Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier: UVnICpS/WkjVtljrtz6ikGVpbUS1tGGkNNDqOXMjMkU=
Subject key identifier: 7B:73:B0:75:94:EB:4C:04:BC:42:A3:32:34:7D:53:C7:00:EA:6B:CA
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial: 019D36E4B93C37DDF08896F39398010C6EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number: 120A
Signing time: Sun 29 Mar 2026 00:00:52 +0000
Manifest this update: Sun 29 Mar 2026 00:00:52 +0000
Manifest next update: Mon 30 Mar 2026 00:00:52 +0000
Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: trqQNQiqkM2/ngUUgj2HBQNv3ngyx6NFShSvNlyhM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:b9:3c:37:dd:f0:88:96:f3:93:98:01:0c:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Validity
Not Before: Mar 29 00:00:52 2026 GMT
Not After : Mar 30 00:00:52 2026 GMT
Subject: CN=7b73b07594eb4c04bc42a332347d53c700ea6bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:8f:b5:8d:e7:66:a2:bd:0a:66:11:ab:f0:
7e:72:ca:18:51:6b:dc:0d:c8:34:3a:18:69:70:96:
8b:b0:25:9b:46:5d:0f:d0:75:17:da:83:79:94:88:
fd:49:03:34:0f:3d:a2:27:22:ef:57:5f:46:56:34:
ca:95:a5:38:32:dc:24:26:14:f8:49:5c:6e:45:82:
be:54:45:ba:b0:5c:d4:1f:d2:1e:6f:cb:61:24:3c:
be:b4:15:27:da:03:a5:85:5b:c0:9b:05:cd:51:df:
ed:d4:56:63:7d:9f:6d:a9:b8:14:7b:38:3c:e8:bc:
ff:d2:b9:dc:7d:2b:08:12:24:24:04:04:fc:5c:55:
cd:d4:8f:19:00:fe:e6:49:c2:44:d3:62:8e:d8:65:
3e:40:5d:5d:a8:44:31:fe:ef:62:6a:54:78:33:ab:
75:87:1f:41:60:2d:c0:27:ba:97:9b:cd:f5:15:57:
b6:6a:e2:ab:21:74:5e:c8:eb:8e:1c:eb:86:9e:56:
60:fd:f4:9b:c5:92:c3:42:c5:b3:23:8c:e2:56:ee:
43:8c:b1:02:5f:81:fa:a8:c5:21:7b:9b:86:86:75:
49:2b:58:25:36:00:e4:7a:bd:bd:3a:c7:7c:c6:1c:
55:20:e5:e1:0e:15:90:66:ff:c0:29:94:8f:7e:ab:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:B0:75:94:EB:4C:04:BC:42:A3:32:34:7D:53:C7:00:EA:6B:CA
X509v3 Authority Key Identifier:
keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:0a:7b:58:0e:8b:74:d6:0a:13:a7:bc:bd:bb:70:69:3d:
3c:ae:d8:df:a5:57:99:d4:69:78:dc:c6:51:19:dc:cb:7e:3f:
2c:dd:25:e3:cd:c5:38:e1:3a:65:9d:34:9f:97:76:38:8d:c5:
88:c9:a5:ff:d2:81:9f:64:ad:09:33:73:5e:0b:7a:91:7a:17:
d3:27:86:c8:ba:aa:08:f6:3a:95:63:b5:05:55:f4:62:41:a3:
e0:08:60:76:13:2a:1c:4d:4a:76:a9:40:07:d4:b9:9f:63:d2:
6a:99:ae:89:91:34:b7:50:a1:61:ba:b8:7a:db:57:80:a4:be:
d2:d4:79:4e:25:68:d5:c5:ea:ff:64:58:e5:38:67:ef:e7:1a:
b5:e8:f4:27:e7:0a:29:76:2a:63:4f:93:25:d9:e0:6a:b2:3d:
da:e7:98:76:a7:13:f9:96:d1:37:b5:25:6b:07:b6:e4:e8:11:
62:d8:71:c3:aa:bb:b2:ab:68:69:32:a2:c6:cc:e6:24:48:a9:
33:bd:eb:48:29:ca:e7:93:60:d9:3e:b8:8e:7c:8e:4b:08:d5:
27:86:cf:af:59:04:d6:91:aa:ef:e5:5c:96:82:07:99:55:f0:
6a:b9:e1:b7:12:52:8b:1b:a3:46:fb:ba:1a:ee:54:d7:1e:dc:
c1:9f:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client