Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: 98rrClaYYsaVN2QtbevwKZzKPlvlBokKgEGDWfSbCuU=
Subject key identifier: C9:E1:52:D5:E7:E0:C4:94:EA:95:72:A8:08:86:14:DB:31:2A:3D:5D
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 019DDCC32D6E62928F0F2ECC004AE8E958FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0BA2
Signing time: Thu 30 Apr 2026 05:01:11 +0000
Manifest this update: Thu 30 Apr 2026 05:01:11 +0000
Manifest next update: Fri 01 May 2026 05:01:11 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: 9xAYmRgPHXT4x6URSP05RW8ZRbjqJpLLs0aGMYnc5vQ=)
2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:2d:6e:62:92:8f:0f:2e:cc:00:4a:e8:e9:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Apr 30 05:01:11 2026 GMT
Not After : May 1 05:01:11 2026 GMT
Subject: CN=c9e152d5e7e0c494ea9572a8088614db312a3d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:36:75:e2:2f:2c:dc:d1:55:26:6d:c3:0d:
83:60:10:c4:c0:e4:e8:77:29:fc:13:34:bb:dc:b0:
d8:04:36:3b:58:eb:fb:53:99:44:f4:b1:b9:b4:ce:
b0:a5:de:4d:13:b9:3f:ab:fe:3f:63:4a:48:6e:d5:
6c:65:a2:b7:b9:3a:d6:f4:cf:be:8c:4d:ba:50:49:
45:82:cc:c6:53:ef:33:87:9a:0c:39:3c:5c:5e:78:
54:76:22:01:cc:e7:62:19:2d:81:05:32:25:c7:bf:
56:83:1a:b8:d9:79:60:d5:01:21:bd:78:66:d9:c3:
5f:94:5d:7f:9c:91:28:65:87:91:d5:50:b2:2f:c3:
25:2a:39:d5:c2:c3:5c:ba:48:0b:7a:31:7d:98:d9:
b4:4f:5e:8f:8b:5b:58:06:47:50:fd:37:de:cc:27:
74:40:45:32:06:bb:50:1b:34:5d:0e:10:ba:cf:f0:
28:fb:f9:b0:9f:73:9f:60:56:cb:ec:4f:2e:f2:b2:
0b:9e:0b:3e:98:d2:cc:01:1e:de:2a:9d:ab:b5:40:
9f:0c:7d:c0:73:02:97:3f:66:1e:8f:f1:4c:88:e2:
0b:92:09:93:fe:08:13:1b:36:06:d4:fa:71:bd:29:
31:5e:2b:a0:26:24:5a:75:a9:49:9e:e6:21:e1:73:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:52:D5:E7:E0:C4:94:EA:95:72:A8:08:86:14:DB:31:2A:3D:5D
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:46:e3:2d:29:53:4f:ac:62:65:c5:14:8f:a1:d5:f9:f0:9f:
61:93:85:cd:d4:1d:55:78:b3:5e:ba:20:eb:4f:81:4d:04:81:
42:8e:45:d1:e9:20:a1:16:25:97:74:0b:28:1e:a9:ac:60:60:
92:e2:0b:63:fc:35:de:a7:12:7d:ae:b3:b8:3f:93:ce:73:b3:
b5:37:1b:88:ee:01:8a:7e:5d:b6:12:df:b2:6e:f9:04:b4:a3:
89:03:92:34:ef:5c:9e:28:7e:58:21:b9:54:30:2f:8a:fd:15:
74:2c:6e:d7:06:87:4d:1d:38:d6:c0:60:7f:4e:17:30:4a:fd:
7e:39:c3:e7:6b:2f:68:b7:dc:b5:6e:ce:5a:53:b2:1b:0c:ab:
25:0a:cb:f0:fe:f6:64:5b:25:45:fb:db:cc:3d:f5:30:f1:c9:
9b:bc:88:b6:8c:7b:6e:c2:f0:69:a6:26:56:8c:68:8e:00:ec:
0f:02:8e:b2:cb:f4:50:bb:fb:0c:24:cf:6e:fe:7c:0f:82:c8:
32:41:fd:ad:3b:57:62:38:3e:bb:f4:d5:b0:0a:ae:5c:bd:32:
6b:04:70:49:fd:06:1b:7c:5e:90:d8:f8:01:9d:4f:f5:04:49:
5b:c1:7a:db:47:76:06:4a:f0:a4:7e:82:7f:f2:59:c6:a2:d9:
09:9f:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:24 2026 by rpki-client