
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: gy3nInUMiPkABzrM1uSAgkw97yI52gINI4o6tbVGdxw=
Subject key identifier: 69:DE:93:85:F0:A4:D7:F8:96:38:B5:8E:25:C0:C2:F5:E5:50:9E:6F
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 019CACEB6302DB9F3E43559B43B942A81D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0C2F
Signing time: Mon 02 Mar 2026 05:00:33 +0000
Manifest this update: Mon 02 Mar 2026 05:00:33 +0000
Manifest next update: Tue 03 Mar 2026 05:00:33 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: ErfJq6rLpzfToWBrfVPswjl3ovBin4WZ5wTVoNRLto4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:63:02:db:9f:3e:43:55:9b:43:b9:42:a8:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Mar 2 05:00:33 2026 GMT
Not After : Mar 3 05:00:33 2026 GMT
Subject: CN=69de9385f0a4d7f89638b58e25c0c2f5e5509e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:56:8e:75:db:a8:ab:16:6f:a1:9a:94:42:
0e:95:bb:15:33:a7:4e:e6:b9:f3:a7:19:d9:fd:eb:
17:11:14:9f:0d:42:a0:14:d4:1c:37:43:8f:69:99:
7b:a8:d3:47:5f:ff:a9:5e:62:25:39:9d:5a:8f:13:
50:21:69:75:9b:11:df:4a:f7:93:15:b4:ac:53:e2:
e5:d9:d4:0f:d4:0e:c8:0f:c6:03:62:88:70:10:e4:
98:51:f0:9b:0d:45:3e:01:1b:0c:fc:1c:49:13:75:
a6:02:50:19:36:b1:e6:b9:c9:a8:11:36:fe:94:f5:
57:b5:33:50:6a:27:0b:57:5c:28:6c:28:db:13:95:
5e:48:45:0d:bb:2f:e5:16:86:4b:f9:e4:0d:dc:49:
2b:23:54:3b:af:57:d0:06:e4:28:ca:29:3f:63:21:
ff:69:a6:80:09:ea:57:01:ad:97:74:f2:ec:c8:73:
ae:6b:2c:c6:5a:e5:50:3c:17:51:8c:9b:31:5a:67:
dd:14:36:f8:71:43:0b:2e:f3:86:65:08:29:83:39:
60:da:d0:e7:c2:a5:bd:e6:2a:d2:db:a7:5f:60:a4:
50:b2:9e:97:27:ae:31:00:41:fa:83:ea:7d:f5:34:
09:b2:e9:38:d9:08:7a:99:47:d1:c1:15:ec:02:36:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:93:85:F0:A4:D7:F8:96:38:B5:8E:25:C0:C2:F5:E5:50:9E:6F
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c6:f0:b3:a7:d8:41:c0:da:c5:da:54:0d:bf:d1:3a:4b:b4:
62:19:c1:b5:37:9b:a9:ce:39:22:a9:53:1b:32:3a:6b:cc:5e:
dc:af:ac:e7:9a:14:61:2e:40:d4:57:a6:ee:72:8b:eb:3c:74:
5e:ec:a0:d3:7e:8a:32:dc:41:e4:2f:27:d6:40:66:a1:6c:35:
37:b0:d4:16:7f:0a:87:65:df:ca:5a:c9:ad:8b:86:df:a8:19:
36:d5:a2:28:41:e5:1e:a0:64:9d:05:c3:7b:c3:f9:be:13:a7:
c9:9e:e3:f0:dd:1d:da:d0:2b:88:0e:74:82:58:de:88:0a:4c:
e1:eb:89:90:d4:98:33:43:42:6f:3d:30:e5:15:2c:75:d1:54:
67:59:15:6f:4a:8e:51:89:60:24:28:e5:aa:ac:e1:26:8e:15:
1b:c5:cd:5c:b5:ec:7a:54:75:50:3a:c1:71:97:8f:4e:62:93:
44:bb:65:de:3f:06:08:20:b6:6c:b9:74:e0:c3:3f:64:f1:bb:
46:de:3e:14:bb:0a:dc:78:7e:c1:da:20:0b:d6:11:63:97:b4:
da:ef:63:17:e8:32:93:15:a0:22:32:a7:8f:b2:17:ed:80:2b:
53:a6:73:40:32:7c:29:c4:50:c3:81:c3:79:3b:b0:1a:55:5d:
da:93:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:11 2026 by rpki-client