Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier: lsePKgNwvZfSYNmtoKPVwkZER11LH7gY+LM7AlNbuXc=
Subject key identifier: 43:27:15:FB:33:8A:65:89:30:BE:45:E0:AE:EE:BD:A5:6E:97:4A:71
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial: 019D3909A84A648909F0158B452334B20B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number: 1594
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: YctfNob6kUzb/yV25PFNeamIPtXEQR/Vs/zWCgTQPYU=)
2: ozz0x0OXpUjt9QlyXfs9KZpHyLU.roa (hash: 9p88oMkfOmCl4BZ4A7v3PATdrJhihjQlrWGyNGhJfyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a8:4a:64:89:09:f0:15:8b:45:23:34:b2:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=432715fb338a658930be45e0aeeebda56e974a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:fc:46:14:ff:66:e0:b8:15:d5:22:16:5a:
89:60:d4:f7:89:05:6c:7f:c4:b6:8f:c9:6c:73:1b:
ec:b6:e3:3b:fb:e3:b5:8c:9d:bc:4f:ca:5e:bc:e1:
31:83:55:f8:fb:6b:cb:d4:39:31:40:52:6c:9d:06:
7a:53:3d:e9:cc:d0:19:ff:bc:8a:23:e7:f7:16:43:
60:57:3d:be:10:89:95:57:e3:33:d5:b0:b9:f1:c3:
a0:ff:bf:be:db:9f:05:27:de:b1:3d:13:d5:9a:e4:
8c:4c:f5:e3:e8:26:9b:1f:df:ad:2a:51:d5:53:27:
75:5e:a6:b4:7d:96:b1:b9:e7:f6:47:e2:3b:36:01:
b7:d0:d6:a0:84:82:cf:1d:81:3b:a3:45:8d:e1:91:
dc:e1:29:20:58:0b:e3:68:6d:b6:63:76:61:73:a4:
84:77:2f:5f:aa:ff:e1:d0:7b:be:c0:71:ac:14:55:
21:6d:aa:ef:b7:48:6c:24:00:8f:6b:3d:ea:29:7e:
c6:ab:f2:34:9d:ac:c6:15:57:8d:41:ce:94:81:0e:
44:10:3c:18:47:95:7d:73:ea:2e:bf:17:9e:53:86:
4a:16:d1:69:41:94:d9:c6:85:b7:2a:c2:25:90:02:
fb:1b:07:20:9c:e9:e8:52:ea:29:1f:90:39:5f:37:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:27:15:FB:33:8A:65:89:30:BE:45:E0:AE:EE:BD:A5:6E:97:4A:71
X509v3 Authority Key Identifier:
keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c2:f3:86:5b:07:d0:dd:33:2e:44:7c:45:3a:70:ee:d6:60:
c9:c9:c8:93:a0:d0:ad:b1:e5:44:b2:1f:c3:25:c0:de:bd:97:
a4:5c:de:10:85:2f:5b:5c:dd:fa:4d:ba:78:78:85:98:c5:a9:
23:63:f4:a2:16:c2:aa:da:17:0c:9a:2c:7d:51:0b:4a:ce:6f:
ff:ab:fb:c7:0c:8b:b1:63:1e:17:08:e1:e4:5f:5b:39:9a:51:
47:5d:85:1e:e3:23:df:ad:43:e3:97:0e:dc:45:b0:e6:32:b1:
28:cb:37:3f:73:dd:81:da:29:f5:85:00:7c:eb:a9:5a:9d:d8:
ce:8e:b4:9d:33:e4:86:24:15:d2:aa:46:ca:4c:7d:05:11:79:
bb:81:73:c0:a8:36:27:b7:23:c9:d8:fe:7b:2e:5f:3e:3e:c5:
a1:36:7e:77:88:bc:34:e9:14:4d:a7:1e:54:b0:e1:04:c4:7d:
e0:91:61:57:8e:1f:80:66:09:73:22:ff:cb:bc:36:57:be:7e:
50:c2:52:88:fb:5f:74:25:82:f0:43:61:3d:2f:88:9f:8f:ec:
8e:2f:55:be:e7:f6:7b:5c:fc:bc:2f:56:0e:6f:21:a3:80:86:
43:e8:68:7d:b3:3d:fe:ac:99:7d:bf:62:6b:5e:57:23:29:41:
29:a0:96:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:06 2026 by rpki-client