Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: 22bgc1sytb8e7ygEt7h4jhxzRotvHl6Kn5X7jyz/9Zw=
Subject key identifier: 01:71:90:0B:37:32:38:27:F5:90:1E:26:3E:9A:FA:A1:AF:01:8A:9F
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019CE6DB1A7ABC6EB2477813F41F05D6A62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 16A9
Signing time: Fri 13 Mar 2026 11:00:44 +0000
Manifest this update: Fri 13 Mar 2026 11:00:44 +0000
Manifest next update: Sat 14 Mar 2026 11:00:44 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: v17XYGy8Jqeimy4oHkZnJrngK3UXw9QtDH1cIEkVOJo=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:1a:7a:bc:6e:b2:47:78:13:f4:1f:05:d6:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Mar 13 11:00:44 2026 GMT
Not After : Mar 14 11:00:44 2026 GMT
Subject: CN=0171900b37323827f5901e263e9afaa1af018a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:68:9e:7f:39:2d:18:e8:db:0d:84:94:f2:
a4:ee:6d:53:ca:56:e7:a7:b8:6c:53:09:61:b6:29:
f7:19:56:b6:50:fd:0a:8f:13:ab:2e:a9:9b:b6:93:
aa:5f:2f:a1:46:4b:71:b5:3c:c4:a1:bf:97:95:3b:
dd:81:f5:9e:1c:2c:17:82:e0:d5:bc:4f:2f:91:c0:
27:bf:9e:51:fb:ab:48:9f:13:f9:ee:bd:37:ba:18:
f6:00:35:8b:aa:31:be:40:a0:ff:05:b1:22:88:4f:
bd:20:29:1a:bd:96:60:d2:f4:72:23:e2:f7:3d:8e:
6d:c1:4b:6c:fb:0d:92:15:48:4d:2e:60:4b:3d:72:
e2:a2:60:84:60:49:45:68:3f:99:b4:1a:bf:74:b6:
2f:0d:64:71:d1:60:d8:c9:64:f2:ee:ba:3e:d6:95:
e1:b4:4b:33:12:14:f1:f7:b7:8c:00:97:64:64:3a:
0f:cb:2e:a2:f3:f4:07:51:72:51:fc:21:35:cd:4c:
9e:9d:53:78:bb:59:60:25:9a:0d:2b:65:cd:5f:c7:
7a:c0:eb:34:e9:4c:15:04:fa:95:a1:2f:59:e2:e6:
21:96:90:2b:0f:fa:a5:ff:7c:e1:46:aa:3a:1a:e7:
4e:c9:b7:e3:7b:c1:23:44:94:3e:8d:57:d2:82:b3:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:90:0B:37:32:38:27:F5:90:1E:26:3E:9A:FA:A1:AF:01:8A:9F
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:09:e9:d7:31:14:dc:0e:3c:ee:ee:b0:b2:5b:bb:37:c3:
cd:f9:97:63:4c:13:0e:66:4d:fc:2e:79:50:07:b1:8a:dd:75:
5a:a6:c4:07:0d:96:ba:3a:58:63:58:26:ef:ba:6f:2f:17:a3:
42:c4:aa:be:ad:d2:ff:e3:59:b4:53:50:ef:85:ae:bf:25:6c:
03:4d:b9:63:32:be:46:bc:4b:2a:3f:0b:5b:fa:80:b7:26:39:
de:52:67:33:e9:d5:db:b3:c6:3d:f9:88:d9:92:1f:4c:36:8f:
ba:0f:dd:af:e7:74:31:15:0e:b1:fa:b1:8a:53:e9:10:41:3e:
c5:a0:bf:91:64:f2:59:6e:11:d3:12:9c:c1:3b:8a:53:75:ec:
99:02:18:3f:7c:48:08:ce:79:ed:e7:5f:60:00:73:14:6c:a0:
9f:7f:48:ec:48:ac:23:74:74:d9:66:ea:95:3f:65:a9:aa:8c:
85:ff:aa:3f:39:00:51:e5:a7:c5:41:f7:62:3f:2e:4f:d8:4f:
0c:14:16:b5:72:57:68:55:64:b2:e6:b6:44:19:c4:5d:99:fa:
81:c1:fe:92:a6:33:f6:11:e5:81:95:60:fc:6a:bc:29:b9:cf:
c9:5c:06:a4:41:1b:8f:46:8d:53:ef:3d:a7:15:76:34:e2:73:
b3:54:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:36 2026 by rpki-client