Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: dF+hb06Jj7zGtuzezCP1J7pg3+lT2kzlOn27KXsoTJU=
Subject key identifier: 3F:8F:4E:50:97:63:D1:29:A0:0D:3D:BA:B2:A4:6E:12:9E:11:29:26
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019D3866595467E770F70B4D924BF5CD3982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0FAC
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: isamWCyxXnfXYynUb2qHHqwGYbdC5ngXSnOCTSG38x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:59:54:67:e7:70:f7:0b:4d:92:4b:f5:cd:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=3f8f4e509763d129a00d3dbab2a46e129e112926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:ee:2a:f1:71:07:ac:67:f0:1b:9f:7e:0c:
96:72:79:2a:e9:51:05:b8:81:54:10:85:25:b3:7d:
74:e6:d8:af:8a:66:bd:bd:17:8a:00:89:12:30:91:
88:36:ce:2d:92:b1:cf:6e:de:ae:22:a1:91:8b:b2:
c5:a8:b4:18:03:55:a4:92:78:fc:69:4a:5d:0a:75:
b3:3c:29:ee:81:c0:2c:79:d1:0e:f6:eb:c1:9c:20:
bd:ba:a4:08:ad:93:fb:3f:07:21:1e:5c:f1:1e:7e:
db:db:74:d6:73:81:70:38:e8:31:8c:80:43:9d:24:
c9:39:9a:73:58:5e:6c:09:ad:8f:3f:49:e6:89:eb:
d1:ab:92:14:2d:a6:03:ff:09:dd:2c:52:20:32:c2:
66:54:93:01:29:ce:c6:a0:e6:da:6f:3c:63:9c:48:
54:e0:47:51:22:d8:de:99:1f:3a:2b:de:d8:0c:b9:
43:45:20:9b:21:a0:93:9a:2e:62:4b:8d:fb:23:45:
a4:9f:13:76:ef:95:e9:83:f0:b4:b9:10:4b:ee:4a:
36:df:71:d6:0e:b7:6d:25:59:86:09:c0:d8:b2:44:
14:7f:c8:0b:8e:93:f3:bc:4f:6c:5d:30:4e:0d:4d:
1c:c6:1c:ac:6d:d9:44:42:dc:e7:db:76:3f:fc:bc:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:4E:50:97:63:D1:29:A0:0D:3D:BA:B2:A4:6E:12:9E:11:29:26
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:36:61:dc:f2:91:96:06:63:b0:07:cd:42:f7:e6:b1:de:
52:bf:70:ba:57:6f:30:9a:d7:97:00:f8:9e:5a:60:d0:0b:aa:
85:a3:9f:04:ef:f2:fb:13:dd:ca:1c:36:c9:15:2e:82:5d:a8:
e9:5a:70:8d:e2:6a:ae:34:4b:50:c1:21:c4:d4:b4:a4:da:f2:
7c:f7:18:13:94:5f:be:0b:da:7c:70:c9:21:36:05:48:39:4c:
7f:9b:72:c5:8c:c4:ce:6f:8d:ed:8f:ec:88:13:13:ea:e6:c0:
08:3e:4f:af:41:b5:f1:04:d0:29:ff:e1:fc:c3:b5:4e:a8:eb:
c8:35:ea:90:df:07:83:ab:d0:f2:3b:a1:f7:29:1c:09:e9:d6:
b9:e4:b5:ab:51:e9:9d:65:32:b7:5f:79:e2:29:dd:12:05:a2:
c9:aa:18:7a:d5:05:27:b5:bb:11:e9:fb:d2:d3:59:1a:4f:21:
01:46:a5:e9:cf:ab:fa:eb:d0:25:f0:c9:65:e7:1a:8f:73:68:
90:53:37:ad:21:4b:d0:07:32:71:14:11:b1:17:15:c9:7a:f2:
e3:01:02:03:de:84:78:de:d6:a4:d6:54:01:3b:bb:a5:b3:c4:
59:b5:60:fe:b1:a2:1b:b2:ba:7a:ce:96:47:36:09:3a:66:a1:
ac:85:0e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZllUZ+dw9wtNkkv1zTmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh
MzcyNjAwHhcNMjYwMzI5MDcwMjA0WhcNMjYwMzMwMDcwMjA0WjAzMTEwLwYDVQQD
EygzZjhmNGU1MDk3NjNkMTI5YTAwZDNkYmFiMmE0NmUxMjllMTEyOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLPuKvFxB6xn8BuffgyWcnkq6VEF
uIFUEIUls3105tivima9vReKAIkSMJGINs4tkrHPbt6uIqGRi7LFqLQYA1Wkknj8
aUpdCnWzPCnugcAsedEO9uvBnCC9uqQIrZP7PwchHlzxHn7b23TWc4FwOOgxjIBD
nSTJOZpzWF5sCa2PP0nmievRq5IULaYD/wndLFIgMsJmVJMBKc7GoObabzxjnEhU
4EdRItjemR86K97YDLlDRSCbIaCTmi5iS437I0WknxN275Xpg/C0uRBL7ko233HW
DrdtJVmGCcDYskQUf8gLjpPzvE9sXTBODU0cxhysbdlEQtzn23Y//LyM4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+PTlCXY9EpoA09urKkbhKeESkmMB8GA1UdIwQY
MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt
MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4
LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWs2Ydzy
kZYGY7AHzUL35rHeUr9wuldvMJrXlwD4nlpg0AuqhaOfBO/y+xPdyhw2yRUugl2o
6VpwjeJqrjRLUMEhxNS0pNryfPcYE5RfvgvafHDJITYFSDlMf5tyxYzEzm+N7Y/s
iBMT6ubACD5Pr0G18QTQKf/h/MO1TqjryDXqkN8Hg6vQ8juh9ykcCenWueS1q1Hp
nWUyt1954indEgWiyaoYetUFJ7W7Een70tNZGk8hAUal6c+r+uvQJfDJZecaj3No
kFM3rSFL0AcycRQRsRcVyXry4wECA96EeN7WpNZUATu7pbPEWbVg/rGiG7K6es6W
RzYJOmahrIUO1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:51 2026 by rpki-client