38:0a:c2:ac:23:0a:1b:9c:d0:37:3d:ee:ef:04:89:
e0:04:68:19:5e:de:70:6b:78:50:fd:58:8d:c3:da:e8:6e:12:
78:6e:ff:96:30:89:70:c0:e6:d7:75:9b:7f:c9:84:e9:86:31:
d1:2b:73:1f:b1:67:34:81:a9:23:c2:04:8b:b5:97:10:ad:b4:
7f:a9:6f:86:13:8e:ed:f4:be:e1:61:d9:cb:bf:9f:9e:06:97:
38:14:c8:86:d8:67:51:dc:20:7c:11:0c:3e:3d:d7:89:70:4a:
05:42:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:15 2026 by rpki-client