Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
File: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft (raw, json)
Hash identifier: 4KmsWhY9KQ1D8SKMX507P8/IPaowcQorBFSzHePnqyQ=
Subject key identifier: 80:86:7F:22:97:1A:59:00:AD:E6:53:B3:0C:98:FA:46:BB:C2:96:98
Authority key identifier: AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A
Certificate issuer: /CN=afac83e5677b11050dcecbc27730831c5e6f9c6a
Certificate serial: 019CC8D13A5034C129491279EDE54EB699FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
Manifest number: 0143
Signing time: Sat 07 Mar 2026 15:01:20 +0000
Manifest this update: Sat 07 Mar 2026 15:01:20 +0000
Manifest next update: Sun 08 Mar 2026 15:01:20 +0000
Files and hashes: 1: 3FyU0x36g_92xZo6PjoVQ0pSzlY.roa (hash: N60hitRZnBFmF80ThdHlQ4FJpZTJ3gpcVo3+jeaVQ1E=)
2: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl (hash: YmHdQxivygOdKqeHfHAakjQS/neTKL3oc2qzIRc4RAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:3a:50:34:c1:29:49:12:79:ed:e5:4e:b6:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afac83e5677b11050dcecbc27730831c5e6f9c6a
Validity
Not Before: Mar 7 15:01:20 2026 GMT
Not After : Mar 8 15:01:20 2026 GMT
Subject: CN=80867f22971a5900ade653b30c98fa46bbc29698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:7b:93:fe:f4:40:f7:87:78:3a:84:a6:3f:
e4:c1:c0:95:e1:58:6e:99:06:da:2f:1b:09:de:eb:
26:44:66:9c:31:f8:9f:28:a3:41:79:5c:68:a3:90:
65:85:7e:dd:07:16:3f:4f:b1:98:aa:68:bf:37:c7:
12:fb:6f:13:2b:3c:ba:ad:63:7d:6d:bd:70:69:0a:
5f:e5:66:68:59:fd:6f:7e:f8:dd:56:03:24:1b:d3:
9f:84:50:ec:8d:a0:f9:f7:07:b4:c3:57:a5:65:c8:
cd:09:07:35:6e:18:69:d3:4b:26:fc:a3:c5:46:af:
14:06:60:6a:6b:ba:c3:76:a7:d2:46:3c:33:c7:dc:
6b:fa:d9:df:2f:d3:73:cb:1a:21:e9:a1:83:f7:93:
2c:a4:10:35:e9:62:b5:ca:82:a5:6e:63:32:b1:0d:
69:a7:43:22:c6:83:75:38:70:b7:bf:c4:f6:d6:c8:
c9:47:f9:b3:12:1e:97:be:af:ed:b5:60:a1:7e:11:
7e:c6:28:65:b5:35:fe:0e:af:e3:4a:67:ac:a2:a6:
a4:be:e1:11:92:32:d0:1b:54:b4:c4:d8:51:a8:5a:
c9:45:66:9b:d9:e0:a9:65:34:54:5d:93:c5:84:35:
22:fc:4b:f0:cd:fb:c4:54:fb:21:df:e2:f1:7f:1b:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:7F:22:97:1A:59:00:AD:E6:53:B3:0C:98:FA:46:BB:C2:96:98
X509v3 Authority Key Identifier:
keyid:AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:b9:c6:7e:44:ba:1f:97:89:36:b9:0e:8b:b1:9f:5e:0c:
7d:87:83:7a:ad:c8:9f:f2:ec:85:e2:df:72:93:1d:d8:25:aa:
73:f7:42:95:e9:cb:32:be:92:8e:d0:04:f4:08:6d:9c:07:e9:
15:7a:bb:12:be:a1:cd:89:e9:4a:5a:8a:d2:d0:07:7b:78:54:
f0:05:bd:37:02:29:ab:6a:95:f2:32:b8:d3:c9:94:1d:0f:17:
51:08:ae:2c:09:dd:c1:13:ca:42:21:4b:48:e8:76:5c:4b:ab:
94:d3:07:e6:09:57:35:e1:b8:72:6d:dc:de:62:b7:f0:a4:59:
70:c6:de:d8:d6:09:ce:c9:7a:13:40:06:32:d7:98:70:fe:e7:
7d:03:d9:65:a3:57:79:83:ae:eb:f3:65:7b:c1:fd:e3:a8:60:
e9:a2:f8:f2:f8:7c:54:ba:38:1e:57:3c:15:e6:55:ca:56:e5:
58:d1:21:44:62:bd:fb:07:4b:4d:44:df:62:99:c9:37:51:ba:
09:6e:45:ca:07:7c:4d:30:84:40:78:0b:92:3e:c4:5c:39:3f:
da:d5:e3:8b:db:78:66:58:2c:96:c8:04:b7:4d:d3:1d:3a:40:
80:03:a9:b2:ac:b2:91:49:33:ac:19:52:aa:96:62:38:42:20:
4c:63:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:22:38 2026 by rpki-client