Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: uQrInBoKEbK208krsQDg+EffxxTqF4YLDtkX4iAHuQk=
Subject key identifier: F3:EB:4A:1D:97:34:E8:EA:7C:92:4F:F9:1B:3A:5D:34:F4:28:0D:AF
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 019D38D2D9749CA2ED87A4AC6777F596F26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: Ql24O+zNGA9RZny8CWDsDaAwtmx1BslZ534J/TEEyj8=)
2: EQUgl00EZFitLJ6oysydLWzSpDI.roa (hash: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw=)
3: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d9:74:9c:a2:ed:87:a4:ac:67:77:f5:96:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=f3eb4a1d9734e8ea7c924ff91b3a5d34f4280daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:c1:ca:2b:d6:5f:24:66:f1:7c:97:49:db:
c1:a7:3b:14:61:36:f9:d0:48:74:72:71:f7:8b:d6:
7d:c1:eb:17:b0:91:3a:5e:0a:6b:c5:68:82:25:2c:
90:4f:ba:73:1e:fa:ee:ec:48:9c:c8:79:d7:d4:8e:
b4:c5:57:bb:1b:d2:39:e2:12:05:16:0e:0a:d6:21:
a4:c1:04:54:41:30:7a:15:0e:13:34:72:3c:b5:46:
fe:97:65:3f:2e:fb:00:dd:84:ad:16:37:74:92:40:
97:a5:1c:e0:4a:e9:6a:f0:20:40:e0:c7:ff:a7:f1:
93:79:da:c2:db:bc:93:ab:0d:c5:d4:fe:50:18:c5:
55:a7:83:25:29:47:f9:62:55:f6:b9:c2:67:a7:f0:
d9:76:90:65:f7:23:b9:2d:3e:5e:40:40:91:0c:a5:
1c:4d:b4:17:e7:f6:6f:57:66:55:47:37:0f:dd:39:
fe:d3:89:09:dd:4f:98:54:50:cf:a7:47:63:1c:15:
96:ce:23:63:d2:bc:19:90:9e:26:3a:d1:1c:31:2a:
f7:d2:20:07:0b:3f:87:c7:b9:71:d2:93:39:81:8f:
47:5e:23:89:08:6c:7a:ff:2f:5f:55:e4:74:1f:f9:
b8:34:2f:62:07:c3:09:d9:16:5f:17:b3:b4:5f:b0:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:4A:1D:97:34:E8:EA:7C:92:4F:F9:1B:3A:5D:34:F4:28:0D:AF
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:71:30:c4:de:21:da:c6:4d:ba:42:2f:0a:23:d3:18:74:
88:d6:e8:d9:98:e3:2b:ae:a0:2f:de:da:b4:e4:98:82:31:23:
85:08:33:65:67:c4:7d:90:56:b8:22:5c:68:bc:99:7a:ea:83:
9e:35:c0:f9:8a:0e:d3:92:2e:83:46:81:b5:5f:56:4f:b1:f7:
f9:ae:03:0b:cb:92:14:aa:3f:50:e1:2a:f1:29:d5:f8:11:78:
38:d4:f0:98:f2:52:79:2d:6f:06:30:df:aa:62:bd:7f:09:04:
d6:ea:66:3f:cd:bf:b7:42:60:8a:85:90:49:cb:19:57:d0:9b:
ad:27:24:91:65:3b:88:b6:fe:ea:48:31:38:0f:31:4f:82:bd:
b2:85:f7:26:44:a6:4c:b0:3d:2d:09:8e:43:00:23:69:ee:20:
24:e1:27:b1:c0:46:34:3a:94:c9:7a:38:6e:fa:b7:58:b2:1e:
84:52:9d:e2:6c:4c:12:dc:22:38:56:40:ec:ea:52:3d:63:ab:
7d:ce:58:07:cf:c8:27:02:e1:e8:d2:43:33:3f:de:c5:41:a6:
7b:76:5c:9b:25:97:b6:21:7d:8a:8f:3b:30:c7:5d:de:90:d5:
73:3f:1c:81:7c:d0:2d:59:41:93:db:03:b1:fc:a1:28:a5:44:
6d:83:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:20 2026 by rpki-client