Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File: 6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier: ysDBMV5GIgqjMSyGGgwYlmKAdaHYk1Q5+f/teEYE9jA=
Subject key identifier: 35:4E:17:AC:84:26:1E:B1:BD:B5:03:07:75:9E:48:CC:80:13:73:86
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial: 019D38D3DCEB793EF82B0E30282CB5D32D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number: 07EA
Signing time: Sun 29 Mar 2026 09:01:41 +0000
Manifest this update: Sun 29 Mar 2026 09:01:41 +0000
Manifest next update: Mon 30 Mar 2026 09:01:41 +0000
Files and hashes: 1: 6QCY8jj5sRY8B7ezrR5fko1Dd-E.roa (hash: l49J7qk23km7NfSNEycPtRd/ucFHA/W+KBsygR6cQ/k=)
2: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: KjRy19g+XKPFLYRsgMQP1yOguA41UAyBQKdgQwieK0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:dc:eb:79:3e:f8:2b:0e:30:28:2c:b5:d3:2d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Validity
Not Before: Mar 29 09:01:41 2026 GMT
Not After : Mar 30 09:01:41 2026 GMT
Subject: CN=354e17ac84261eb1bdb50307759e48cc80137386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:8a:ff:52:a9:e7:ae:fb:70:0f:71:07:23:
de:22:d6:97:36:3b:d4:3e:56:ae:cd:3c:59:fb:4b:
8f:a1:f3:29:9e:a9:70:fe:06:2f:25:69:92:1c:45:
0c:54:7d:a7:97:8c:d8:f0:d6:2e:84:30:5b:64:55:
14:fa:5c:3b:9d:56:a9:a4:ae:4f:9b:35:43:9d:2e:
36:2e:6c:e8:40:a6:53:a8:fa:57:cb:1c:00:b7:34:
fd:d8:ec:2a:a9:6e:c7:58:6d:c8:d0:de:6d:b9:79:
09:71:c2:31:1d:9b:6e:15:b8:ab:b6:a8:b4:a7:2d:
72:93:8a:85:5d:f7:08:b5:09:e9:49:9e:d9:de:41:
3e:50:15:c6:af:b3:60:e5:1e:54:f9:48:c4:92:de:
00:bd:99:28:00:4c:ad:e3:6f:34:c4:f1:7c:92:5e:
16:a5:89:38:a7:f6:17:d5:35:7a:e7:53:73:c5:55:
05:21:22:75:52:4e:75:cb:6c:90:3a:04:96:26:a7:
4b:eb:19:dd:90:03:52:2e:91:2a:2f:09:19:73:af:
8b:13:70:42:b5:1a:d0:7e:d4:7e:af:16:cb:93:ca:
b6:93:0e:6d:a1:2a:1f:65:8b:94:4a:be:9c:02:1c:
61:62:e6:19:be:22:eb:e4:18:6d:e2:90:2c:19:43:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:17:AC:84:26:1E:B1:BD:B5:03:07:75:9E:48:CC:80:13:73:86
X509v3 Authority Key Identifier:
keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:b6:d2:ab:90:6f:fe:3a:fa:14:e1:47:d1:de:10:50:d2:
fa:e8:d4:72:a6:c9:49:5c:f9:ef:81:3c:8b:0f:6f:1e:fe:76:
0d:41:07:2e:21:1a:53:a1:99:bb:25:0e:a5:37:53:d7:e1:94:
38:9a:9c:6a:23:90:ac:b8:30:69:8f:bb:04:60:d9:b0:22:13:
3d:62:15:82:72:4b:7c:c0:02:80:b7:92:ce:02:a3:0d:4e:13:
df:11:d1:3f:4a:9d:ad:a1:1c:d1:40:a1:43:1d:0c:fc:3b:e3:
34:aa:75:09:d1:fd:27:f6:16:70:8c:00:e1:f7:cb:8d:b0:c1:
de:cb:fa:f1:1d:00:3f:d9:23:23:ee:6a:14:65:9d:9e:8d:79:
c0:ac:7c:c9:d1:a6:a2:09:95:a2:36:70:d7:29:1c:db:d8:55:
3a:67:77:8b:4c:b8:90:0c:f4:ce:ba:41:36:e2:e0:94:7b:b3:
af:44:a0:db:56:8e:b4:b5:bc:da:fc:a9:ef:1d:1d:d9:17:56:
f1:61:05:4a:b8:b0:2b:9a:69:60:27:d4:1f:42:db:a9:fe:47:
1c:6c:33:f7:5f:17:89:21:be:17:87:19:d1:7b:b5:d5:a4:47:
94:f2:91:e1:39:cf:6e:17:22:8a:f8:f3:67:c7:77:0e:20:d0:
08:57:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:51 2026 by rpki-client