Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier: rnBoeT8Hsm26YyKBvigdwS6IrTgK2P3idPlguzAUyoI=
Subject key identifier: 7C:4F:86:DC:3F:AB:4F:FE:64:AA:61:6F:15:1D:7D:10:A7:F5:4F:D9
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 019CAF7EE161CB71A116629464AF445E736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number: 0312
Signing time: Mon 02 Mar 2026 17:00:53 +0000
Manifest this update: Mon 02 Mar 2026 17:00:53 +0000
Manifest next update: Tue 03 Mar 2026 17:00:53 +0000
Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: lxkhj7buc9QaJvMhJ0zhnJRe5B+m98iTgWQDFCn9HL0=)
2: hkxJH8qDns81hHO_TEwuH8z_Eac.roa (hash: WI/ahDUF+5IzjpWVPH44VyOD7TChtaZ1JW84a/hYGec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:e1:61:cb:71:a1:16:62:94:64:af:44:5e:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: Mar 2 17:00:53 2026 GMT
Not After : Mar 3 17:00:53 2026 GMT
Subject: CN=7c4f86dc3fab4ffe64aa616f151d7d10a7f54fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:ff:0b:91:3e:2f:8b:15:d9:70:60:16:bd:
89:a3:4c:d7:1d:6a:86:18:c3:8e:60:b6:00:ce:ae:
ff:22:be:cf:a3:3e:d0:d3:d6:61:44:e3:cf:bb:4e:
16:2a:68:44:95:9f:08:05:dc:b5:76:4f:3c:2d:2f:
10:20:9d:db:d8:a7:bb:d8:98:a3:1e:0f:b0:f8:12:
a3:04:b1:78:34:05:fa:cb:e5:64:77:e0:b1:0f:b6:
13:5f:75:5e:b4:58:85:31:ad:a1:65:3b:8f:0b:12:
70:9f:3c:ba:1e:b3:64:72:00:f4:0a:31:71:4a:86:
7d:c2:be:a7:71:33:ab:a1:5d:79:1a:8b:49:72:ba:
d5:94:51:13:e0:b3:42:8b:26:ce:bf:77:a2:c8:3a:
03:5a:1c:b0:34:aa:31:7e:f9:0d:43:e4:ed:b5:ec:
99:a6:08:63:55:db:58:d4:9f:0b:d2:17:e2:25:cb:
9f:be:2e:42:d8:d7:21:95:ed:8a:e3:05:52:93:5c:
cf:17:b6:74:0a:be:9c:e2:11:85:51:76:b1:5f:41:
e6:a2:0b:3b:7d:c8:a8:ca:c1:7f:a5:7a:02:7b:5d:
d6:2b:73:f4:2e:74:3b:a0:ac:f5:23:32:d8:79:74:
72:f6:0d:2d:d3:04:b7:43:3d:49:46:ce:66:f6:ac:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:86:DC:3F:AB:4F:FE:64:AA:61:6F:15:1D:7D:10:A7:F5:4F:D9
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:df:b5:c2:ad:a2:29:47:ba:19:94:a2:af:ae:c2:58:ca:09:
ca:8d:1f:cc:b5:52:2d:60:86:74:2e:f8:aa:ff:c8:9e:3a:2c:
a4:02:b8:1c:1a:53:5b:81:c1:66:d3:d9:69:18:23:76:e0:1d:
24:f2:ba:4d:fc:99:42:4c:89:9f:16:aa:c0:ab:e1:9c:c2:39:
b4:44:94:c3:93:8a:2e:d6:b8:16:f3:fe:35:63:de:10:a9:05:
9c:59:36:f9:18:3f:d7:a9:85:5d:46:fb:ba:e5:8d:15:cc:73:
ba:d0:81:22:30:63:75:59:aa:ac:4e:32:ed:60:ad:34:3d:73:
b5:94:1e:1d:1b:ff:32:c5:4d:b4:ee:24:b9:bb:3b:0c:8e:5a:
13:ac:89:b8:ce:b0:6d:60:a2:86:ae:82:69:31:8f:93:ba:a5:
5a:27:79:c3:64:9c:c0:77:24:2d:2a:dc:96:5b:96:5c:82:25:
5b:11:9e:c8:a0:04:70:1a:4c:f6:5b:96:35:f8:57:15:a3:79:
02:b6:6a:c0:4a:f2:08:30:86:08:5d:49:cf:0b:bf:fb:90:e8:
df:db:30:73:59:c2:85:5e:c8:55:fb:31:3a:3c:b7:d2:c6:47:
d2:19:30:c6:35:2e:1c:45:c8:ed:78:bd:a0:c6:e5:13:01:d4:
88:9c:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:51 2026 by rpki-client