Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File: jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier: QQIezZCbxed4pVCbKfF/3Ev1lOXTGRAC+6q/IDDE/v4=
Subject key identifier: 00:D6:B3:3B:41:B2:32:C7:F7:F5:B1:42:0C:37:25:18:B4:87:3E:C0
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019DD0BEA6C8EC556ECED10C9C62190E01CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number: 0206
Signing time: Mon 27 Apr 2026 21:00:48 +0000
Manifest this update: Mon 27 Apr 2026 21:00:48 +0000
Manifest next update: Tue 28 Apr 2026 21:00:48 +0000
Files and hashes: 1: 85WCcONItIMRuSMaOxRM44ohzIg.roa (hash: /TIQDAXeA50QelIx61Q5b/Z25D6OyfrLynQ4VaudkRU=)
2: eJxTub2nURvlz2j40yWd1xTSiqE.roa (hash: QGoAgA9UwHv2M3PrJjmaC35k17I6lqvqOagw7/jlHdU=)
3: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: wtPgiXw7863J63qksmj7MkYid6xzaknsACrSyqxph2o=)
4: rA6VNsR6jroVmSktiBRw1rIhqrU.roa (hash: wXe4q97uD3eOmJG7Qhu7qR3Oh0Q+VQy4RtGB+wIv/0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:a6:c8:ec:55:6e:ce:d1:0c:9c:62:19:0e:01:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Apr 27 21:00:48 2026 GMT
Not After : Apr 28 21:00:48 2026 GMT
Subject: CN=00d6b33b41b232c7f7f5b1420c372518b4873ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:ec:9e:f7:fc:ba:14:33:0d:de:50:95:69:
4d:15:a6:28:71:8b:ae:60:b1:d7:45:3d:24:e3:6a:
f6:1b:51:a1:99:05:a3:94:83:1c:e4:ab:15:74:12:
ea:d8:b5:1a:cc:7d:83:10:af:00:71:1b:35:de:39:
5b:85:5f:b3:c7:b4:d3:98:90:63:52:b0:dc:0c:e6:
1b:1e:8d:83:09:91:a6:12:07:bd:c1:53:9f:59:14:
c2:a7:2e:d9:3f:94:df:eb:f1:a9:a3:c5:0a:b6:b1:
e1:db:93:be:ba:33:53:3e:4f:cd:f6:d8:6d:06:23:
98:29:ef:23:1f:ec:91:63:bd:f7:39:73:ed:36:4d:
2f:1d:a2:32:d5:b6:47:99:43:7b:0a:b7:8b:64:10:
db:d7:67:85:d7:f7:8a:a7:9f:d9:13:e1:0e:fb:d5:
2f:72:f3:d7:04:1a:ba:85:81:70:0e:a3:5c:c9:75:
fa:ee:d5:dd:cb:4d:bb:78:48:dd:6a:db:1d:59:4b:
d1:68:3e:f6:58:95:9e:c4:d9:7d:b3:58:32:4f:59:
64:ef:ce:08:77:c7:8f:17:09:61:a7:92:39:3e:df:
fe:45:b7:de:cc:4f:19:8b:81:9f:07:34:dc:59:7e:
71:21:4f:5a:82:66:37:fd:56:10:0e:9f:be:c9:d2:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:B3:3B:41:B2:32:C7:F7:F5:B1:42:0C:37:25:18:B4:87:3E:C0
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:a6:0b:14:0b:65:4a:43:46:a8:ce:43:5a:43:8b:09:1a:
cc:c5:87:98:d5:e5:83:2e:18:4d:80:42:3b:c8:66:04:4b:50:
f0:77:97:9c:b5:32:53:2a:32:45:76:68:ab:36:ac:ac:a5:bb:
b3:dc:d2:c0:98:75:ef:7f:0f:90:c7:99:42:ea:0a:57:eb:28:
e8:8c:f0:26:02:48:15:b1:d3:c8:bf:0b:ac:8d:dd:23:59:40:
56:86:5d:69:5b:ea:63:10:05:35:cf:2b:30:73:0d:59:92:46:
bc:e0:56:5b:c5:24:81:ae:c9:98:2c:8c:0c:eb:70:a4:f1:47:
22:c8:c3:66:ff:be:61:6c:b8:c0:e4:51:a4:fb:66:73:54:f0:
c5:06:76:ec:86:c6:70:f3:ac:57:5c:e4:7e:39:e4:93:64:e3:
f4:ec:a2:38:1d:9e:c7:84:d3:58:e6:de:56:02:af:0a:91:e4:
b9:0a:8f:00:85:56:30:ef:c0:62:de:ca:5f:ce:14:e3:83:60:
2f:1f:33:f5:82:11:47:f7:97:8f:a5:21:c3:53:df:c4:69:6d:
ca:7c:0b:ee:33:c8:68:49:66:b6:b5:ec:78:7b:24:2c:94:90:
16:69:ef:69:57:b3:6e:df:50:75:be:d6:2a:d1:ad:d9:cf:c1:
6e:1f:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:15 2026 by rpki-client