Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: 29ZpqKe5D80mjb2ib/6+Ue+lpm/wpy+vU/I9GrPoC5s=
Subject key identifier: 3F:C2:13:A4:31:27:2D:9A:C6:B5:AA:3E:47:03:A1:A6:B4:B3:5A:B5
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019D3909CF3ABFB4E37291D35A10A8AB3D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0C7B
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: qov8HrkcM3xfKhodJFsNLEALCG4+RZi/se9ZAYt4njk=)
2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cf:3a:bf:b4:e3:72:91:d3:5a:10:a8:ab:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=3fc213a431272d9ac6b5aa3e4703a1a6b4b35ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:af:d0:77:49:ac:ab:b5:2e:e1:40:b3:3d:
ec:cf:3e:6d:12:49:29:0c:72:57:a9:df:26:23:32:
ab:b9:af:13:f7:88:ab:87:22:f1:32:f8:a2:e8:ce:
5b:68:aa:a4:96:5a:56:f7:5e:8f:50:64:b1:cc:ce:
4b:02:e3:0e:0e:56:56:92:d6:77:40:e2:c3:7f:18:
39:88:48:72:a6:77:34:74:b2:d2:6d:b4:9e:43:38:
89:9e:da:79:74:be:4b:75:be:5f:c3:6d:da:af:05:
df:d6:b0:c9:35:bb:f3:55:c8:c5:9c:e1:b9:79:12:
39:dd:5e:23:2a:45:9b:75:d7:cf:d8:54:d6:f9:7c:
18:82:06:0d:2a:1c:f8:33:05:e0:53:17:97:46:cb:
75:1b:9d:aa:29:8b:d6:6c:b4:83:9a:b7:de:a4:f3:
a0:53:32:89:55:3c:4c:57:ff:8e:b5:77:1f:74:98:
28:b2:c2:ea:3b:3a:fe:f9:03:77:0f:5c:f7:8b:e0:
49:de:89:7b:dc:d8:11:6d:b0:d4:e0:22:06:39:bc:
7b:a5:72:e7:b4:4d:4c:ff:3b:83:47:64:d2:94:82:
b1:57:5a:3d:1a:af:cb:31:98:7c:cc:70:3e:1e:05:
9f:88:75:4c:66:7c:4a:e9:6e:6c:70:fc:a9:ec:91:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:13:A4:31:27:2D:9A:C6:B5:AA:3E:47:03:A1:A6:B4:B3:5A:B5
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:9d:99:91:93:4c:d9:2a:a8:34:b0:48:2c:de:ce:b5:94:
ae:25:e4:8d:f9:32:a5:b2:9a:e9:63:33:f1:92:71:c5:ac:b6:
44:b8:c4:da:33:87:5d:88:21:fb:4b:c7:c4:91:43:ca:db:bc:
f8:08:c2:15:c8:fc:25:d7:0a:60:38:cf:fb:80:7e:0b:32:15:
f3:e5:c8:4e:02:e1:fb:e5:fc:a5:53:e5:bc:66:21:a0:51:8f:
92:7e:ec:65:96:55:33:bd:b0:d2:03:6a:aa:19:bf:6a:80:26:
b5:67:10:c7:f6:42:46:e3:34:46:a4:ca:74:fa:f6:22:a5:6b:
6a:5b:7d:ee:3c:c9:c4:60:fa:4e:0c:07:ab:c6:0d:4f:87:f9:
72:04:a1:58:c6:89:4f:2b:92:3f:32:ba:83:4d:80:68:92:b9:
c4:f5:4f:25:71:09:0c:ab:d1:1e:73:03:ee:58:4d:ad:64:df:
71:2f:6e:86:72:ba:b3:c3:e2:46:f5:a4:88:e0:0a:4a:d9:24:
45:a4:d4:54:95:b2:8d:fa:0e:0e:22:14:1c:df:2f:a3:a1:f4:
95:c7:62:5f:33:27:d8:c9:60:10:e1:fc:00:21:9c:bb:65:b7:
89:1e:c2:55:da:e8:fb:4d:0a:a0:bf:f9:ad:62:5a:c6:a9:c9:
84:a9:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:42 2026 by rpki-client