Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier: CCEWoC2LxodZrGeiq7GeHr68y92qougEMFZXoSAxzjo=
Subject key identifier: 9D:B7:9D:5A:18:C9:C5:21:E4:32:DC:CE:94:9F:4C:CF:DC:0B:8F:45
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer: /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial: 019CABA1B322B271B5D807B72571197B695C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number: 0326
Signing time: Sun 01 Mar 2026 23:00:26 +0000
Manifest this update: Sun 01 Mar 2026 23:00:26 +0000
Manifest next update: Mon 02 Mar 2026 23:00:26 +0000
Files and hashes: 1: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: t27Im3arqkbt7HPQF3lyo3Ca0dKneJc8i5DDuLMlH4s=)
2: Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa (hash: JdPihEsZ6tT2+sczntCGGr/PDdYGd+kbINCzgVJa7xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b3:22:b2:71:b5:d8:07:b7:25:71:19:7b:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
Validity
Not Before: Mar 1 23:00:26 2026 GMT
Not After : Mar 2 23:00:26 2026 GMT
Subject: CN=9db79d5a18c9c521e432dcce949f4ccfdc0b8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:0e:9c:b2:4c:f6:31:52:e9:24:1f:f6:94:
49:75:29:ca:51:7f:96:f5:dc:b1:5b:73:83:6c:25:
47:b4:48:0a:79:61:cb:49:f4:6f:ed:59:37:5b:a8:
e6:47:aa:11:0f:7b:8e:b9:83:c9:e9:40:90:44:bd:
9c:3f:d7:70:3f:d5:43:1e:c6:c1:4e:34:da:e3:4f:
1c:89:3b:e0:0b:9e:c8:a1:a4:3d:6c:f6:c4:d4:9d:
fa:80:d4:5b:80:15:1e:3a:f7:4e:79:1e:0d:84:57:
fd:5a:5a:f3:a3:e0:ed:50:35:c3:23:f7:17:83:04:
9c:01:5d:21:0e:f6:8d:eb:1a:0d:42:0c:e7:4b:33:
db:0a:66:08:a2:3f:36:0e:2b:b2:2f:5d:35:b4:b1:
78:c4:7c:f5:64:db:ba:58:5d:a7:f5:d1:82:42:64:
3d:47:64:2e:5a:a4:20:e9:1c:3b:a3:37:02:47:b0:
a5:f1:4c:5b:30:ae:a0:c0:38:9f:c1:86:7b:a7:24:
22:ff:82:aa:66:ec:01:12:90:ea:eb:0d:ef:da:c4:
05:10:eb:91:d8:17:b7:c5:2c:88:f7:d2:ac:fd:93:
6b:42:02:e9:05:e5:dc:24:95:34:85:23:f5:58:f8:
bd:c8:af:e1:0a:44:f7:24:8b:85:fe:4a:46:f4:98:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:9D:5A:18:C9:C5:21:E4:32:DC:CE:94:9F:4C:CF:DC:0B:8F:45
X509v3 Authority Key Identifier:
keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:78:e3:5b:86:91:c9:f6:77:8c:0b:52:81:c0:3d:b1:fa:
5b:fa:e3:f8:b0:f6:24:82:ae:ca:86:09:4e:f3:a1:3b:08:68:
84:62:30:19:97:67:31:21:01:b8:9b:f3:f7:7e:1c:1a:bf:88:
6e:f4:66:7a:e7:cf:db:c7:ea:e7:be:fd:fd:fa:01:ce:9f:33:
2a:cf:93:7d:b4:b6:3b:87:a0:fa:d3:51:81:d9:5f:34:ec:c2:
64:9d:da:7a:03:39:2f:c7:c3:df:e0:de:cc:0c:28:bb:38:59:
cc:c8:7a:03:70:b8:ff:5f:26:aa:0c:b2:20:1a:b5:81:9d:14:
6f:3b:70:e4:df:6b:65:61:15:13:3a:57:95:cb:60:97:01:06:
e5:55:d1:d6:2f:5a:a0:61:f8:44:b5:3c:f6:e3:51:fd:ba:91:
dc:24:64:7c:7e:f0:12:42:d9:6e:9d:0b:77:9e:4b:50:05:59:
99:b3:9f:4c:be:79:5b:8a:d3:0d:96:c3:0c:01:9b:78:93:56:
a9:d7:f8:23:c8:8b:74:99:12:47:56:1a:2c:c6:74:27:38:5c:
3d:32:f1:2a:c8:02:3d:0c:4a:ee:f2:b9:84:bd:bb:3d:52:36:
dd:bd:35:ee:51:56:54:68:23:24:21:58:03:87:13:21:1b:d3:
68:4b:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:51 2026 by rpki-client