Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: iptTdwX8FKCjd+wqtGw8G32/ziWF34Y5Cv4Q+GLhhss=
Subject key identifier: 2B:4C:5A:82:BB:F7:E1:37:8D:3B:A8:22:07:AE:BB:25:F3:82:09:7D
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019CAB6BAA7BFBFEE1C2EAB9B92304CD88A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0CAD
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: wdx5lv3uB9wfGWkdY38nGwbnS/6FOxHZdolnydqUbqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:aa:7b:fb:fe:e1:c2:ea:b9:b9:23:04:cd:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=2b4c5a82bbf7e1378d3ba82207aebb25f382097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:76:82:07:73:47:c9:93:5f:4d:f4:c9:35:
31:a8:67:9a:b7:88:e1:64:ee:5e:b7:c9:8a:60:df:
66:8e:8b:1f:08:98:72:36:24:93:b6:8c:8b:29:4a:
68:a6:01:f9:45:38:1a:41:aa:d4:15:7a:44:5a:6d:
14:1a:c3:4a:f9:e6:08:6d:70:f9:5a:b2:a6:46:70:
6e:83:60:13:19:b4:96:4a:75:1c:95:0f:bb:4e:be:
ca:1d:b2:18:b4:a3:2a:9e:52:e6:34:05:6b:c5:91:
a3:35:2c:d1:de:2c:e5:c3:1f:ba:13:fb:25:6e:70:
f6:33:ab:83:ee:db:96:00:53:e6:34:c3:f0:33:1e:
ed:a7:53:04:d4:14:f4:f6:ac:68:39:8d:23:63:64:
b9:29:e2:12:37:37:36:c6:c9:9b:03:fc:91:b2:ad:
cc:52:f1:33:df:34:b1:c3:e8:1d:c9:2c:53:23:3b:
6c:53:ad:19:85:f5:00:00:a9:1f:85:bc:67:43:6d:
7c:c7:d9:e6:0b:16:d9:28:66:1d:4b:5b:9e:00:8d:
4e:63:df:76:74:bd:00:22:0c:57:42:9c:3a:73:38:
76:f0:79:7b:2f:c7:06:50:e0:3e:2c:17:2b:c1:26:
e3:40:5e:57:93:8a:72:f9:05:ed:d0:c6:b1:3d:35:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:5A:82:BB:F7:E1:37:8D:3B:A8:22:07:AE:BB:25:F3:82:09:7D
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:73:59:18:b7:ef:66:f5:0a:ae:93:ef:b1:c2:01:8e:37:e8:
19:a3:c9:ea:c7:9e:44:88:89:c2:8b:5b:ea:f7:ee:ea:84:ab:
9e:2c:98:ca:43:2f:b8:8a:32:7f:d6:53:da:e4:25:64:6c:3c:
de:68:cc:14:6a:2b:53:ed:d2:da:db:c4:54:a8:0c:e6:a9:b1:
31:78:5b:f4:bc:13:17:eb:b3:12:75:e8:fa:8d:48:ad:80:05:
44:44:96:1a:c0:5c:ef:80:50:1e:fc:5e:e1:21:91:e3:fc:c2:
42:e6:84:7f:a6:3a:58:41:8b:bf:b0:36:21:1f:07:ef:40:8d:
61:be:5f:dd:98:11:9a:30:76:a2:8a:8e:35:32:2d:08:f9:6b:
10:75:5d:2a:e2:11:fb:d4:af:5b:fd:03:03:76:da:4d:b6:e0:
fa:c3:07:80:6a:d9:97:79:64:be:36:b7:e1:38:e3:3a:65:d8:
e4:70:9d:25:e2:60:1a:f9:29:38:cd:e3:c5:1d:13:be:cb:a1:
60:34:89:96:e6:05:7e:12:49:4c:6d:97:c5:fb:b1:7c:d7:6c:
fd:6c:f3:dd:66:97:fa:b7:79:7b:eb:f2:f4:fd:b0:fe:8e:3e:
99:f7:b2:37:27:db:d3:97:a0:23:91:96:a3:1d:16:8b:9e:27:
6d:f8:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:36 2026 by rpki-client