Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: +ItYRIy+Y8APF0hvM+/ydB0kEMv6/gasvspZ7O/8Gqw=
Subject key identifier: 71:84:86:3C:88:F5:FA:D2:52:7C:09:97:80:89:C6:33:B2:14:3E:38
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019D3941326647740ECACD6A144AB4F5C8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 16B0
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: lMSrKa8XDbIrByN9fEEWi/ao1wXJ786CYKdXb55MxWY=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:32:66:47:74:0e:ca:cd:6a:14:4a:b4:f5:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=7184863c88f5fad2527c09978089c633b2143e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:8b:dd:16:c8:83:53:1c:07:5d:10:e6:fc:
04:9e:7e:19:a3:66:fe:7e:f6:26:cc:9a:2a:a2:a7:
0a:08:65:9c:40:47:db:45:11:88:e8:0a:2e:8c:46:
a7:fa:b9:7a:c3:18:0e:47:f0:d0:e1:c3:9c:7a:82:
e3:60:17:30:3c:60:fa:f3:18:4b:9d:b1:42:59:8d:
a0:2e:de:d3:09:98:92:63:d5:c2:08:c6:34:af:41:
19:0c:e3:53:56:84:73:f1:df:e1:c3:77:77:64:e3:
2d:71:e2:0b:12:46:6c:99:0f:6b:6c:51:d2:df:0e:
80:98:55:30:29:3f:5a:96:88:ab:93:6b:0e:96:a4:
9b:bc:e0:08:de:2b:27:c4:f8:6c:67:8e:64:cb:aa:
5e:a3:a6:6f:5c:19:4e:11:39:be:c1:e5:95:f1:96:
0e:34:9e:b7:31:90:da:73:b8:90:bd:30:e8:db:44:
49:67:51:b3:48:bb:16:0b:e9:a4:23:80:54:7f:af:
f1:4b:7d:28:f7:e6:05:cb:1d:e4:ea:28:ba:e8:ef:
62:a1:89:c7:09:44:31:8b:63:2b:10:7f:72:74:c0:
69:c9:9e:a4:75:59:c0:93:d2:75:0b:be:a4:de:04:
cc:fb:2a:5f:e1:9e:a4:a4:71:e9:27:08:b4:e2:d2:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:86:3C:88:F5:FA:D2:52:7C:09:97:80:89:C6:33:B2:14:3E:38
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3a:58:fb:e0:d0:8c:97:da:1c:90:7d:72:6f:8b:dc:2c:c2:
60:4e:b6:e5:4b:59:8b:c6:19:ae:1a:6f:d3:dd:40:e6:29:ad:
16:08:6b:92:b5:23:3c:df:40:e1:bb:e8:c4:3b:e3:3d:bf:42:
20:29:2a:f9:9e:7c:86:64:5c:0f:9e:13:21:da:c5:72:e3:d4:
a1:a5:4c:42:e4:1c:81:b8:48:41:b4:78:22:c8:2e:b0:cb:cd:
2f:98:4e:52:87:64:36:35:19:42:3d:3c:42:53:d4:aa:1b:d5:
33:b8:5f:95:3a:ab:93:83:22:e8:31:da:44:62:b6:bf:8d:8f:
91:c2:26:80:cd:d5:94:d2:8c:0f:f4:14:d1:85:ce:87:eb:a0:
ff:6f:c9:ea:cd:aa:94:13:a6:0a:46:07:44:f2:d3:3f:38:fc:
69:1d:88:30:5c:bf:cf:24:1f:5f:95:a7:ff:fc:95:68:26:7d:
2f:fe:72:08:39:8c:54:b8:cc:5c:65:03:f0:a7:99:03:9f:8a:
20:7d:6e:45:b4:e8:fd:78:00:1a:85:d5:d1:2c:1c:68:a6:2f:
68:87:50:f3:7f:b9:ea:d3:20:31:b2:04:bb:41:94:e1:f5:9b:
4d:94:fb:32:8e:82:28:e6:39:9e:c9:36:80:3b:31:85:4f:5a:
6f:a0:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:37 2026 by rpki-client