Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier: pcZvJAEcC7RwjTBJhAFU3asVSYTS314Bg+Ja0W2YJ6U=
Subject key identifier: 18:E2:0F:3B:EC:35:D5:78:09:9C:7F:B9:A5:56:97:F8:C7:16:59:90
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial: 019CABD97DBF10431AB9C409C51CCCA74F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number: 0C39
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: o2NGUbwBbqjinOLwkVNrSlpq+qB6/LhFwjyyTohxw4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7d:bf:10:43:1a:b9:c4:09:c5:1c:cc:a7:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=18e20f3bec35d578099c7fb9a55697f8c7165990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:40:9e:70:79:e2:3f:70:8d:b3:d9:bd:b9:d5:
6a:ce:1c:c5:43:30:25:43:a4:14:3f:64:49:11:a9:
02:d3:5e:27:d8:bb:cb:4e:85:66:3e:40:8a:4e:df:
14:9f:a3:ad:23:5d:bd:18:1c:c3:4d:25:0b:a3:21:
28:33:44:46:b1:b0:00:1e:00:ae:02:00:c8:fa:18:
68:6e:09:13:93:f1:ea:db:25:f2:98:c1:4a:65:1a:
6f:d7:c2:2b:17:1e:e6:1d:1d:d6:23:be:ad:d9:a4:
87:91:7f:b0:3c:7c:8c:38:4e:5e:1e:9c:8f:27:9c:
da:cd:8c:55:62:89:a9:02:36:64:7e:8c:67:6e:21:
cd:c5:6d:d0:47:7c:c8:c9:00:5b:3a:7e:b2:f3:74:
63:61:4d:ed:3e:e2:43:34:3d:79:4d:3c:fb:93:c0:
f9:e5:3e:05:1b:83:80:15:2e:77:2c:4c:0d:f6:c2:
a1:d9:b1:6d:6e:31:39:e0:52:a2:88:40:be:b2:5c:
ab:9f:06:a4:14:af:b6:da:c8:33:c4:62:35:d5:c1:
01:51:39:8d:d2:4f:17:af:54:8d:43:27:e5:fd:ed:
02:23:f7:f5:f6:18:59:b0:53:04:db:dd:e1:bb:46:
e4:51:02:2d:82:47:e7:a7:15:8b:d6:d5:bb:e5:c4:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:0F:3B:EC:35:D5:78:09:9C:7F:B9:A5:56:97:F8:C7:16:59:90
X509v3 Authority Key Identifier:
keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:68:46:00:c2:bd:3b:30:06:86:84:ff:4e:fd:9a:11:22:11:
cf:30:ef:6c:1d:5e:fb:a9:8d:31:41:92:ed:18:7d:93:50:70:
65:15:2c:de:95:50:6a:8c:11:da:15:31:fa:dc:3f:fd:8a:14:
d9:b9:a5:0d:ad:69:1d:c0:fc:ac:0f:cd:f0:74:31:24:42:92:
36:22:23:f4:97:ad:c8:2e:7c:88:73:6c:40:14:db:71:94:cd:
6d:17:36:77:20:91:08:12:7b:d0:ee:4d:67:cf:01:72:90:de:
d6:73:0a:6c:6b:a0:2c:a6:ae:17:0e:f7:64:0e:3e:fa:72:b4:
ec:21:56:ef:93:bd:d4:23:3e:41:f8:1f:3c:63:d0:77:eb:5d:
07:20:14:d8:46:ec:1e:ab:bb:6a:86:ea:81:dc:d8:1f:4a:67:
73:5a:8c:7a:45:6a:18:0b:86:20:ea:6b:71:8f:fc:a4:01:c3:
b3:66:ce:9a:e1:26:4f:f3:a5:48:69:dd:3a:7c:cd:b2:b3:9f:
2f:ba:56:78:03:eb:3f:b1:c6:c4:8f:ef:52:cb:77:e8:1d:57:
bd:90:f8:69:7f:00:5d:c3:2f:f8:63:b3:41:a0:34:71:c9:be:
ca:d1:b9:27:16:c6:ac:f4:8f:8c:47:a7:6a:b4:09:d3:03:e1:
9c:84:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:47 2026 by rpki-client