Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
File: 6qALChNMw-WcO-1fBukOl6zGkiY.mft (raw, json)
Hash identifier: l9CoQZO90VOwFal1ArnWB5u/i47xOViYQwzHTyYNxDk=
Subject key identifier: FA:1E:72:DE:CB:15:79:A3:75:AB:F7:FC:88:DD:45:13:74:6A:C9:F5
Authority key identifier: EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
Certificate issuer: /CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Certificate serial: 019DDD9F660BA46A976C1C88248104FB7C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
Manifest number: 07
Signing time: Thu 30 Apr 2026 09:01:44 +0000
Manifest this update: Thu 30 Apr 2026 09:01:44 +0000
Manifest next update: Fri 01 May 2026 09:01:44 +0000
Files and hashes: 1: 6qALChNMw-WcO-1fBukOl6zGkiY.crl (hash: 6Vdp0/hIMDe3nOLdXGPO3hgD1yyFRaYBWJG1pjo/9hw=)
2: gSrm3lz-AyRv5CUqMgLfnP5GahM.asa (hash: Z2emz0ys4IlG0lsnZ0ljkY9OEfTrXSEXHSq6mSWxJdI=)
3: uBHFbLgGRV7emHjkgZfqJxhikko.roa (hash: 5UJr7XXT+HR7D7KcOSg5tDK5BIQwMOoB0sd6pq2mMYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:66:0b:a4:6a:97:6c:1c:88:24:81:04:fb:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Validity
Not Before: Apr 30 09:01:44 2026 GMT
Not After : May 1 09:01:44 2026 GMT
Subject: CN=fa1e72decb1579a375abf7fc88dd4513746ac9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:99:55:ae:f3:85:68:e6:1d:bb:5b:8c:ce:
d2:38:4e:cc:56:32:1e:7a:36:c1:b2:c9:20:36:de:
87:77:51:19:ff:7e:a1:7a:38:06:07:2e:4a:d9:38:
a0:88:0d:23:7c:6c:07:b6:41:10:69:3b:3a:b6:60:
ad:f5:3d:67:4c:e5:0d:7f:03:0c:7b:18:0e:dd:ad:
3e:8f:de:57:4c:d9:15:8d:51:b2:60:6e:18:c7:40:
fe:d9:bc:4a:31:17:c2:f0:00:7a:7e:01:15:00:c1:
f8:6b:c2:83:0f:ec:d6:83:3d:a3:c3:cd:12:63:79:
e7:2a:56:1d:36:1f:48:1f:a6:60:05:79:ce:1a:aa:
75:e4:23:49:66:ff:d3:20:65:02:c7:3e:3d:31:5a:
50:d3:65:de:9a:4a:bb:05:33:95:4a:1d:19:51:ee:
2a:44:f1:d4:96:7c:c3:ae:ff:30:d2:ee:d3:8e:b8:
6b:0a:a6:18:ec:c0:ad:b0:db:39:a6:cd:d2:4e:b4:
39:68:59:d5:8d:71:85:6f:30:e2:04:bd:d1:dd:4c:
6f:01:6d:8f:45:77:db:87:d8:93:e4:24:8d:d7:8f:
e8:4b:bc:54:a8:40:f4:41:62:7e:be:c7:05:67:c5:
34:11:27:74:b3:52:07:12:22:3c:c0:36:a7:0e:c9:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:72:DE:CB:15:79:A3:75:AB:F7:FC:88:DD:45:13:74:6A:C9:F5
X509v3 Authority Key Identifier:
keyid:EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:65:0e:3e:b7:6e:25:ca:49:b2:75:a4:45:f9:97:9f:13:
19:cb:2a:00:e4:d9:8b:6b:08:d4:0d:91:13:9a:88:18:21:ca:
7b:c8:da:5f:17:bb:ce:c7:33:f5:95:33:67:36:94:a1:a8:50:
aa:c8:dc:6f:5f:3e:d9:bc:d7:a7:9a:90:0a:29:2c:01:e3:fe:
10:d0:ea:12:9e:0c:92:36:c3:37:bb:18:d7:d0:6d:43:21:67:
de:81:48:15:0d:47:5a:00:fb:80:86:46:69:a7:7f:89:74:73:
20:8e:ea:4a:aa:88:ab:ed:29:40:a5:da:ae:00:2a:8a:bb:1e:
2f:03:a0:9e:c6:4c:2d:89:b3:ec:c1:71:d8:93:fe:e8:06:03:
19:84:50:d8:10:01:ac:ca:2e:66:a5:42:6b:75:3a:99:cb:fa:
a6:da:c6:0d:5f:d0:ec:a9:b4:f1:7e:48:6d:a0:e1:0f:b7:9b:
ac:7a:40:c7:01:51:f4:12:be:73:e4:af:47:8b:7f:0b:c3:a9:
70:d1:ee:97:42:61:bd:e4:41:0d:85:9b:aa:79:ce:7b:d6:51:
e4:06:df:8d:28:8a:2e:89:28:6d:35:ef:79:da:98:d7:40:ed:
49:f4:70:56:f6:24:38:25:72:27:21:b1:d4:42:c6:be:a7:4b:
04:31:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:14 2026 by rpki-client