Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
File: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json)
Hash identifier: n7gGSPOm0Sz2I4YoACaICD5PQXRb4KHvq4KrrqYDm/w=
Subject key identifier: 12:F3:EB:B2:76:B7:23:DE:06:59:90:3B:EC:7B:2A:84:25:8E:19:78
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Certificate issuer: /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial: 019D390A0EE030D5575A87167CD576E73F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
Manifest number: 05DE
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: PZ0h7ogYQWaQj7+SVextNnBxzLMRTQv+HsP8PvXpHq0=)
2: BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa (hash: Z4P+UxXaSgUPpz9h0OSP10XtT9KI4gXF8z8dqug7dp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0e:e0:30:d5:57:5a:87:16:7c:d5:76:e7:3f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=12f3ebb276b723de0659903bec7b2a84258e1978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:ab:02:93:a1:6d:0d:c2:8c:88:49:c1:9f:
35:e2:22:aa:03:0e:74:8c:71:26:b2:50:82:00:22:
8a:52:45:0c:2f:36:d2:71:5d:fa:e5:f8:b6:cc:c8:
11:b3:f8:47:58:aa:42:53:41:d3:22:56:e8:0a:a7:
8a:a1:ae:66:f5:16:dc:08:37:3c:62:5b:6e:27:8b:
33:cb:4a:2a:81:84:be:ae:c8:4a:20:8a:71:47:ee:
03:80:98:a7:1b:41:26:9e:c1:8f:6c:10:5c:61:f6:
a0:af:9b:36:38:c2:48:f7:f9:5f:da:ec:a4:e4:23:
29:f8:46:3e:ef:74:26:df:39:77:9b:64:82:de:22:
cb:52:a9:da:90:21:82:78:5c:e5:94:89:d0:0f:04:
0e:15:d3:05:56:c5:00:b3:2c:b5:78:0e:10:b0:fc:
ff:c8:38:14:e6:68:17:38:6c:40:0d:3c:fb:b2:b5:
99:4b:5b:09:ed:56:b2:5e:72:43:1a:7c:02:23:7b:
d0:8a:c6:a2:4e:47:8b:e1:a5:4e:97:06:bf:66:1f:
13:cc:66:cf:61:13:53:36:21:5c:da:f9:66:f5:e6:
82:ad:c3:bb:93:fa:01:59:fd:44:a5:7b:99:4e:a0:
b6:e5:bb:3c:a2:f2:16:db:f9:e9:7c:e0:b4:5a:81:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:EB:B2:76:B7:23:DE:06:59:90:3B:EC:7B:2A:84:25:8E:19:78
X509v3 Authority Key Identifier:
keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:3c:64:cb:41:1c:23:d9:04:58:bf:98:e1:ce:a3:7d:4c:
cf:1d:d5:dd:df:10:35:6f:e2:b6:89:4f:66:62:09:2b:62:ac:
47:33:d5:c0:30:86:ae:24:ec:03:7b:46:0b:2d:78:e3:76:b5:
0f:92:b9:b8:22:0e:b3:47:de:62:a4:5f:81:07:0c:94:56:6b:
d1:7c:3e:14:10:d2:08:71:37:e2:f5:ef:86:d6:af:88:bf:57:
c1:d4:c6:17:5a:06:36:2d:33:83:79:2f:23:49:4e:85:80:b4:
75:54:1f:9f:d9:be:9e:fc:49:6c:c1:7a:ee:fd:f0:5c:29:e5:
43:46:8f:5d:1a:ee:36:09:e4:97:3f:db:e2:ff:60:3c:09:7c:
dd:67:56:45:ec:f8:46:7e:46:79:a1:21:38:42:44:fb:84:73:
fd:c5:c4:49:f5:02:8d:57:da:33:fc:2e:56:36:75:70:29:34:
35:4f:d6:62:dd:2b:62:2f:8d:83:cb:ee:29:af:54:65:6c:ad:
3a:c4:d3:c7:07:f8:ca:1e:83:61:b0:a3:de:95:42:37:0f:63:
8c:65:da:33:f5:3f:ac:e5:2a:8b:04:e2:50:4e:09:dc:e6:9f:
48:88:8d:00:8f:69:95:43:a5:bb:52:04:91:35:f7:a8:c0:ab:
68:f4:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:02 2026 by rpki-client