Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier: gKVCoHLuhwbvFJrXAgJdIAFzPD/nKavHOMa4GTwxfhE=
Subject key identifier: 9D:3D:CA:5A:1B:1B:3C:10:B8:36:AB:FD:D0:EB:30:44:D5:F2:4F:69
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer: /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial: 019CAD5A09867B30D400A782D7F9ACEF9433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number: 0FDD
Signing time: Mon 02 Mar 2026 07:01:24 +0000
Manifest this update: Mon 02 Mar 2026 07:01:24 +0000
Manifest next update: Tue 03 Mar 2026 07:01:24 +0000
Files and hashes: 1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: xPmZxoYP3TOTdYIU6m3ebzxegE/miDbwa20XrSgNiEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:09:86:7b:30:d4:00:a7:82:d7:f9:ac:ef:94:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Validity
Not Before: Mar 2 07:01:24 2026 GMT
Not After : Mar 3 07:01:24 2026 GMT
Subject: CN=9d3dca5a1b1b3c10b836abfdd0eb3044d5f24f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:fa:a3:6f:2d:5e:89:72:1b:26:cd:5d:e5:
7b:52:6d:08:84:e4:f8:ee:49:3b:3e:95:60:ca:5f:
83:23:2a:77:4d:66:8e:59:72:b4:4a:11:07:db:91:
db:a5:85:8a:e4:c2:fd:4b:17:73:95:0f:21:8e:df:
e1:d6:6e:5e:ed:e6:3f:b5:2d:af:ba:72:4a:31:03:
65:5a:fe:bf:ed:d2:52:8e:0d:53:72:86:66:35:db:
fd:56:41:ec:61:b0:30:f5:ec:aa:f2:54:9d:33:0c:
8b:32:4e:7b:be:66:95:f7:11:b8:26:32:26:02:a5:
16:27:53:f7:58:63:63:ae:79:96:cb:66:e5:ab:0c:
d1:2c:33:28:42:d8:9d:e1:76:a9:58:12:3e:f2:7e:
fd:a0:e9:6e:eb:e1:57:62:14:c6:8b:14:dc:90:20:
69:d5:7c:54:eb:a0:d3:34:03:01:bb:7d:f6:54:b7:
b5:6f:ee:db:01:98:f3:30:35:06:33:1e:68:47:6c:
f3:38:12:b1:ff:cb:eb:e5:f9:ac:3a:aa:07:7b:b7:
34:46:e2:17:36:8c:0e:19:9f:ba:a7:77:d2:3f:7d:
07:7b:48:54:75:3d:d4:a8:75:40:29:b1:19:6f:f6:
d1:a2:9b:88:73:62:fc:8c:58:b4:b9:46:31:af:a7:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:CA:5A:1B:1B:3C:10:B8:36:AB:FD:D0:EB:30:44:D5:F2:4F:69
X509v3 Authority Key Identifier:
keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:c4:d8:aa:1b:32:1f:3b:1a:94:1e:78:9f:ad:d4:a1:6d:
ba:8f:5c:f3:8a:a2:76:a4:a6:c5:ff:55:e6:60:58:e8:cc:25:
37:d7:c8:59:79:4c:a2:0f:25:d2:33:4d:12:97:9b:9d:55:c3:
5b:fd:c5:07:70:60:f2:2d:1b:94:7c:cc:a6:d7:af:7e:ba:a9:
05:a2:0c:48:65:9e:d6:8b:94:91:ef:80:99:d9:fd:de:e6:9e:
85:2c:75:f5:94:f5:12:b3:93:09:a9:44:b6:96:60:36:e3:b2:
a2:c2:b9:2b:14:0d:74:ca:9b:17:63:9b:ed:a1:f1:b1:25:e6:
7e:29:7f:fc:fd:13:92:50:42:fb:e1:0b:d6:64:f7:ea:4a:dd:
7c:af:41:f3:da:4e:fa:01:05:33:b8:bd:2e:a0:51:7a:07:0c:
31:81:61:6e:80:0c:3d:b5:e3:fa:a4:38:2b:74:96:9c:f3:04:
5f:cb:13:d9:e7:62:e0:13:f0:b0:84:0d:39:71:20:2b:64:32:
b7:4c:7e:fa:c8:17:1c:c0:2f:e9:a9:49:a7:d0:9f:77:93:09:
83:fc:eb:9d:02:cc:c7:4a:26:a1:e6:39:67:5c:63:6c:16:d6:
d4:be:e1:c5:43:43:72:c2:b4:65:d5:0f:38:0c:8c:3c:2e:b6:
98:97:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:41 2026 by rpki-client