Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File: C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier: a4xF7dZdk7NT3b6C+GOW/0cuXh+bBbaqKvgC9mAyzos=
Subject key identifier: 72:1A:8D:42:98:9A:95:33:89:3B:B8:A4:CD:52:5B:05:E5:DE:5F:0E
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer: /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial: 019D3A8ADE6E988D19973E05D3B15E0BE20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number: A3
Signing time: Sun 29 Mar 2026 17:01:12 +0000
Manifest this update: Sun 29 Mar 2026 17:01:12 +0000
Manifest next update: Mon 30 Mar 2026 17:01:12 +0000
Files and hashes: 1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: 4g/EfIOeGkc/m7qKJACC9fC4CX/itH8sKsbwNA+lqcw=)
2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:de:6e:98:8d:19:97:3e:05:d3:b1:5e:0b:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Validity
Not Before: Mar 29 17:01:12 2026 GMT
Not After : Mar 30 17:01:12 2026 GMT
Subject: CN=721a8d42989a9533893bb8a4cd525b05e5de5f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:ce:a0:6f:74:d8:3d:ac:b8:36:ff:a2:62:
b6:ff:20:fe:6c:80:7c:14:60:15:98:e7:e7:2b:35:
e6:64:cc:02:70:cc:0a:ae:2a:fb:13:40:86:38:02:
d8:76:3a:a7:cc:bc:3c:ed:85:1b:b2:14:df:93:05:
60:01:c3:53:53:68:19:67:84:1f:95:6a:f0:bb:59:
3c:37:63:ad:c9:74:ac:c7:ac:95:92:87:e3:f6:38:
7f:61:c5:ef:20:4f:0d:85:72:fc:6c:f7:78:24:b5:
f6:6b:50:34:fe:b8:5a:2d:0b:c9:78:f1:16:a4:2e:
87:42:19:2d:e6:26:26:74:4b:d6:2d:12:f0:6a:b3:
01:23:4a:5e:79:73:06:d0:e2:53:f0:42:51:08:82:
29:d7:4f:97:a5:c3:e0:d3:d2:a4:ad:35:ef:98:55:
8b:c3:7e:fe:65:3f:be:42:c1:2b:cb:45:e5:0f:7e:
27:46:d5:db:8a:98:51:1b:3d:ee:40:25:bb:d6:7c:
a2:a0:aa:f9:82:4f:99:db:f9:a5:31:8d:5b:93:be:
1d:9a:85:aa:93:b9:94:50:8a:fb:5a:1e:27:f0:25:
da:e2:7c:1e:e8:f2:99:94:69:79:57:46:e3:d2:f5:
89:39:83:ec:6a:35:77:86:e7:cb:b9:36:93:0f:fb:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:8D:42:98:9A:95:33:89:3B:B8:A4:CD:52:5B:05:E5:DE:5F:0E
X509v3 Authority Key Identifier:
keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:af:21:d2:90:e5:6d:eb:d1:f2:72:39:30:f5:c4:cf:4b:
33:6a:c3:35:a0:ac:94:81:68:aa:8c:e3:32:1e:3e:71:56:63:
22:c1:2c:1a:8a:e1:fa:6c:fe:11:60:0c:13:45:92:df:65:bd:
c7:38:f5:15:84:8f:f8:fb:25:cb:b5:95:c8:cd:80:87:5f:c2:
88:88:94:c9:5a:8f:5b:b1:6c:ae:72:1e:03:8a:ba:08:a0:7c:
88:9e:d6:f9:8e:dd:c2:59:57:73:77:d0:f9:1f:79:fb:f3:50:
d4:18:5a:25:bb:b5:b4:73:27:35:2c:57:92:b5:58:87:c5:50:
a0:f5:42:ce:2c:53:0f:69:43:58:72:36:5d:3d:2b:8d:ed:26:
72:8f:75:8d:aa:16:b9:a8:5f:0f:74:1e:9f:48:9a:0c:6e:23:
6c:22:90:43:ae:ec:a7:8b:2d:1d:46:12:9e:8a:90:f4:57:4f:
00:85:39:e5:3c:e3:6e:77:3c:af:97:ae:63:24:90:10:4e:b3:
61:84:e9:6b:6f:40:e2:59:b1:8b:9d:39:09:e6:94:2f:3e:f5:
66:8f:95:21:86:32:d2:18:93:7d:65:3c:f6:1f:d0:f7:a1:07:
4a:69:30:0f:4e:51:e3:61:22:ef:f8:75:7f:41:c8:5e:03:d5:
1c:a9:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:23 2026 by rpki-client