
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File: 06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier: XEwSP/h7SLti0nFULbEJtG1OhLAvlgTEkBBfXprWsac=
Subject key identifier: 3D:7F:E5:0E:ED:C2:36:64:40:E9:18:82:DA:CA:9A:BC:79:7A:5A:52
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer: /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial: 019D38D3B7252A1E105559E11C6E1922AD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number: 95
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: GFliAqO7Uomcyry+D4DqW19D31cxbb0R+P4iWT2VR/s=)
2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b7:25:2a:1e:10:55:59:e1:1c:6e:19:22:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=3d7fe50eedc2366440e91882daca9abc797a5a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:c9:81:32:72:1c:60:8a:c6:90:94:28:53:
cc:50:a3:d4:c4:13:df:85:d6:ee:f8:78:6e:ae:15:
cb:ef:c2:cb:40:8c:9b:19:22:1d:93:bb:14:60:c9:
42:b5:21:a8:1c:bb:fa:be:bb:22:fe:3c:30:dc:17:
64:0e:35:e2:7b:e6:8e:ce:8e:71:01:ca:ec:35:8b:
19:f4:83:55:d1:94:b8:9d:00:38:0b:22:d3:2e:99:
ed:a1:06:dc:ec:33:20:84:08:c2:a4:45:61:dd:45:
98:7f:1a:4b:e0:d8:53:58:07:67:c4:74:97:67:59:
c9:1a:25:15:d5:b0:38:9b:e8:26:a1:5a:d5:e5:ec:
ec:c4:19:ff:64:59:e6:9b:8d:e7:0d:28:43:6a:c5:
c8:11:6e:0a:76:79:3f:f5:95:fc:cc:0c:12:b8:40:
fc:6e:95:ae:d8:ee:d5:a9:b0:cf:e6:50:57:2c:ce:
ad:aa:6c:4a:15:37:38:75:56:c7:51:91:cf:0e:98:
44:63:64:48:c5:a7:c1:98:7e:b8:b1:ea:3e:3b:90:
38:67:dc:60:02:0e:91:3e:f5:a4:3f:76:a8:04:48:
29:98:e6:50:be:60:0e:22:48:34:23:02:cc:74:93:
58:0b:f1:5b:32:82:66:76:a1:f4:43:5f:6e:44:96:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:E5:0E:ED:C2:36:64:40:E9:18:82:DA:CA:9A:BC:79:7A:5A:52
X509v3 Authority Key Identifier:
keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:d5:56:b9:6d:cb:38:19:b1:41:03:12:e0:a9:c8:a4:e5:
61:74:40:39:d9:23:26:be:b1:ad:6e:d2:d1:68:03:74:33:9a:
46:e7:0e:68:ed:68:31:74:31:bd:60:ac:6d:4f:d3:87:8b:ae:
58:2b:9f:58:3a:25:ca:1b:de:99:8a:0a:bc:db:fe:87:51:c6:
0c:10:ca:4f:80:58:24:87:e3:f7:29:a8:6c:df:2b:e3:8a:94:
06:94:f7:5c:45:23:b2:8d:39:4d:45:b8:f2:8c:d2:60:d9:8b:
8b:a8:d5:53:c3:8f:34:37:81:72:ec:5d:58:90:9c:da:a6:92:
e8:9e:dd:d9:70:b2:af:cb:13:dc:40:02:34:fc:4b:e9:4b:68:
7a:be:dc:16:c3:59:c4:b3:e7:b8:d8:a9:56:b9:8a:c0:da:52:
92:5f:e1:73:47:26:70:5e:65:6e:f7:9a:c5:e1:9e:b9:f9:bf:
bb:83:79:0e:5d:92:d7:51:e1:07:b4:87:a4:3a:75:84:63:5d:
28:d7:b5:91:f4:c3:24:17:09:4e:90:ab:b4:9c:bf:c4:af:8d:
69:2a:96:32:88:ef:13:33:bb:84:fe:92:c6:f9:7f:f7:f5:64:
9f:f5:f3:39:af:2b:55:76:e3:30:bf:06:b3:cd:1e:50:02:d4:
d8:61:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:53 2026 by rpki-client