Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: LptfcdB8MaJKF+cbwmIA3TrenUB9I+TADFofM9lGdxQ=
Subject key identifier: A2:99:11:D8:B2:62:6C:4F:69:B8:A3:F3:53:78:05:FA:98:A6:1F:F6
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019CACEB9B40D2966BEB133C2DDFEAF1B932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 168B
Signing time: Mon 02 Mar 2026 05:00:47 +0000
Manifest this update: Mon 02 Mar 2026 05:00:47 +0000
Manifest next update: Tue 03 Mar 2026 05:00:47 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: Tm2lJaTkzjjDxyfWeQbROiAq6i4Gzq8DAexjEXlIVkA=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9b:40:d2:96:6b:eb:13:3c:2d:df:ea:f1:b9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Mar 2 05:00:47 2026 GMT
Not After : Mar 3 05:00:47 2026 GMT
Subject: CN=a29911d8b2626c4f69b8a3f3537805fa98a61ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:9a:1e:1c:b3:23:36:b7:3a:5e:81:e1:fc:
d2:05:fd:44:bc:5e:6e:e2:96:13:cf:ee:41:5f:2c:
28:bb:53:49:fa:71:09:ab:70:58:12:8f:f0:e8:35:
e4:d6:87:13:38:46:42:ba:54:f4:99:68:6b:2b:c1:
4d:1d:1f:e1:48:5f:8d:9f:72:60:1d:86:46:e3:e0:
61:57:1c:42:ec:56:b9:d1:e7:6c:51:56:d3:c3:07:
73:5f:c3:53:cc:36:cf:52:fa:54:7d:04:15:b8:74:
f3:40:64:f7:a5:6b:9f:03:04:84:cf:f4:a1:fe:74:
8f:23:1d:eb:76:e5:c9:03:55:0e:75:00:07:1b:4a:
42:23:bf:a7:9a:77:e9:fe:1a:ad:b2:52:f3:81:b3:
8e:53:64:1e:59:b4:65:27:5c:25:e2:d5:ab:79:c3:
2f:f2:5a:cd:f8:0f:4a:3c:0a:78:fa:74:b5:a7:59:
02:83:5a:d9:b6:b0:28:35:bd:e6:f1:6f:0a:6a:9b:
c7:b3:73:ff:a0:26:f2:80:9c:1a:a0:11:b1:e9:7c:
b8:2f:ee:1c:f8:fe:75:0e:85:9e:b9:6d:72:9c:8b:
95:27:e7:5d:aa:d2:18:0c:cc:dd:dd:47:c5:ec:fe:
ca:bf:ed:03:9e:31:0a:2a:38:2a:07:60:5a:c7:ad:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:11:D8:B2:62:6C:4F:69:B8:A3:F3:53:78:05:FA:98:A6:1F:F6
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cb:ff:11:41:57:86:6a:b2:d0:56:20:d6:eb:e5:11:37:51:
b9:37:ed:92:d4:50:7a:9d:a1:0a:32:91:98:ec:cd:86:5e:4c:
f1:3b:b7:89:3e:e2:42:f9:bc:68:d5:0e:0f:5b:54:7d:5b:4a:
43:7e:ff:bd:2d:bd:a7:08:bc:16:3d:49:90:91:fb:32:e9:03:
aa:ff:11:c9:9e:3b:20:2c:91:09:95:c6:f9:ac:c3:6a:44:ae:
76:b5:0b:cb:3d:38:83:2f:60:53:51:df:0c:de:d0:a2:d7:c1:
2f:24:18:9a:fd:7e:79:e9:76:5d:ae:06:17:66:b2:c0:a6:89:
8d:0b:0c:cc:3f:73:03:d7:f5:95:85:a9:48:c4:32:90:db:85:
a2:5b:39:29:48:32:41:44:7c:fa:7b:8c:c3:81:cf:69:76:f2:
02:59:be:b0:19:dd:17:e1:13:29:2d:53:b2:df:6c:28:9f:35:
fd:d9:47:7e:74:27:1e:06:a5:c6:91:3a:6a:de:0a:b7:e1:cd:
c4:aa:a6:26:74:6b:7b:0a:6a:d1:27:13:9d:87:4c:75:23:14:
43:ca:15:6c:31:66:df:63:85:05:4e:e3:ba:e0:3b:34:3b:40:
fc:6d:98:99:86:b6:c8:96:22:be:c0:b8:18:e3:eb:46:3e:13:
dc:c5:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:15 2026 by rpki-client