Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
File: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json)
Hash identifier: Aoap0XDpmQVim+Q8z2NmVypozuLK3if91vB5LfLBJC0=
Subject key identifier: CB:45:3F:16:5E:54:1F:D3:8F:84:01:AA:F3:90:D8:B2:27:3A:12:55
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 019CAD22E6AC1A751E71A3642B37CDB45365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
Manifest number: 1703
Signing time: Mon 02 Mar 2026 06:01:11 +0000
Manifest this update: Mon 02 Mar 2026 06:01:11 +0000
Manifest next update: Tue 03 Mar 2026 06:01:11 +0000
Files and hashes: 1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: Z7UPMVeWNKLIHYfsdoQllgmKAfZVJEHNcvdMrfW5lMg=)
2: JVnNDue1yDItEpFp0OCuNkyOxQM.roa (hash: rvpaHWXJ88W6TCf5XtdW918xCJCQp2lb/JSktVJEhS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e6:ac:1a:75:1e:71:a3:64:2b:37:cd:b4:53:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Mar 2 06:01:11 2026 GMT
Not After : Mar 3 06:01:11 2026 GMT
Subject: CN=cb453f165e541fd38f8401aaf390d8b2273a1255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:45:96:4c:e1:8a:49:37:40:1f:e2:14:06:
10:c7:0a:c0:30:7f:85:cd:96:c8:df:74:64:f8:94:
01:2d:6e:a5:e6:b3:3d:e1:eb:c5:34:9e:f0:35:57:
b2:33:f3:92:dc:b2:cc:32:28:1c:c3:e9:e2:74:40:
dc:c8:11:db:9d:de:f1:89:b9:e0:a8:ca:f0:44:6a:
12:be:60:a6:bd:09:7d:00:ad:c9:62:3d:91:4a:07:
a3:70:76:92:54:94:ea:fd:9b:f5:04:db:1d:f8:bd:
40:90:11:7f:54:78:8f:0b:5f:1d:1f:15:0f:64:a8:
69:3c:1d:1e:db:d1:94:e8:e8:29:bb:aa:88:71:69:
fe:cc:ec:45:68:37:4b:b7:85:23:35:61:c5:33:25:
a0:04:f7:61:7e:a4:ce:1e:6f:c1:07:fa:60:80:fc:
dd:c8:5e:19:4e:3e:48:c3:6a:7d:e7:e4:c1:6b:84:
c1:ba:dd:8c:0e:33:b0:a6:e2:ad:f4:6a:93:12:d7:
09:4f:e7:69:c0:36:1d:3e:5f:6b:1e:aa:07:61:21:
88:c1:84:a8:f5:a7:87:76:fb:1a:03:1a:87:7f:27:
36:e2:e9:10:8f:0f:ec:9a:71:af:eb:2a:fb:26:21:
2a:0b:7b:7f:f9:f5:de:75:07:94:16:33:d6:9c:95:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:3F:16:5E:54:1F:D3:8F:84:01:AA:F3:90:D8:B2:27:3A:12:55
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:51:ac:54:11:bd:37:55:48:38:f0:ca:0f:19:7b:7a:5e:ca:
27:03:56:e8:f7:07:7e:7f:2a:68:65:9b:38:9f:2a:66:07:2c:
1b:db:e7:e3:c1:5b:50:bc:70:c2:24:7e:db:27:b5:7c:6d:f9:
f0:11:19:db:6a:5f:15:bb:a9:c7:49:6f:5e:50:12:6e:07:58:
2e:96:96:4b:9d:93:d6:4d:3e:c3:11:8b:00:84:85:34:32:9c:
7f:a2:ed:e7:69:95:69:ff:9e:4e:4c:f0:c0:0d:f0:ab:e3:80:
ed:b7:fa:c7:a7:db:77:6f:fd:2a:b8:66:5c:95:b5:df:b6:80:
a7:29:d5:4a:2f:f2:82:b4:28:b5:49:84:7d:41:01:a1:e2:64:
29:0d:7d:6e:8e:c8:d0:c7:fa:7a:11:f8:94:10:70:72:cb:42:
73:fc:3e:96:54:b0:a2:9b:ba:65:c6:3a:8f:40:06:f7:a0:97:
95:92:e9:1c:47:4d:82:b0:f1:78:d3:75:57:d0:a2:a3:3e:75:
28:3d:70:a1:0a:30:1a:3b:74:3b:a9:88:84:6e:84:43:27:79:
8a:72:a3:4c:c8:ae:8b:6c:ed:93:ae:16:48:23:72:14:4f:e8:
aa:d2:94:e8:5c:a3:e5:c3:ee:05:10:65:52:94:9c:26:f2:ed:
c6:77:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:37 2026 by rpki-client