Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
File: dg6-87rwwTdAhVCVOQhSzkQlzkw.mft (raw, json)
Hash identifier: Prg9Hl20xiuYYCgzJeqqJmExVizlN47SlEwARR0L+Gs=
Subject key identifier: A3:7D:38:AE:84:F9:05:73:D6:BD:9F:C9:DA:58:DE:D5:DE:75:2C:8A
Authority key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
Certificate issuer: /CN=760ebef3baf0c13740855095390852ce4425ce4c
Certificate serial: 019D389BCEA45A12DCAA9AC1628D13D5DF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
Manifest number: 0216
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: dg6-87rwwTdAhVCVOQhSzkQlzkw.crl (hash: y/skeP5X5AnTpNLjcFt76ZoFl9WmISygjW5OzgtwuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ce:a4:5a:12:dc:aa:9a:c1:62:8d:13:d5:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ebef3baf0c13740855095390852ce4425ce4c
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=a37d38ae84f90573d6bd9fc9da58ded5de752c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:d3:1f:f7:25:10:2f:48:0b:b5:6f:14:f1:
0f:41:bf:9e:2a:4b:43:a5:fc:03:84:f2:38:f6:08:
92:8b:4a:94:23:58:81:4a:cb:32:26:33:43:0d:02:
af:ba:90:b8:56:9a:ef:5a:1b:29:c2:34:5a:93:c0:
db:ca:d2:c7:2d:50:8c:78:07:3c:6f:42:c1:d0:00:
ce:70:1c:8e:3a:f5:4c:e8:df:90:97:27:7f:01:bc:
84:47:9b:0c:b1:5c:11:62:56:7f:5e:b9:52:d7:dc:
b1:b2:0c:46:8b:d7:17:eb:d8:db:f9:cc:8b:03:bb:
98:3e:1d:93:cf:21:ed:65:8c:b3:3a:84:ad:2e:8b:
ff:58:56:85:a6:43:ab:0b:d0:8e:01:a0:1a:b3:78:
e2:86:60:5e:e9:f1:9f:2b:24:fd:52:ca:e6:f2:b0:
64:8c:cb:1b:fa:1e:f3:6c:d6:2f:e0:35:d8:14:ce:
e7:59:66:4d:14:a3:29:16:95:5f:9f:1b:c8:1d:0f:
6d:9b:0d:c9:8f:05:d9:a6:8f:12:77:7b:8f:ba:bc:
6d:86:a3:69:d1:44:c0:37:e9:44:79:86:4f:4c:3e:
2e:ce:1a:65:49:d4:69:4c:36:d8:95:8a:c3:ef:0e:
0e:18:bb:69:6f:35:c9:36:08:1d:9e:fd:36:aa:f6:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:38:AE:84:F9:05:73:D6:BD:9F:C9:DA:58:DE:D5:DE:75:2C:8A
X509v3 Authority Key Identifier:
keyid:76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:c2:86:dd:72:fc:74:25:9d:76:3b:53:c7:d0:00:ee:e0:
e5:3b:12:cf:f5:03:32:0a:86:eb:ec:e3:dd:0b:cc:81:e0:37:
67:25:4c:0c:6c:78:4e:1a:9c:56:51:0e:45:ed:03:96:9b:2d:
b5:68:a1:17:0b:bc:20:87:24:78:c0:fa:4d:cc:ec:61:ab:e1:
b2:d7:59:df:37:84:4d:3e:e9:4b:f7:b1:1c:2e:b3:7a:29:9e:
22:fc:3e:ae:19:d8:bf:83:a9:7f:da:45:e4:9f:3a:0f:12:83:
a7:0a:e2:fb:f7:88:7e:b5:55:f2:32:e4:90:ea:21:90:47:5c:
cb:fa:8e:e4:8e:4c:49:10:cf:72:b3:6c:01:66:e7:cf:06:7b:
d6:8f:29:2d:85:39:27:64:4b:75:b5:ee:d7:78:f0:0f:9e:98:
ca:28:c8:5c:55:bf:6a:e5:4d:31:9b:6f:b7:45:a6:c2:4d:2f:
da:27:2e:fe:17:2f:a6:82:14:ac:8c:ca:4b:10:61:fa:a1:ae:
c9:75:45:56:23:80:60:fa:7f:e2:69:d7:07:0f:1d:89:11:a4:
13:e8:1c:71:64:48:9f:05:13:60:3b:8a:53:6d:33:75:9e:03:
11:83:48:59:27:7a:19:14:b9:cb:3c:8f:5f:dd:11:92:45:47:
44:4c:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:35 2026 by rpki-client