Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: d0bZoqPITCCo60xYbLaKWyCObkLl9NnRAyTVQe8bh8w=
Subject key identifier: B1:24:CF:F7:17:2D:7A:D1:67:5B:8A:14:DC:E5:8C:05:B8:71:6F:91
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019CE66D42BAC8DFD7B623EC078B675959C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 1C
Signing time: Fri 13 Mar 2026 09:00:45 +0000
Manifest this update: Fri 13 Mar 2026 09:00:45 +0000
Manifest next update: Sat 14 Mar 2026 09:00:45 +0000
Files and hashes: 1: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: ZfTWOpHkLqqwgtr8qF+hwr/J25aWsYsUjgieDTtJZDo=)
2: k8zQtdqeD4eCbj4bxGVWhtUSVqQ.roa (hash: mGgxLJKpdU4bJS/C0UsU5pVevvLL/1XTeMzy2EPtfmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:42:ba:c8:df:d7:b6:23:ec:07:8b:67:59:59:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Mar 13 09:00:45 2026 GMT
Not After : Mar 14 09:00:45 2026 GMT
Subject: CN=b124cff7172d7ad1675b8a14dce58c05b8716f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:53:25:e3:49:4e:fe:e8:7b:b8:ba:fc:77:
96:c6:7d:c1:de:65:ab:45:40:76:e8:37:8d:be:e3:
e2:a0:1f:b2:95:37:77:10:a9:82:eb:b6:6d:e7:50:
1e:c9:0e:16:f7:6c:bb:8a:46:ac:b7:a8:9e:c8:7f:
40:b9:26:41:8d:2b:49:7f:77:8e:ba:23:91:3b:20:
8b:98:ce:4f:e4:19:b7:c0:93:cf:62:3e:f2:a7:bc:
59:58:cc:c7:bb:4c:3c:9a:f8:24:2e:b7:a5:04:bf:
77:4e:d0:b0:da:7f:bc:c9:2c:69:5f:f4:69:b2:5e:
68:0b:35:01:eb:24:28:48:13:29:ae:f7:52:a9:a0:
42:ea:6e:e5:ac:49:91:56:9a:82:3d:2d:0c:7f:91:
7b:f7:a7:8a:4e:e5:c2:a8:a3:01:b0:46:ec:b1:bc:
be:4f:f9:58:5a:01:0e:1e:e1:94:e4:05:24:19:7b:
bc:27:eb:9b:9b:71:ad:1f:b9:65:9b:e8:5f:58:03:
11:de:33:83:e5:8d:a8:9d:42:f5:eb:b9:02:80:1d:
e1:98:d8:ee:5f:29:5a:39:55:63:c6:e2:99:92:b4:
30:3f:20:f4:de:d0:65:74:26:ea:03:cf:d3:6e:0b:
cd:8b:ca:48:8a:89:4d:07:fa:61:c5:7a:8b:70:3e:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:CF:F7:17:2D:7A:D1:67:5B:8A:14:DC:E5:8C:05:B8:71:6F:91
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:13:e4:de:55:53:03:59:cb:44:0a:0f:15:de:e3:d5:8f:
95:a6:61:d4:14:9f:0f:5d:c3:9d:39:d1:e9:e6:c7:3c:1a:8c:
8a:e8:78:94:37:d3:a4:0f:4d:3d:37:0c:61:f2:d2:ae:4f:33:
5a:5c:49:c8:c6:8e:5a:8a:4c:c9:08:73:39:cb:ca:53:e5:8e:
0e:de:46:3f:30:e1:42:19:ed:81:dd:d4:c9:db:bb:ac:1c:f1:
58:84:64:92:10:3f:be:33:ee:04:be:de:e7:4c:2b:e7:b8:aa:
40:3f:e1:0a:2c:95:fe:77:75:2d:83:f6:1d:af:5a:1b:83:b7:
97:fe:1b:e2:f7:d4:00:c8:d6:09:d9:d7:d2:94:e8:14:54:c1:
05:8c:a4:da:6a:3b:8e:a3:da:df:47:c1:3c:1c:8d:13:47:5a:
f4:e2:f3:71:74:9f:4b:18:e8:c8:3c:f4:43:a7:cf:e7:73:ad:
8e:95:51:a2:f7:b3:4f:7c:fb:1b:95:36:8a:b0:be:d1:30:6f:
51:01:be:21:f8:c3:26:f3:30:b6:75:94:66:60:ec:4a:f7:96:
ac:c1:a1:8f:cb:a4:62:3f:95:ef:82:35:ab:a9:39:c6:52:9b:
2c:ce:bd:6e:50:55:3f:11:4f:6f:bd:f7:c1:b1:95:e0:23:38:
01:d3:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:06:17 2026 by rpki-client