Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File: e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier: HwaL0l1hSWnaymFimdvXMC8yglmnrr4MLuQ3W2AoCpE=
Subject key identifier: A3:FB:B0:1D:52:D6:34:9F:BE:99:33:D3:9F:2B:23:BD:BC:35:FF:75
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer: /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial: 019CAA2186E0B27074F867AE5B8F2CAE0F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number: 081D
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: fqZYxEiLd1NLGwVHZhISv2+E7qLcEO2UzdV1JLFIZ40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:86:e0:b2:70:74:f8:67:ae:5b:8f:2c:ae:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=a3fbb01d52d6349fbe9933d39f2b23bdbc35ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:73:24:3d:dc:e8:64:48:63:b8:61:9b:9a:
d8:2c:45:04:0f:97:ad:6e:28:88:4d:68:d3:11:78:
ab:a0:1c:a7:19:fd:ae:88:c4:4b:30:33:1f:3e:8f:
5d:2e:0c:65:bd:83:f2:5f:31:d7:11:0b:3c:a1:0f:
4b:98:a0:84:54:45:7c:16:ba:04:f1:c7:c0:66:2e:
14:c1:85:2c:40:2a:a0:d0:ae:d7:88:eb:ce:06:b5:
c3:8a:81:3c:51:42:8f:b3:95:bb:fc:2f:32:39:79:
b8:4f:45:bd:ce:a3:05:c9:21:19:ec:a0:81:5d:70:
0f:83:f8:12:44:10:85:f2:4f:5c:1b:25:b1:1d:79:
a6:f8:f2:2c:14:e8:01:d9:65:68:52:6f:c1:df:de:
5f:4d:eb:cb:da:3f:b4:86:63:6f:ce:83:e5:38:dc:
17:c6:86:c8:ab:b0:b3:64:28:d3:b2:0d:97:66:38:
f7:32:f3:02:31:98:ec:9f:d0:7a:92:e7:71:a7:bd:
86:b4:36:df:a6:da:5a:ac:9f:70:fd:41:63:0b:5f:
3d:bb:d5:2b:11:03:c4:67:fb:10:c1:bc:b7:9f:b1:
05:03:c5:9d:b9:ab:17:55:21:a3:4f:98:84:7d:e1:
c9:7b:18:1b:91:60:6d:95:61:f7:ac:42:3a:12:b0:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:B0:1D:52:D6:34:9F:BE:99:33:D3:9F:2B:23:BD:BC:35:FF:75
X509v3 Authority Key Identifier:
keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:80:dc:0c:7c:a3:f7:76:cc:8f:ee:95:33:7d:d0:00:fe:cd:
2c:58:38:38:62:45:d8:8e:7e:41:d2:61:d0:51:fc:8e:a8:d9:
91:37:66:a1:31:41:3a:b7:82:11:c8:36:6c:f8:48:40:47:47:
3a:ee:d9:47:a2:55:bc:8a:7e:06:ef:c9:1b:f9:0a:c2:de:0f:
ab:b3:7a:e6:ce:13:f7:5e:12:da:10:cb:82:d4:3e:3a:e7:47:
17:f0:47:44:31:46:c4:80:ae:34:58:84:78:53:3b:58:17:b4:
61:4a:85:f0:5f:b0:41:8b:1d:4b:e8:a1:ab:ef:89:42:07:5d:
af:14:cc:d8:67:2f:f5:a1:85:d4:fe:4e:02:03:d9:8e:19:87:
2f:e1:0f:c5:a7:74:6b:e3:5c:57:3b:af:f3:ea:32:27:76:0d:
f8:d1:0e:f8:20:66:2e:1a:3c:0e:f6:08:42:9d:cb:98:3e:be:
5d:fb:ee:e8:88:7e:0c:e3:fb:62:23:7c:24:2f:3a:df:b2:75:
da:9f:b5:53:f0:dc:7d:4e:71:a7:ad:af:97:1e:46:e8:19:3b:
43:4d:d7:c9:23:e1:8e:6e:6f:4a:ec:da:c6:66:59:77:cb:ec:
cf:a1:13:5f:a8:3e:76:d2:36:6c:ec:aa:09:0a:8c:5e:f2:d6:
db:44:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:30 2026 by rpki-client