Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier: sdbX5JJxm+A11xciAmPMOkeVsSrx9c7g7eqxfffu6So=
Subject key identifier: 3A:91:77:20:69:62:6F:C1:7C:C2:3B:E2:96:00:AE:C4:CB:6B:4E:2B
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial: 019CB1370F809E10EDA443457CCDD1F96FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number: 02D7
Signing time: Tue 03 Mar 2026 01:01:41 +0000
Manifest this update: Tue 03 Mar 2026 01:01:41 +0000
Manifest next update: Wed 04 Mar 2026 01:01:41 +0000
Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: WVV8afAaU+TcY2UCD6UAxe4UkZ6NASlvQkUYBcMPhOU=)
2: e2Nx3MWYEW91glMqV5TLbQ1S5j4.roa (hash: 1d9GQqvCFQjgc9W5ZDcmpkqgj4oWJ7r7FTu64+cmQXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:37:0f:80:9e:10:ed:a4:43:45:7c:cd:d1:f9:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Validity
Not Before: Mar 3 01:01:41 2026 GMT
Not After : Mar 4 01:01:41 2026 GMT
Subject: CN=3a91772069626fc17cc23be29600aec4cb6b4e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:09:37:b7:5e:a2:68:83:2a:6d:04:04:ad:
32:fa:e6:45:fa:4c:cb:e4:07:2a:b4:ef:d3:34:62:
ee:19:d4:e6:a0:d4:9e:b0:aa:be:51:bb:5b:82:5b:
e2:aa:da:fa:43:25:3a:92:4c:5d:13:07:d0:07:13:
e8:30:f7:a2:8f:5a:26:de:ec:38:58:16:91:a3:f3:
94:04:c9:1e:37:e7:88:3f:b1:f6:c6:d5:ee:3d:26:
6a:6b:82:11:ab:13:24:14:8d:8a:93:0a:27:f1:4d:
e2:41:a1:16:38:33:b0:e9:b9:c5:5d:71:b5:15:93:
a2:ff:43:36:8d:db:66:88:fb:ca:ae:52:d5:b8:43:
68:2c:fe:a9:22:75:0b:90:f0:ed:b6:9c:6e:ee:75:
f1:d2:0f:50:40:a4:97:c8:82:c8:40:cc:ad:4c:39:
09:e1:62:a7:f5:d5:55:23:44:cb:e8:64:ba:bc:2d:
52:60:89:90:f7:fb:d6:1e:e0:16:5b:41:22:e3:b6:
80:37:e0:cd:15:bc:3a:8d:8d:26:01:37:e3:9f:96:
f3:21:b3:47:f5:52:13:d7:50:83:30:08:76:bd:63:
34:f7:10:97:3d:9a:b6:b1:b5:95:00:55:89:ce:c5:
6d:0e:10:9b:f4:cc:c3:96:0f:35:1e:67:cd:17:93:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:77:20:69:62:6F:C1:7C:C2:3B:E2:96:00:AE:C4:CB:6B:4E:2B
X509v3 Authority Key Identifier:
keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:f9:e8:c9:de:c6:e1:11:11:da:6b:0b:6c:92:42:0f:dc:
80:12:46:5f:fb:db:1c:a4:db:79:f0:00:32:a2:e2:3e:ea:2a:
a6:9e:27:ed:d4:1b:9e:60:9d:0f:b2:0e:11:00:74:c6:d6:5c:
2c:00:26:af:56:7a:f0:00:3c:ae:c2:63:87:1a:48:f2:d1:c8:
e3:61:c5:e0:78:33:dc:a1:e7:1d:79:de:d4:89:27:33:bd:6a:
30:de:40:3f:e3:de:ca:da:56:ce:2e:49:35:92:a9:dd:2f:75:
2d:f9:8e:5a:1c:dc:a5:43:4a:c3:85:73:9a:2d:e5:3a:a5:eb:
2f:10:ac:6c:62:86:1e:33:60:90:cc:64:ff:30:ea:79:9a:6f:
36:52:de:01:df:5e:1f:b9:fc:0f:7e:eb:3c:f9:76:1c:12:ec:
52:1e:bd:cf:5e:c4:72:1d:24:9a:c4:56:aa:a7:ef:f9:dc:b0:
4c:8e:2c:c3:a5:40:07:31:9f:94:79:d2:d8:8f:eb:e5:65:cb:
21:f9:fd:02:5b:75:84:37:42:84:db:28:b1:01:15:84:7d:65:
1c:ac:f5:5f:19:f5:f4:36:6b:be:da:61:47:81:58:a3:5c:02:
6d:e7:40:d3:8d:98:cb:90:74:49:ef:1c:34:b9:59:20:4c:de:
b3:a8:fe:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:41:33 2026 by rpki-client