Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: 9G+bkhDsLoN1nffTWqt+s+eTOHcHLH0TU5oDO0RVl0I=
Subject key identifier: 96:14:0B:DF:4A:12:42:51:A2:12:C5:03:8B:7E:DF:3B:E2:CC:3A:69
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 019E31F2E18FC08AD3AEAE1124837C00F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 18:01:01 +0000
Manifest this update: Sat 16 May 2026 18:01:01 +0000
Manifest next update: Sun 17 May 2026 18:01:01 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: Lmb7w7SkVUoSKZWHIdiFQgj+L4twMwCDIylcWyXAQUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:e1:8f:c0:8a:d3:ae:ae:11:24:83:7c:00:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: May 16 18:01:01 2026 GMT
Not After : May 17 18:01:01 2026 GMT
Subject: CN=96140bdf4a124251a212c5038b7edf3be2cc3a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:48:4b:23:57:97:85:ce:58:af:de:8d:69:
3f:d4:ca:3f:3c:04:e6:c1:cc:83:97:14:67:72:65:
94:f1:57:93:7f:86:03:35:5c:83:6d:5c:16:56:0c:
64:3b:4b:90:1b:fc:a5:cc:24:24:47:84:31:2e:01:
80:03:b8:a5:8a:59:8a:84:1f:2b:25:a8:e8:d2:a8:
d1:15:17:1f:50:23:35:04:56:64:49:26:ca:f5:0b:
f6:41:61:8a:82:51:89:43:95:68:7f:65:61:50:ac:
2f:d2:03:0a:a0:8e:e2:6d:bf:2d:5d:ae:ce:dd:ac:
37:d3:67:30:e4:23:91:6f:80:ea:97:e5:83:7f:2d:
e5:05:d3:1f:ee:29:66:d1:1f:de:b6:5d:8d:4e:8c:
ec:87:c4:4d:5c:b5:ee:79:c2:e9:1f:44:40:f1:39:
df:6a:36:00:2a:62:24:1b:5b:46:52:f9:ee:fc:67:
01:00:4e:1e:41:f8:a4:5e:38:33:eb:52:8a:ff:0f:
2f:c9:94:13:e9:7c:cc:01:22:0f:bf:47:89:6f:a9:
07:7e:d2:b5:bb:be:eb:b5:87:5e:49:60:f5:df:6b:
4f:fc:3f:d4:df:cd:80:bc:54:09:89:63:26:a1:1c:
70:c8:f6:f9:de:2e:37:2d:a4:7f:9f:f1:bb:f4:c9:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:0B:DF:4A:12:42:51:A2:12:C5:03:8B:7E:DF:3B:E2:CC:3A:69
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ef:ac:63:7a:ad:65:77:90:66:52:1b:10:41:76:2f:a0:f6:
ff:48:57:7a:9e:a9:cb:02:54:5c:4d:53:4a:e3:b1:16:a8:ef:
a2:18:3b:0d:59:91:7c:4b:7b:38:5d:d3:10:82:73:5e:60:9a:
f6:71:24:00:0b:09:84:de:f7:f5:e4:84:71:32:16:62:0f:c6:
22:76:2d:8c:72:91:fc:3c:eb:96:ef:4b:f3:69:cd:4b:cb:c2:
9d:9a:dc:e2:a7:00:e4:90:e2:f2:75:00:63:d2:89:4c:80:a8:
86:c7:95:93:ac:c3:a8:27:49:63:94:79:df:82:8c:7c:11:37:
6d:73:76:95:c7:19:9c:73:3f:8a:c6:64:94:d2:74:4a:1a:23:
43:03:6d:1d:87:33:99:24:b7:fb:cb:b1:de:af:2b:69:39:d4:
db:ee:a3:fb:4c:b1:09:07:72:b6:d2:15:0f:7e:f5:10:90:cf:
f8:35:d6:85:ed:07:13:0c:d3:7c:79:07:8f:e4:7d:07:f5:c7:
30:9d:9c:49:11:0c:e7:90:c8:85:e0:09:7d:b9:f8:eb:ca:ed:
0a:44:8d:e1:6a:25:7d:ac:00:f1:05:f1:54:ea:71:49:89:b2:
ad:a4:5f:f8:52:60:d6:79:82:19:ee:b7:bd:07:bd:88:99:c4:
94:1a:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:32 2026 by rpki-client