Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier: XHAUJZIkNJmG+AsebOcnbeCFKo7ehB40cr+to2Di4hI=
Subject key identifier: CC:B9:C2:D7:E4:A8:B1:10:12:72:3E:2B:5B:99:DE:27:8B:47:6A:FC
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial: 019D37F701769F0FC6C27D152AAFFC714B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: k0dh5Ty4fO+zs7Wmid0ISog5aJmp0OxizIUQKfUK5iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:01:76:9f:0f:c6:c2:7d:15:2a:af:fc:71:4b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=ccb9c2d7e4a8b11012723e2b5b99de278b476afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:94:45:ce:81:7a:c8:96:6c:f6:fa:3e:23:
da:b0:57:b3:8e:a6:20:84:a8:fc:51:b3:e8:5b:71:
60:75:b2:e4:a5:ba:3a:f0:34:7c:a8:1b:14:09:5a:
a6:a8:c6:fb:33:a3:ac:dc:65:73:6b:65:38:b1:90:
04:d2:29:18:d7:47:08:16:96:77:94:f0:eb:1f:9d:
21:41:73:f2:c9:fd:2a:37:d0:cf:4a:a2:33:cf:b3:
1d:53:13:df:f9:73:9c:cd:38:d7:61:54:61:76:52:
50:a9:25:b5:db:51:2f:96:98:5f:2e:7f:8d:1e:4a:
93:de:bd:36:6d:1c:76:64:7f:3c:1d:91:d7:df:ed:
77:94:3b:b9:74:72:ae:fa:d7:23:0a:89:76:e8:a3:
20:60:57:e5:63:80:10:7e:31:2a:36:e3:3b:e1:65:
cc:80:74:f6:89:a6:75:78:85:37:2d:65:c6:22:e1:
af:04:73:39:d5:d8:2a:1c:a6:23:b6:09:c5:62:2e:
81:b0:5a:e2:48:b2:e7:20:9e:a1:c5:ff:c9:53:68:
7f:f9:25:5e:c1:e2:36:95:e9:2f:45:9d:9b:7d:73:
bc:47:8f:93:54:0a:00:e8:89:f0:65:9f:aa:72:e6:
1f:95:3b:99:64:3b:c7:fe:eb:23:55:81:27:82:47:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:C2:D7:E4:A8:B1:10:12:72:3E:2B:5B:99:DE:27:8B:47:6A:FC
X509v3 Authority Key Identifier:
keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:42:7d:9e:73:8c:2f:04:20:4d:f1:c2:87:f9:52:d0:a1:
a2:43:f6:6a:e9:cb:8c:cf:2d:10:74:4c:04:09:5c:5c:c2:66:
b3:b6:9a:b0:94:97:c2:3b:a5:40:3f:54:41:73:cf:a7:4e:36:
9b:58:c5:3f:d5:da:b1:f4:c0:2d:a8:0b:de:01:ea:ea:d4:28:
8b:70:4c:ca:17:c2:02:4f:7a:91:0c:0b:99:0f:a5:87:b0:21:
be:8e:58:1b:e1:47:cc:14:39:b9:d9:12:8b:c4:fb:6a:41:1b:
da:91:55:06:33:b3:28:32:41:80:2a:ec:c8:30:0f:14:76:57:
b0:2d:9b:d8:cf:09:52:af:21:69:77:e9:48:fc:aa:e2:1c:95:
0c:41:f6:83:db:1a:e1:44:83:e8:ee:04:7b:dd:55:7e:48:0d:
5b:b9:76:52:52:ce:23:0e:94:79:2a:4b:d5:dd:17:0d:93:e9:
f4:db:fa:83:36:d1:cc:78:6e:44:14:6c:56:1e:b8:10:2f:bc:
00:0a:5e:f7:b7:d6:f7:8a:ce:a2:4a:97:1c:0d:d5:4b:b9:ea:
9a:14:01:3c:85:62:bb:e3:60:23:97:49:e5:1b:11:4c:c7:ee:
1b:92:e6:4e:57:87:23:b4:08:98:59:16:5e:cb:37:9c:89:cf:
b0:39:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:31 2026 by rpki-client