Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: FJhZcaYNKexSpiN2+94FsHNzi8m7kXTZ0TNicJ0nP7w=
Subject key identifier: 1B:CC:9B:0C:E8:A0:23:7C:06:87:6F:15:2D:69:46:29:65:BC:3C:59
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 019D38D2B06859E335EC83D65B0F3CD1D862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: K+LakSiXbiOOch6EK6O4YWGEdg3+r5L4hrf2hXkaTMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b0:68:59:e3:35:ec:83:d6:5b:0f:3c:d1:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=1bcc9b0ce8a0237c06876f152d69462965bc3c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:53:9e:39:d7:b8:bb:c6:91:a4:50:09:f4:
b3:c5:7e:d8:da:c6:22:25:5c:7c:af:df:ac:f3:29:
0a:0c:65:a1:d5:ce:d5:e2:25:67:63:72:04:87:0e:
ab:aa:68:34:17:e0:90:ba:30:6c:d1:57:8d:3b:7a:
7e:43:a4:64:80:5c:78:eb:b3:82:21:39:2d:d4:e1:
ef:e8:5d:29:33:3e:e3:70:c9:af:d4:3e:55:bf:4d:
75:26:44:5c:1d:1f:cb:51:a8:61:69:3b:da:86:ab:
95:9c:c2:69:46:11:e1:81:54:58:c9:ff:a3:e9:2a:
e4:71:fc:13:31:6a:05:17:27:67:58:b2:9e:3f:95:
32:a7:78:7e:2a:a2:31:63:66:1e:50:b8:22:70:64:
23:88:d4:73:6f:10:b8:fb:df:86:0e:8f:3f:48:3b:
b5:87:f1:33:34:4f:5d:11:32:f2:ed:9c:22:4f:6b:
a3:d7:f2:25:af:a3:ae:b9:ce:b6:2e:c6:3f:2b:df:
cf:b8:0b:8e:f7:f4:35:31:62:64:c2:ea:24:00:53:
62:57:7f:b0:29:83:ef:02:66:37:f8:71:f9:45:03:
1f:70:ca:81:1a:4f:5b:8c:b5:bf:6a:7a:cd:28:e5:
42:c0:cc:7b:ab:41:27:db:63:5b:84:9d:24:95:80:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:9B:0C:E8:A0:23:7C:06:87:6F:15:2D:69:46:29:65:BC:3C:59
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:58:73:17:10:63:09:af:9d:9e:e1:4b:9c:e3:2b:9d:ad:fc:
a6:be:68:08:3d:c9:37:6c:11:d6:e8:d2:cb:c2:d3:fa:dd:bb:
83:df:ab:82:32:48:94:88:16:f7:75:68:28:4d:60:b8:38:01:
f9:ce:d6:71:5e:84:2f:1e:45:91:48:ec:55:3e:d3:20:a4:00:
41:af:8a:06:f1:96:fc:b0:88:30:77:3e:96:16:37:e4:82:ec:
45:2d:1b:0e:a6:a9:f9:01:c1:2f:db:95:66:d6:be:39:8e:13:
f8:94:c9:84:2b:40:db:df:94:38:89:e6:45:c9:7c:eb:a4:49:
b7:3a:d2:86:0d:08:9c:1f:46:3f:71:a9:0c:ae:91:71:4a:47:
69:79:c1:c1:2c:e2:55:50:7b:52:16:e0:1c:51:9a:26:e5:a0:
d7:b6:06:ba:94:f6:2b:2c:5d:1b:5c:cf:ef:b1:61:72:75:23:
00:0d:96:90:fa:0f:2c:ad:db:7c:c8:30:84:a0:e0:79:4c:79:
db:85:72:f2:24:71:a4:d4:2f:38:c6:c2:04:3a:17:25:32:a7:
31:78:b0:45:15:17:c0:1e:6e:e8:33:16:9f:1c:2c:47:a2:d6:
36:2b:ee:4e:88:65:0b:d1:08:44:f2:37:cc:40:8e:e6:7e:d3:
59:8c:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:50 2026 by rpki-client