Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: u7vJRtOM1QYdRH8Ggo35jUXENdPXBwx8zgBco4b3NMk=
Subject key identifier: 66:04:16:9B:BE:D6:E2:54:25:6E:D2:D1:20:B5:FD:19:79:04:C4:A8
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 019D3866370A893CCB0387A4BF36824AFF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 136F
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: r0mq2KOgZ3J7e+OmMgj5N5MLf/Gif5IwJpZnvD9eWrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:37:0a:89:3c:cb:03:87:a4:bf:36:82:4a:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=6604169bbed6e254256ed2d120b5fd197904c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:46:51:82:86:3b:38:e2:51:6c:41:21:0e:
0e:8a:fb:d6:e1:73:16:64:4a:56:3b:6f:99:04:77:
a1:d4:f5:55:f1:ee:fc:18:c1:16:ae:80:51:d3:58:
23:df:cb:6f:5c:33:da:c3:37:63:a5:d9:04:6c:37:
0d:cd:72:8a:5a:85:26:85:2a:1a:78:30:83:ae:d4:
ec:b4:63:0e:5f:c3:02:1b:0b:dd:0b:92:f6:4b:ee:
8a:7d:cc:34:8d:9e:32:5e:78:f1:e7:d3:7d:ff:cf:
b9:4e:04:24:b7:94:76:82:05:ac:69:54:29:80:cc:
d8:8f:d1:ab:2d:7e:b7:3b:d1:c0:d5:04:d1:e0:58:
91:a4:b0:19:03:58:bf:14:4a:a6:ed:94:d4:3d:6a:
fc:ad:00:03:16:da:93:30:8f:71:47:46:e2:d9:a0:
b6:1d:34:b1:90:f0:74:e9:b2:ce:91:a7:a8:39:82:
d7:59:61:e2:f5:f0:e1:3c:da:8e:95:1b:ce:12:8d:
3e:e5:7c:2b:f6:7b:f7:a1:a0:2e:2a:87:7f:28:17:
87:2d:73:37:a6:f2:69:68:1c:40:6e:10:bb:04:76:
a2:24:7b:ce:a1:9a:83:ba:90:56:dc:87:d5:46:98:
05:bb:02:96:22:55:6e:71:e5:a9:aa:1f:2f:dd:90:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:16:9B:BE:D6:E2:54:25:6E:D2:D1:20:B5:FD:19:79:04:C4:A8
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:54:91:5b:3e:2f:c3:42:0b:d4:23:33:e5:03:b5:d4:e4:5b:
35:87:31:b0:da:af:98:4f:4b:6d:cd:a0:e2:f7:96:08:bc:2a:
fc:07:8c:75:d2:09:51:1c:6d:22:d2:d1:5e:86:39:95:7f:53:
f4:59:cc:7e:bc:91:be:9e:69:8b:4d:b4:24:88:53:0d:68:4b:
9f:86:ce:7f:b4:f2:45:6d:32:07:a3:2f:05:a4:8b:02:9d:a9:
74:35:d0:f9:fb:fa:89:05:7f:ca:1c:8d:07:dd:aa:b0:e8:05:
d5:80:ce:bd:1d:ee:a9:dc:d5:32:85:1c:98:56:84:92:17:82:
9d:75:e3:96:70:8f:54:c9:11:34:5b:82:ed:83:7b:eb:59:b9:
9e:9f:32:d5:50:8b:c5:97:3a:41:44:48:ff:61:c4:6d:ce:0b:
ce:40:97:d1:0a:6c:26:32:8c:bf:20:86:ae:2b:86:df:ac:d0:
02:3f:92:2c:d9:3e:7a:1c:3b:d4:ad:c6:4a:a9:ab:a7:d1:9d:
58:d7:5d:dd:5f:2d:fe:ea:07:14:66:4d:a1:61:fe:e0:36:92:
d5:24:20:54:01:c5:0c:f9:e0:1c:d5:0b:47:9e:df:1c:23:f2:
a5:bd:97:98:ec:dd:aa:2b:be:50:2b:9d:ce:1f:5c:fd:33:68:
b5:67:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:24 2026 by rpki-client