Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: OBrXFfTOXfGAkiNayKLyKOy2BRZzAQ9U+NIaXbmBje8=
Subject key identifier: BA:76:2C:0A:91:D3:6A:16:BF:C1:AA:00:09:A6:A2:47:48:4A:EB:F0
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019D382DF4EB80C4BD80FE5D6FF1A4FC1A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 098D
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: miwXji/ummDRfgOHOptkYB3IjKydNIWLk7jqwmJjO3k=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f4:eb:80:c4:bd:80:fe:5d:6f:f1:a4:fc:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=ba762c0a91d36a16bfc1aa0009a6a247484aebf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:87:d7:4f:71:1d:fb:94:e8:63:c2:f0:80:
eb:e8:7b:e6:d7:90:e3:87:ef:b0:cf:73:bf:5b:a8:
e6:c9:a9:2e:18:18:ae:93:68:72:38:f9:e9:d7:d8:
d1:bf:18:93:e4:94:f2:b4:dc:47:cd:2c:e9:8e:87:
9a:87:0a:bf:10:67:94:38:d2:a6:66:71:de:96:15:
39:ba:b0:bc:7d:12:77:20:fc:d0:d5:c7:57:2b:89:
8b:bd:a5:80:49:d0:4d:77:5d:f0:43:5f:8f:86:69:
32:9f:1e:d0:03:b8:db:00:08:83:bf:e7:2d:b3:7a:
c4:51:f2:a3:ca:11:2f:9e:79:3a:7f:cd:87:b2:64:
76:a1:78:7d:45:4d:f2:0f:6c:3f:9e:e4:2e:2d:3f:
55:80:26:81:2b:70:42:a6:8d:9d:76:1e:99:91:f1:
1e:b0:fd:20:67:d0:e9:17:8f:4c:5a:c8:71:56:89:
41:71:8d:43:f0:c1:ae:3c:40:3a:bb:7f:9c:52:f1:
d0:64:d1:a4:94:6d:fc:35:95:08:c5:dd:ba:f4:7f:
f2:f6:63:57:90:0f:0d:03:8f:cc:ca:b6:79:76:99:
8c:04:75:52:9b:da:80:97:c5:b9:16:85:5c:47:1a:
8c:2e:f5:50:0c:db:83:ff:fa:b8:a1:0c:b1:23:f8:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:2C:0A:91:D3:6A:16:BF:C1:AA:00:09:A6:A2:47:48:4A:EB:F0
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:0e:fd:82:2a:97:6c:22:f2:33:93:11:26:ed:f2:04:b4:
50:d8:15:09:17:67:cb:80:9c:42:4c:47:5f:20:02:9e:8e:61:
88:e1:fc:06:ab:69:2a:da:aa:e9:df:6e:b0:6f:3a:53:c9:b4:
cf:53:78:93:15:1f:cf:8d:bf:a8:8c:a5:3a:61:4b:66:1e:bc:
ef:e4:34:98:3c:23:35:0c:ba:d3:5b:63:81:41:a1:ca:68:8e:
aa:3e:03:81:7e:8d:46:bc:15:fe:c6:52:17:26:ef:18:98:80:
c7:c2:db:a9:2a:1b:8a:94:3f:75:b3:6c:50:05:d5:4b:cf:5b:
0f:ae:96:e9:fa:e3:86:a6:dd:70:ec:ad:26:55:1a:00:4d:68:
96:7d:02:14:91:16:89:ec:be:d0:80:69:3a:8b:89:9e:72:36:
05:de:59:fd:d4:7b:73:c9:4e:aa:96:db:31:33:ce:86:ba:ab:
c3:f3:6f:3d:37:49:1e:0c:7c:f2:9e:d6:49:f1:9a:c9:1c:57:
33:b0:87:f1:66:ff:39:42:d0:9f:0a:93:06:33:42:3c:37:ef:
04:ca:c5:56:c2:53:47:31:7e:92:6e:67:7f:c8:22:e3:d1:1a:
d3:73:22:a2:b8:49:e4:75:90:76:e2:a4:e4:d4:b9:59:6e:6c:
d0:ab:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:11 2026 by rpki-client