
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: IUTADUe+BmMaZp6nMoOGJuIfv1U0PvUPjADq6iLxrCc=
Subject key identifier: 6E:07:AD:9A:46:00:8B:B8:C1:7A:F6:AD:E2:FA:1C:4A:1E:2D:6C:3B
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 019D3909C97C07BF90B7C6CE068354119672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0F24
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: OVj+vZPadsJbJpLCFHZSXNcvDsIS3R/C3nbEKCX+qrc=)
2: y8Oc_jilp32EuFWNU56uzsG240A.roa (hash: m5FeXXz3diMHtUorIoO4JI5zdoSfwpDlGCnUqxC6c0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c9:7c:07:bf:90:b7:c6:ce:06:83:54:11:96:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=6e07ad9a46008bb8c17af6ade2fa1c4a1e2d6c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:94:a4:2f:01:c9:af:d6:d3:0d:55:d3:1c:
66:ff:9f:bf:83:5a:84:dd:a1:d2:9a:bd:28:f6:01:
12:ab:05:65:1d:9f:45:61:ef:d3:4d:b6:9b:93:3d:
38:05:06:22:da:c2:a5:f5:1f:6d:4e:42:b7:e4:a2:
f3:b8:6a:e6:74:58:83:a4:01:b1:51:f9:a9:d1:8b:
9a:3e:bf:f4:79:a6:39:2d:48:b4:c1:f3:0e:04:f4:
4d:1f:7f:c1:70:45:2e:69:1d:0b:c6:55:ee:f6:94:
2f:0f:d7:24:b1:c7:b8:1a:6f:a6:b1:6d:84:5b:b1:
9a:c2:02:98:8e:5c:72:19:81:46:50:9d:6f:a4:1e:
18:8d:01:82:1a:0d:66:3f:77:38:b8:0e:8b:de:cf:
34:f4:fd:02:ad:fe:26:f8:c5:37:f9:8e:f1:b1:9c:
93:6d:6d:4c:87:e8:44:f3:b1:ba:f9:d1:c9:cd:bd:
44:b1:b3:67:4f:03:6b:56:b2:2f:49:90:ea:21:c0:
6c:32:e5:32:e9:0d:8e:0a:d1:88:53:aa:9a:18:43:
97:a3:4e:45:20:4c:5c:9e:83:30:14:1f:96:26:70:
9e:43:2d:de:bc:8e:55:4f:d1:b3:95:95:96:09:69:
fc:e4:57:10:1a:e1:7f:c8:a4:b5:72:a9:09:1d:43:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:AD:9A:46:00:8B:B8:C1:7A:F6:AD:E2:FA:1C:4A:1E:2D:6C:3B
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7f:0b:2c:ac:68:b9:4d:49:6c:32:6a:51:bb:79:c5:62:27:
e9:3c:5d:48:3d:ce:14:de:fc:82:b0:72:e3:00:8d:5a:61:ca:
55:30:1a:88:09:de:42:26:c3:1d:f8:9c:9c:db:88:43:21:20:
f7:e8:a5:7e:18:4a:cf:9f:28:5e:ce:9a:c7:12:a3:b0:0c:34:
ea:45:d7:3d:b0:85:ac:06:d8:b5:47:e2:1c:44:d7:59:2e:94:
67:1e:0e:ed:76:b2:de:c6:30:a7:9c:c8:cb:78:f2:ac:75:9d:
43:25:a9:19:91:e8:a7:12:b5:3c:28:34:33:70:88:6d:11:fc:
e6:97:ac:d3:a5:1c:66:35:14:0f:5a:7b:9c:22:13:97:e2:a6:
0b:dc:d8:b5:de:76:41:26:3e:95:34:96:3b:8a:80:bd:a4:7f:
dd:e4:2e:e7:b6:f8:6c:c9:c1:db:f1:32:fd:8e:88:de:44:27:
b9:af:aa:50:75:0b:be:57:4e:1a:2f:fe:05:39:a1:6e:12:17:
18:89:cc:ea:78:24:d9:92:34:bc:e7:7f:4a:97:6c:64:9f:97:
05:0f:18:3b:9c:8e:fc:64:a0:0e:aa:11:22:83:75:79:8e:23:
e4:52:16:24:f1:60:fc:d8:8c:a9:81:57:95:df:a0:44:f0:1a:
c4:8d:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:16 2026 by rpki-client