Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: uw32hkzGG0UGcknK4KwcroOFuzq8n1oWhXKJI3X4ZXo=
Subject key identifier: D3:31:E4:4F:C9:CE:D4:6F:5C:33:FA:15:33:00:24:84:84:D6:12:6E
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019CE66D385D39A8F94868637F60928B0052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 032D
Signing time: Fri 13 Mar 2026 09:00:43 +0000
Manifest this update: Fri 13 Mar 2026 09:00:43 +0000
Manifest next update: Sat 14 Mar 2026 09:00:43 +0000
Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: HbAf0bTJllA55VdmHkdsEjgyCo86X9DFlwn5QGB2ioM=)
2: HTsrx9Wfp4NlogQqyGFERMCHjME.roa (hash: qUCFvpFwZ+rAEW4PKzOQClC2RRU+DPcjwot7U4Nm7cE=)
3: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (hash: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:38:5d:39:a8:f9:48:68:63:7f:60:92:8b:00:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Mar 13 09:00:43 2026 GMT
Not After : Mar 14 09:00:43 2026 GMT
Subject: CN=d331e44fc9ced46f5c33fa153300248484d6126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:ad:fb:d9:f6:78:2a:2d:db:e2:93:ac:45:
0e:3c:4f:b4:7d:83:09:78:57:bc:4f:4e:72:c5:d9:
14:2b:1c:f2:16:75:14:42:75:73:2e:84:d9:20:30:
8e:7f:b1:e7:6b:3e:7d:61:1b:1e:1a:d8:d2:c5:d5:
29:6f:36:90:98:31:36:ca:19:5d:bf:f2:c7:04:48:
ac:21:31:c9:f2:51:6b:cb:38:f3:18:ac:b3:56:d7:
bc:41:8c:b5:c7:92:64:f2:8d:6c:01:eb:82:4d:e0:
e4:0f:ea:1a:4b:31:fa:1b:cd:44:55:28:c8:9c:ef:
ae:8a:97:dd:93:14:ac:7a:45:74:0f:9a:fa:39:93:
92:ed:b8:73:5a:96:5c:e4:cd:8e:a3:98:59:e2:e0:
12:09:69:70:5b:2b:b8:61:46:79:2f:70:a6:9b:36:
e6:07:73:25:7d:20:0a:96:a5:77:2a:f3:14:cd:b2:
b7:94:c5:ad:2b:94:16:0d:3f:61:55:e0:a3:6c:12:
e5:00:74:20:2d:71:9c:d2:8a:20:18:68:26:22:22:
73:b3:f6:a8:1e:a0:9f:60:65:e2:b6:70:cc:06:18:
c0:28:74:ad:db:18:7f:bc:5e:ab:b4:cc:4f:93:b4:
96:ab:52:1d:d6:27:14:21:8c:c1:ca:ff:b7:02:5d:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:31:E4:4F:C9:CE:D4:6F:5C:33:FA:15:33:00:24:84:84:D6:12:6E
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:d0:7e:3c:21:88:fd:df:ce:d8:1c:b9:14:58:ea:c3:c8:
75:6b:52:5c:68:cb:a5:59:81:d4:e1:a8:01:49:54:0b:e8:cf:
2e:7d:b7:09:e2:16:59:e1:d8:26:09:27:06:c7:c8:49:d9:5a:
78:cb:4c:4f:c1:af:0c:f3:20:04:1a:aa:e1:3e:d8:52:3a:c0:
e1:6b:6f:fb:86:06:11:77:c8:14:7f:17:87:cc:ae:73:eb:71:
3f:be:03:7c:82:53:c1:25:73:39:0f:aa:53:eb:e4:76:43:0d:
df:1e:d9:13:d6:c1:c6:8f:98:09:38:fa:63:57:51:64:47:c2:
cf:49:28:56:c1:34:a9:10:92:70:7a:ca:21:c6:d5:14:2d:b7:
d4:21:83:c4:56:1d:44:50:f6:64:6a:c8:05:a7:45:ba:84:ea:
16:06:72:05:1c:3f:65:45:f4:a1:d0:06:96:8b:b6:12:0e:98:
b8:29:20:24:42:4a:93:2d:aa:22:57:86:1c:ad:6f:e2:ae:a4:
9c:f6:f1:03:e7:5f:da:4d:c4:99:e9:fc:6f:79:fe:aa:ae:3a:
b7:b6:6d:31:41:a4:0f:2d:c8:e0:84:30:24:1a:5c:6a:08:87:
02:d8:dc:d2:36:0b:49:3f:77:a3:ea:6a:03:69:2c:84:84:8c:
b3:a9:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:38 2026 by rpki-client