Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File: 6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier: lzS8EHssaqZGWI51143QhcC4O6dhWS6kARIu2+WHhGU=
Subject key identifier: C3:C3:55:D2:1D:E0:FF:03:9A:A1:BB:0A:CE:8F:E0:E2:31:F6:54:91
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer: /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial: 019CAA21533CB1D4E71BAFFE95D60F25ED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number: 07A6
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: grmrvCKL/V+bpKLrj8mvLK+C6/ZCXde+AArYS45fF30=)
2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:53:3c:b1:d4:e7:1b:af:fe:95:d6:0f:25:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=c3c355d21de0ff039aa1bb0ace8fe0e231f65491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:6e:2c:20:2a:fa:32:46:f3:48:31:79:6a:
12:6f:c1:c2:87:fb:32:d8:26:1a:62:d9:61:33:6a:
bf:bd:d5:57:dd:f9:60:4a:5a:c7:00:eb:a8:66:e1:
9f:26:3b:04:dc:78:20:7c:56:9e:e2:f4:1c:57:ef:
13:6a:b5:4e:c8:f3:b5:b2:33:e0:96:f7:f6:0b:b4:
4a:70:33:a3:c6:dd:00:7a:3e:71:e1:73:57:c9:87:
8d:19:db:ef:fa:94:5b:47:37:94:8a:d1:a6:51:ba:
e5:3d:12:ec:84:96:50:9d:07:9c:42:25:80:cd:a9:
e6:c9:c6:df:2a:af:8b:f4:7e:d1:45:d6:b8:36:ce:
42:be:8f:e0:b9:2b:1f:22:f9:12:96:c0:8d:2f:57:
fc:ae:08:8e:0e:ef:38:6e:bb:56:b5:62:e1:e6:54:
12:08:5b:e2:50:4b:38:ed:b9:89:07:fe:21:c9:85:
df:0e:ef:5f:f0:92:f7:8a:7c:7d:44:20:dc:4c:68:
76:98:a1:45:1b:af:c8:0d:b3:71:fa:7a:23:dc:1c:
96:87:0f:cf:bb:fc:1b:68:65:00:b4:57:3a:4a:81:
5a:c8:ba:e9:fa:2c:95:d0:75:5f:55:9b:5d:30:20:
4b:e1:dc:ce:e5:7c:61:04:da:e9:c4:71:ff:c1:96:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:55:D2:1D:E0:FF:03:9A:A1:BB:0A:CE:8F:E0:E2:31:F6:54:91
X509v3 Authority Key Identifier:
keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:57:94:ae:27:07:e0:1a:31:8b:6d:8b:19:0f:8b:05:e4:
da:b8:95:b1:34:10:07:dd:e3:d3:77:c4:d4:72:4e:31:e6:63:
76:0c:12:bc:f6:be:81:35:cb:3f:30:50:70:e3:8f:72:e3:e5:
4d:32:a7:9b:28:8d:21:6b:12:4a:6b:a9:c9:43:ee:cf:2c:8a:
fa:37:2c:48:56:c7:39:fe:3b:a2:d2:eb:32:f4:7e:79:09:bc:
58:64:a3:95:77:55:9e:97:39:fa:75:9c:c4:c5:d9:d2:d4:e2:
b4:c1:c3:0c:d3:c3:c3:2e:89:4a:7d:f2:83:dc:8a:ae:9a:2c:
b6:ab:64:bd:94:4c:67:18:f3:c5:53:4d:42:c3:c0:38:bb:11:
61:82:9c:86:e3:a8:83:9e:01:57:8f:6f:55:40:ba:de:25:4d:
9d:9d:29:a7:ae:c3:7d:16:85:a4:51:1d:f0:17:56:a9:ee:ef:
c8:64:c1:ce:95:a6:3e:9d:d5:b2:06:5e:6d:b5:41:b1:1f:a5:
a5:c5:32:a0:fe:0c:e8:18:2c:f7:ad:31:0b:cf:01:04:d5:14:
90:71:79:01:78:c9:29:36:7e:65:b4:61:76:c5:d1:b6:fe:34:
39:94:e8:39:36:8c:ce:49:b9:f2:b1:94:9e:91:b6:1c:1c:bf:
b6:04:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:33 2026 by rpki-client