Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier: iY5HpPP+9VgXYo3Atz1rgH9g4pPbxYrR5HvYBVgn340=
Subject key identifier: B8:33:98:21:77:2E:9B:10:5A:C2:31:C8:24:08:9E:2C:5A:0F:68:9D
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer: /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial: 019D3752A7966DABC00346202CA573BAC001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number: 03BF
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: AQGURK3kgJFLXZeKHlw3SFtzSNV4lQugRdVdL1o1h3k=)
2: VIPwVpOCOBxM-6VZdHVb4qW1KjM.roa (hash: a3fvMBDRuRl6Fi34mUUPnVeDXMuKhZqOr31AZb3er1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a7:96:6d:ab:c0:03:46:20:2c:a5:73:ba:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=b8339821772e9b105ac231c824089e2c5a0f689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:1f:68:28:5a:1c:f2:d7:35:2c:60:45:fd:
3a:9b:50:db:ee:70:ef:0e:85:62:5d:b2:c2:30:36:
3c:fd:7c:40:54:0c:f0:e8:b9:5d:98:18:df:30:a9:
ec:19:ef:14:84:97:7e:17:94:3a:34:35:ac:d1:7c:
a1:14:ab:72:5c:36:e9:76:5a:d2:a5:5b:21:e9:ff:
1a:8d:a0:21:e4:c4:c8:e9:0b:cc:13:40:ec:41:5f:
bf:48:07:7f:6d:40:b5:94:53:dc:38:3c:b5:ba:76:
1d:98:9d:06:29:f5:65:dc:57:50:33:3c:56:34:e0:
87:f3:4d:32:9a:20:aa:55:d4:ec:05:87:a7:be:c9:
0c:07:e8:34:ab:fa:da:01:96:a4:08:81:f5:58:2f:
53:13:82:19:c1:a7:63:14:3e:85:14:4d:c2:b9:e1:
61:c6:c3:92:5e:ac:fc:b1:93:64:39:41:6a:45:e2:
f1:f5:21:c2:a9:33:0c:62:a4:47:8f:45:eb:24:61:
06:b4:7b:78:c4:7f:f5:cf:f5:05:65:a4:09:15:77:
78:30:a3:31:e9:06:23:d7:24:d9:75:1b:aa:7e:f3:
fd:2e:ca:ea:92:59:0a:3d:11:54:e5:93:3a:19:17:
20:8c:27:ca:7b:61:7b:7a:82:e2:17:58:f0:1e:4d:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:98:21:77:2E:9B:10:5A:C2:31:C8:24:08:9E:2C:5A:0F:68:9D
X509v3 Authority Key Identifier:
keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:db:6e:10:b0:a6:0c:00:c9:75:c7:3a:31:0e:a7:a7:f3:
d3:4f:c1:a8:de:c1:bd:97:1e:f3:0b:dc:48:ab:b0:0a:8b:fb:
3e:17:56:eb:4b:9f:30:ca:8b:45:18:a6:44:53:9c:80:6c:fe:
52:68:f1:94:9c:82:4b:b0:2d:ae:43:25:24:ec:07:ac:4e:84:
13:83:04:f5:eb:50:80:3d:ce:2e:d0:46:c6:0c:f4:81:c1:2a:
d3:1a:72:cd:b4:06:af:6c:89:e4:ce:8b:bc:3b:7d:0a:11:ae:
08:fe:09:ac:dd:51:45:61:45:bc:18:10:f8:2a:99:a1:1b:9d:
68:a9:05:f8:2a:95:b2:dc:78:01:15:ff:04:1f:58:11:5f:ce:
3b:d8:59:6e:f4:ae:e0:30:7c:09:49:03:9d:98:81:be:98:7d:
b0:7b:82:64:78:12:4d:7a:bd:42:bc:6a:4b:c3:3c:49:40:2d:
c3:53:f6:f9:b7:44:99:f3:76:72:85:4b:75:a1:7c:6d:81:82:
c0:b1:31:b5:ec:1c:46:cc:3b:12:74:51:37:25:18:f6:d1:6f:
bc:35:80:82:e2:f4:d3:9e:43:ee:7f:cf:bb:57:d4:63:15:8f:
bc:49:74:1c:23:81:18:b8:5c:de:9a:a1:6c:89:aa:1d:58:6d:
7b:0d:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:36 2026 by rpki-client