Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: 3TfYQg/ogQCQoXG61wW2sVmYVmHEsbkGMGAlY2IPnfo=
Subject key identifier: FD:E4:DD:56:45:8F:3E:C1:A0:FD:48:A8:8D:78:00:56:C8:E0:E6:09
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 019CAC1067B7CA99DB5D9AC879D57D7B8DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 1382
Signing time: Mon 02 Mar 2026 01:01:21 +0000
Manifest this update: Mon 02 Mar 2026 01:01:21 +0000
Manifest next update: Tue 03 Mar 2026 01:01:21 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: qRU1t9xKSvwsucv29oGyvQPCzsfoyHLUo18/oN72jkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:67:b7:ca:99:db:5d:9a:c8:79:d5:7d:7b:8d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Mar 2 01:01:21 2026 GMT
Not After : Mar 3 01:01:21 2026 GMT
Subject: CN=fde4dd56458f3ec1a0fd48a88d780056c8e0e609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:46:26:7e:e3:b1:0d:e0:04:ff:1f:b0:ed:
12:9e:be:02:c6:4a:77:8e:be:9a:9f:34:e3:36:36:
5e:02:3a:cf:76:a8:b9:d9:16:cc:66:33:f0:45:35:
34:77:ee:88:cb:fb:22:ef:a5:e2:a7:72:60:68:32:
64:79:28:79:3e:d2:40:c6:05:e3:53:31:da:da:59:
82:d2:ac:70:c4:f1:5e:4c:ba:c8:39:c9:17:04:46:
e2:6a:ec:44:0a:ca:14:fe:fc:2a:76:d6:88:b0:f1:
0e:75:6d:a6:2a:30:f2:dc:5e:66:0a:76:83:e5:55:
f8:a3:e2:c8:69:67:81:ac:12:e6:f1:bf:c5:f3:ab:
c8:71:ad:fe:9d:7d:fe:7a:40:27:9d:1c:aa:51:32:
04:24:37:db:1a:fa:c1:be:92:8c:71:e3:93:fb:39:
b2:85:0b:54:98:c4:54:9a:af:4f:f0:9f:21:5d:6b:
0c:1b:a4:20:be:84:a3:82:a6:b9:5f:d6:3d:e5:e9:
4e:c7:02:3a:01:33:1b:1d:0c:c5:ea:8f:1a:c0:4a:
ef:5f:26:8a:e4:42:7a:94:9c:48:6d:bb:50:f7:ba:
f0:e4:97:54:53:7e:21:18:0b:30:88:d3:bc:e2:ca:
e5:d3:5f:8a:d7:f2:4b:8d:f1:c9:ac:07:7e:25:93:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:DD:56:45:8F:3E:C1:A0:FD:48:A8:8D:78:00:56:C8:E0:E6:09
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:86:51:6d:77:57:54:bf:80:55:99:16:51:99:93:10:de:
b5:42:a2:9b:b8:24:4e:a9:a9:6d:cd:f3:35:9d:5f:a1:96:7b:
24:89:46:0d:58:1d:5d:b7:ab:36:dd:65:8f:7e:51:01:32:23:
40:14:4e:0b:af:af:93:60:7f:4a:69:53:1a:0d:cd:57:9e:45:
f3:f2:23:b4:4a:6d:a8:24:dc:c3:89:0d:92:83:e6:4a:54:03:
7b:ed:56:8c:29:cf:9c:c0:4b:9a:39:1f:4b:92:4c:c0:5f:db:
c4:39:b6:3c:e3:99:75:b2:19:1b:79:16:db:f0:12:6f:d1:90:
6f:54:89:66:2c:96:f2:ab:5b:0a:ef:6e:c0:52:99:3d:52:db:
4f:9a:0b:a8:2f:ed:0f:fa:e8:61:da:73:e6:e1:fe:43:c7:ba:
d5:bd:15:0e:5b:77:46:ed:b7:44:41:f0:06:7c:03:97:ee:a3:
f5:4e:f7:51:df:c1:0f:ef:07:d6:1a:a6:e6:09:2b:64:d6:72:
55:e3:a4:fb:5a:fd:10:b1:e8:18:66:39:f2:d5:9f:fb:66:66:
32:56:b8:2e:bc:5f:12:eb:78:5b:b3:0d:5f:85:bc:78:f7:e8:
9c:16:b9:c5:ec:a4:6e:ca:16:5b:e1:fd:06:34:16:4d:ff:77:
23:06:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:42 2026 by rpki-client