Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File: 6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier: WUFPHCFlBF4PlMtD3Rnl6ZVJthlk0SHckH7W5EtBNgY=
Subject key identifier: D8:2A:C3:6A:37:8B:F2:75:54:EC:7C:44:68:E1:D2:84:FC:D6:40:68
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer: /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial: 019D37C0C286B41F9C669E9424D28ECAD5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: QSipy0Shgoc36CZO318kZ4S4W/gWl3MwRxfyS+0Enz4=)
2: E7EPHRS2n8zUbGI8ks5uEiC9Nko.roa (hash: N80eNVaLMbcNwKhaF5bXs2cowcGND/P7WCKPbfCbeo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c2:86:b4:1f:9c:66:9e:94:24:d2:8e:ca:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=d82ac36a378bf27554ec7c4468e1d284fcd64068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:81:bc:85:31:c6:14:7a:00:ca:e5:5b:c0:
22:5d:85:d4:ac:e4:2d:32:31:e9:52:69:8a:a0:bb:
31:01:f5:7a:17:ac:52:71:c1:a7:78:ab:67:ff:be:
99:c9:ad:fe:55:0c:a4:10:08:17:7d:40:a5:00:f6:
2f:21:e4:d2:9a:4f:ef:cf:d9:ce:7d:dd:8a:ea:a2:
89:43:21:66:0b:ff:f5:cb:59:9b:ca:bf:4a:10:d8:
68:67:0f:c5:18:81:f7:91:32:ce:31:51:06:6f:4b:
09:b9:59:1b:ec:2a:7a:d0:63:0c:ca:8e:79:d6:9d:
3e:43:00:cf:3b:7a:d6:db:cf:4a:36:bb:44:b7:27:
4a:49:3f:4d:d0:7f:a0:ee:4b:50:9a:0d:63:5a:fd:
a6:71:e9:46:70:03:0b:e8:c1:3e:13:0f:26:8a:3f:
bb:35:a0:aa:e9:24:af:92:35:8d:2d:5b:98:39:c6:
ca:6a:0d:5c:9c:5e:cc:ab:0c:bc:36:be:bc:33:04:
77:24:5a:8f:fc:0c:7f:c3:3a:e1:dc:1b:cc:b0:d3:
1b:e0:aa:3b:a2:ba:f9:42:ba:ed:6c:0d:fb:98:f7:
83:c7:b9:7f:bb:e8:7b:75:78:93:49:00:fa:e9:09:
c0:8f:72:9c:37:dc:60:c5:0f:ac:0f:0c:80:e6:ba:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:C3:6A:37:8B:F2:75:54:EC:7C:44:68:E1:D2:84:FC:D6:40:68
X509v3 Authority Key Identifier:
keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:8f:8c:f4:18:89:53:12:52:44:12:62:a0:87:37:f5:28:
40:12:4a:35:46:6e:9c:0a:43:cf:15:be:ba:e3:b6:c2:a8:41:
76:7a:d6:5e:fc:4a:0a:d6:32:ec:b6:ee:89:c4:cc:8f:7e:dd:
0d:7c:46:59:d1:a2:c9:02:01:8c:84:62:21:ab:91:37:2e:61:
b9:57:7e:a0:0a:8c:72:05:bd:63:8c:74:30:d6:e2:69:f9:2f:
fe:17:79:84:e1:c6:9d:95:ce:f7:09:c7:49:37:b7:cd:5b:d2:
a2:26:58:a7:cb:5a:e3:cc:b3:2a:71:05:e0:ad:83:1c:e4:82:
ed:63:23:11:38:16:40:8b:66:24:e3:db:2c:a8:66:da:d3:a6:
10:bc:49:42:60:dd:ad:98:14:70:b9:07:58:7c:99:0d:1d:80:
9d:9c:6c:78:2f:c3:34:ea:e5:1b:63:f4:12:d0:c0:71:11:2d:
db:33:1c:52:28:09:d3:5b:ce:40:54:6c:87:3f:32:56:03:35:
b2:ca:6c:26:a3:d3:15:92:be:21:8a:50:11:53:d7:f9:f4:fc:
f2:cc:ba:c9:44:aa:dd:ec:2b:bd:80:0d:7f:ea:a5:ce:e8:28:
ae:ca:06:73:0e:04:46:8c:6d:14:d4:1a:f6:c9:78:bc:3d:a3:
80:63:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:25 2026 by rpki-client