Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: xdtp/+q25xZ8zoz86LHDerJ1NxY89e1NZpZDzrzQfbk=
Subject key identifier: 85:89:AC:87:5E:3E:66:2E:59:D9:10:0A:57:1B:CD:4B:31:74:54:55
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019D3752C34A8F1BB60F9C1BCD8F08C1D5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 013F
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: V7hSCsiKFW78grPZuegvl4leXIg7TDq+rjd/rkpYUxQ=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c3:4a:8f:1b:b6:0f:9c:1b:cd:8f:08:c1:d5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=8589ac875e3e662e59d9100a571bcd4b31745455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:b1:e5:f5:fa:c9:6c:30:ac:c7:5e:d1:ef:
cf:ff:4f:50:21:88:fe:7f:06:fe:6c:e7:21:d2:6a:
ef:c3:93:e8:1f:ad:74:c3:b8:88:36:49:62:5b:23:
82:5c:1e:69:32:7d:ce:86:2d:9a:f3:84:a4:35:92:
f6:3b:5c:d3:34:3f:7b:af:2d:4e:b2:17:fb:f1:be:
53:3c:a8:7d:1e:e8:ba:56:a0:4e:54:ca:cc:78:70:
9e:4e:a2:59:f4:ce:74:b6:4f:5a:5e:ae:99:e4:f9:
91:1e:6e:2a:72:4e:95:ab:50:d0:39:5d:75:22:eb:
28:f1:8e:44:49:8b:e9:51:ac:5a:e9:36:ee:a8:cb:
8d:cb:4e:ed:71:c2:38:39:80:b7:40:71:dd:b4:5e:
7c:84:07:f1:aa:40:ab:ed:80:52:bf:25:65:b3:57:
65:c6:70:76:f0:d7:b1:4a:bb:48:b6:6f:df:37:33:
00:4b:70:96:5e:9f:09:63:dd:9b:99:14:7c:0e:9d:
2d:15:a0:5a:b9:ae:1e:9a:50:f9:28:63:86:46:30:
4f:88:ae:ff:93:2a:c3:05:20:49:e2:6f:1f:c6:8e:
a8:c3:1c:33:a5:f8:94:c7:76:8c:fa:07:98:08:23:
42:e6:e6:85:10:e0:c8:ce:de:55:a2:2b:63:83:e0:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:AC:87:5E:3E:66:2E:59:D9:10:0A:57:1B:CD:4B:31:74:54:55
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:95:92:b0:8a:d6:49:c8:1f:a4:c5:f0:a3:ad:22:11:a0:cb:
22:77:cc:f2:37:f7:70:9c:78:0d:90:57:c7:2e:a6:3e:64:91:
1d:7c:33:31:27:e1:30:aa:92:8c:02:d0:a0:d2:cb:29:52:dd:
92:4f:e3:0f:fb:58:01:41:24:53:72:38:a9:88:b1:35:a7:98:
17:e9:d3:37:49:ce:ad:b1:86:12:e9:a5:af:e3:44:69:8c:4e:
2a:e8:0d:10:85:d2:5a:71:4a:8c:67:77:51:4e:cd:98:a0:fa:
1c:70:ff:68:d6:5b:e5:f2:ec:6a:91:ee:dc:55:2b:00:cf:78:
d0:7f:2a:2b:b5:9d:cf:49:4a:05:ee:58:e5:ea:49:69:c6:4f:
d8:29:c7:c1:08:97:bc:13:f6:34:61:90:c1:4f:af:02:37:c8:
1f:00:50:97:ee:de:49:14:25:8c:c2:55:ca:64:9c:c1:bf:24:
d1:14:ba:44:f8:7d:5d:1f:97:6d:ce:7b:bf:63:8b:2c:5c:e5:
c3:13:ca:a9:1a:f5:b3:5d:e3:58:f7:1c:5b:2d:93:10:5b:63:
9a:b1:70:4e:15:ed:79:7d:4b:a3:bc:64:09:46:82:84:4e:25:
ed:e7:df:81:01:a5:89:ef:37:40:1f:53:5a:f6:87:2d:f2:4d:
ce:d5:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:18 2026 by rpki-client