Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier: 2a7V08DAFCvS2JqCExKj9sCeZc21YIfw8YoUfM5pGYw=
Subject key identifier: DC:87:41:C8:AF:00:92:9C:C9:91:4F:87:BD:28:2A:EC:D2:52:2E:5C
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 019D37C119A34041E334E27623C3952E812E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number: 0FE0
Signing time: Sun 29 Mar 2026 04:01:35 +0000
Manifest this update: Sun 29 Mar 2026 04:01:35 +0000
Manifest next update: Mon 30 Mar 2026 04:01:35 +0000
Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: mUoEUZztiCjtAZAgP4vQd/g3sjkfjUAd74Vc43vbTuQ=)
2: NCFpucR4-r83kyx2khhJCgLkruU.roa (hash: TaSCKdlQI8N/cQC2z/f6Jx4oLGmqI6E65JRRfPyvaiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:19:a3:40:41:e3:34:e2:76:23:c3:95:2e:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: Mar 29 04:01:35 2026 GMT
Not After : Mar 30 04:01:35 2026 GMT
Subject: CN=dc8741c8af00929cc9914f87bd282aecd2522e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:2f:9f:6a:46:89:6f:fe:66:f4:e9:6b:88:
f4:ed:af:15:60:d7:26:52:84:4d:00:d3:0d:e2:ed:
f6:25:5b:cf:00:e7:7b:41:ee:ce:84:6c:68:fd:e7:
47:a1:21:19:dd:b2:f3:a3:a4:98:45:43:ca:a7:ca:
42:b9:73:5d:98:ce:46:9d:3a:d0:05:62:ae:c9:b8:
48:61:29:13:85:8d:d9:ab:52:62:c9:4d:ae:4e:81:
0e:28:a4:c9:5a:59:e5:27:d0:f8:25:f1:e4:09:82:
e7:52:26:23:0b:b2:ae:95:8c:45:43:6a:47:7f:cc:
23:97:c0:08:d6:f4:75:02:46:d8:e3:70:d0:e4:5f:
47:ae:25:3a:f6:08:7d:e4:76:81:cc:8d:97:87:0b:
32:73:1f:04:7e:67:5c:3b:bd:9b:72:aa:d9:08:0e:
e7:20:d9:b3:a0:90:8c:96:c6:c4:a2:a1:78:15:80:
83:1a:99:07:a7:53:be:72:48:ad:66:4f:1c:63:dd:
51:b5:88:16:d3:ee:83:cf:ee:a1:76:1e:70:1a:dc:
88:19:72:67:2e:48:49:c4:fa:eb:58:9c:38:1c:62:
28:3f:be:87:f7:72:52:a2:66:b8:62:ca:2c:91:8c:
1f:00:09:63:89:12:69:87:74:75:92:c2:89:55:ec:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:41:C8:AF:00:92:9C:C9:91:4F:87:BD:28:2A:EC:D2:52:2E:5C
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:5e:c2:47:d8:e5:9b:3d:13:89:2f:92:43:76:5c:96:ba:
63:9f:6b:e7:00:34:cb:71:fc:50:fc:bf:3f:91:ca:78:16:cb:
79:3b:14:5f:62:84:75:55:76:df:02:f9:50:fe:1e:9b:27:43:
43:bb:5a:72:c1:64:18:15:9f:50:38:27:b0:fb:57:fc:69:5f:
94:81:2e:69:48:d8:1a:57:56:b1:eb:e5:0c:b3:f2:2f:45:76:
54:ba:9e:e1:40:8b:60:4a:ab:d0:a7:c5:34:1a:59:76:bb:f8:
10:53:46:2d:8e:17:72:b5:56:c5:e9:3e:ed:a2:3c:d3:9b:0b:
b2:04:f5:05:52:c7:2c:f4:ef:8b:27:cc:42:17:33:be:5c:2f:
69:47:09:1a:1f:81:44:b3:e0:bd:93:d3:d2:02:83:81:ce:62:
ea:c5:ce:4f:26:68:86:95:3b:43:d0:de:ef:3d:d5:ba:65:ea:
2e:15:88:e6:99:a8:3e:9f:4f:58:3d:84:38:cb:3b:b4:c7:c2:
46:3b:a6:1d:bb:db:35:f0:4e:2e:01:79:08:cc:d2:49:41:b2:
2b:f2:c2:01:4f:c9:e6:10:98:51:ae:89:01:ef:5b:3a:d5:7b:
47:1b:31:28:ab:77:fb:5a:6b:74:50:49:1b:d3:41:5a:1e:fe:
9c:62:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:38 2026 by rpki-client