Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: +cKmh9JLoIwKmU8NUM3RWrrUSmoNWy7eOMYlRGo16hY=
Subject key identifier: 00:95:08:D4:D6:E5:A0:51:92:E5:05:66:25:15:83:15:A9:0F:42:62
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019D38D36CFFADCA089A210DFD89B1512222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 06C9
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: Cn7otlqrlBoH8eqplXyFDFxSHV0.roa (hash: KQg1ng+oRcwBjN4nRRG0LDNp+DR1AyFQwxX7EBSyZLI=)
2: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: meRScoseCEjWPszCHRixBLazOF5QRmAMLlGrSYutNOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6c:ff:ad:ca:08:9a:21:0d:fd:89:b1:51:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=009508d4d6e5a05192e5056625158315a90f4262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:80:82:03:fd:bc:0a:94:aa:6f:da:70:3b:
1d:5c:86:35:98:73:d8:c3:9e:c2:37:31:f4:a2:e8:
99:bf:50:0d:11:24:b8:04:d3:0d:c4:08:a7:a5:5b:
0e:a8:b4:be:d3:e4:60:37:b8:a0:02:80:9a:62:d6:
71:4c:b9:03:8f:45:01:dd:b0:e2:34:e8:dc:8e:d0:
d6:45:86:bb:26:16:e9:41:2a:a5:5a:4c:83:31:e2:
db:ca:7f:91:15:15:57:86:73:e0:d4:44:0f:e2:bc:
26:d4:28:11:3b:a5:d5:db:17:55:05:5c:ce:18:d7:
0c:d7:68:bf:47:c9:be:fe:26:3f:a0:ce:b4:83:ae:
9e:fb:c5:f9:88:1d:3b:dd:b2:3f:be:c9:3d:15:3e:
42:f1:8d:55:ec:5c:f0:21:89:3c:e2:10:51:74:14:
f0:01:43:49:d1:53:1a:4e:71:a6:c6:9e:5c:e0:67:
2f:c2:50:cd:c4:fa:74:85:0e:a0:49:e7:27:09:3f:
89:6f:a9:13:3e:c3:24:4b:77:6e:80:96:7f:74:ee:
7b:1a:34:5e:0a:a5:cf:85:64:d2:18:95:10:9b:bd:
8b:a4:da:b2:e8:ca:9f:a7:79:6b:f4:04:96:97:09:
8f:44:ca:0f:7d:84:05:58:8e:a1:34:17:df:72:5d:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:95:08:D4:D6:E5:A0:51:92:E5:05:66:25:15:83:15:A9:0F:42:62
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:92:73:07:e1:62:fb:af:24:52:43:7c:ed:52:dc:4b:57:81:
85:55:ba:cf:3d:59:76:b5:53:35:e3:2e:76:a2:6d:d8:a1:2b:
1e:76:e1:5a:09:d0:18:5c:67:49:b3:18:99:09:eb:42:70:8c:
24:cc:54:15:6d:77:d7:58:3e:56:ff:49:89:ca:d9:40:e3:64:
2f:db:72:75:b8:36:2e:c9:19:b8:75:50:e8:23:ff:6f:46:31:
18:50:4b:80:89:40:f2:64:ef:1a:ef:2a:af:81:4d:33:a6:c2:
95:6a:68:2c:eb:f7:4e:7e:79:5d:af:cc:51:77:22:c8:94:a0:
f5:e4:45:0e:12:08:c9:bc:0c:5e:bc:b1:28:f8:a0:02:52:94:
da:31:f1:94:a1:b1:e9:f7:8c:72:0f:50:c8:88:ad:4a:e0:a9:
56:0a:5e:b6:0e:f7:b7:64:66:1f:ea:01:d9:b7:80:2d:f3:d3:
8f:e3:4b:45:92:45:dc:3a:ed:6c:e9:1e:77:3f:3f:35:1c:06:
6a:68:b4:c4:da:81:65:9a:54:a1:0e:f8:3d:fb:9a:7b:2f:b0:
95:08:26:4d:f3:39:4b:9f:e6:50:04:7c:03:7d:30:e6:6e:e3:
fe:49:ca:ba:ab:0d:ff:e6:cb:50:95:43:4d:b9:5b:bb:82:2b:
36:70:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:36 2026 by rpki-client