Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: uzbkjmxTxj3aPgjupmq3RQa8o2WZKxbEf1WfN1uq8qI=
Subject key identifier: 24:D3:53:70:29:19:6A:89:5A:89:6E:E4:28:9F:25:62:DF:ED:AD:A6
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 019CAA583EE5B69E914F57AAFBA8018C1029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 17CD
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: xKel93pGRTBnYRuEUbIEwIKFvDPd8E38HSY3eOnPh0A=)
2: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (hash: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3e:e5:b6:9e:91:4f:57:aa:fb:a8:01:8c:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=24d3537029196a895a896ee4289f2562dfedada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:02:e1:86:0a:b9:21:27:be:2f:bf:92:f7:
e9:97:cf:ee:cb:b5:c1:18:a0:5f:47:6d:16:43:ec:
22:7f:ed:cd:c3:e9:77:b5:d5:d2:a3:42:aa:fd:07:
8f:4a:73:d0:64:a8:0a:10:b3:02:75:01:d6:44:e5:
cd:20:6e:e4:85:ee:ae:cd:fc:6a:55:f0:83:fb:d3:
a9:4a:28:12:63:52:c7:6e:0a:c4:7e:1b:0e:dc:c7:
e7:f5:2d:b5:22:60:db:4c:e7:f5:a4:78:54:1f:81:
63:5b:69:94:99:66:ce:0f:21:f5:43:b8:0b:d5:b7:
81:00:29:d1:fc:f7:9e:ae:d4:63:e9:ff:8c:3a:02:
22:e5:59:03:e4:16:65:96:e0:52:11:2f:1c:c7:1a:
dc:87:25:65:c5:3b:9a:18:61:05:d8:34:86:fc:09:
8d:b4:f9:d5:f4:7c:08:c3:a7:cc:f1:97:26:1f:af:
b6:a7:5b:c0:f9:38:40:4d:82:84:e6:2b:d8:03:64:
65:e9:78:03:eb:fe:4c:30:df:7f:cb:5a:5f:05:7a:
10:2b:61:02:dd:54:d4:a8:21:0e:33:57:b5:3b:d0:
b7:98:4b:5c:ac:4b:65:7d:c4:d7:ef:cf:54:f1:88:
77:3a:71:6e:d7:9c:05:fe:42:b9:af:6c:04:b3:72:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:53:70:29:19:6A:89:5A:89:6E:E4:28:9F:25:62:DF:ED:AD:A6
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f2:b1:64:a2:d6:92:f5:4d:51:28:c9:fc:26:70:7e:07:b7:
26:e8:e6:92:ff:a4:93:0e:30:28:40:83:33:5a:72:33:9d:24:
e1:07:8d:3a:36:eb:d4:53:e4:92:50:46:7b:8e:59:4a:e3:0d:
5d:e8:f7:cb:6c:16:d2:d6:b0:78:ca:22:ba:01:16:12:cd:71:
58:36:f6:54:ec:e9:76:ab:21:2a:b1:91:bd:0e:89:ca:af:2f:
b1:74:27:2c:a8:6c:ea:89:05:6a:d6:5c:83:10:f1:61:be:02:
7d:cb:50:30:d0:e1:36:36:88:85:72:53:6c:b2:13:9c:99:d2:
f8:58:b1:8f:bd:86:e7:7b:8b:a6:bc:8b:31:a8:c3:74:67:2e:
2b:fe:97:fc:24:95:e0:32:b3:83:7e:4e:6a:af:6e:e1:c3:f5:
c6:a3:6f:ed:0b:e1:d4:42:b4:2b:55:11:2d:44:27:f6:b5:5e:
86:c5:e5:3d:0d:7d:56:6d:67:47:7f:df:da:16:cb:ea:fb:cf:
69:fd:c9:b1:6a:36:2f:51:5f:54:9d:a7:67:f6:d2:42:22:9e:
73:9b:38:6e:71:99:c3:b4:2a:43:2f:56:9b:ca:15:7a:90:2e:
92:8f:ce:d1:58:01:1a:4c:1f:1d:6f:e6:a5:91:cc:18:c2:bb:
c6:b9:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:36 2026 by rpki-client