Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: 353/d0LTlEx5KMbeyq5TNYN0SI6Q2IO4Qi6NEtx9G+E=
Subject key identifier: 37:97:E0:6C:62:61:BA:4E:E4:DE:C4:B3:86:17:7B:7E:62:B9:69:0E
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 019D38D2FC9541C71C9BFBEC79689008DD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: H+62PXQDN52qioiMh6ipX7S7WHCIS2ZRuPTX/an2CT8=)
2: yOtgoQUSDDTF6dzBLbgn19zbD20.roa (hash: FLmTb8uB8aThQGwMLCsGAZe9JiC1Qd3BPfuyYTN+2do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fc:95:41:c7:1c:9b:fb:ec:79:68:90:08:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=3797e06c6261ba4ee4dec4b386177b7e62b9690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:db:0f:c3:c0:67:7e:db:a3:67:b6:77:37:
37:69:b0:a8:95:b0:a7:c0:4c:d3:ce:df:10:13:80:
73:7c:5d:24:b4:1e:67:2e:10:e9:26:a7:a5:c7:d1:
20:26:4c:89:50:d0:24:31:cb:d2:4e:95:e8:67:8b:
5b:d8:3c:3d:17:f9:d0:37:59:4d:62:97:a3:8a:60:
93:87:42:3d:7d:a4:51:75:36:65:83:c4:64:e3:d6:
e0:5f:7a:6f:5a:c4:0c:ef:09:60:b2:fb:01:55:40:
ee:c7:1e:2f:0d:3b:e6:d8:7e:84:05:37:94:00:9d:
6f:e2:50:88:90:c4:90:de:5b:05:e8:37:f1:62:10:
b2:7b:ec:cf:c0:f5:04:12:66:82:a9:1b:08:05:eb:
ff:80:f3:9f:7d:0c:9c:ca:6e:ff:fc:70:1a:05:b3:
a1:80:a2:48:bc:c5:11:b5:30:0e:2b:4e:6d:77:11:
c2:26:15:8e:2f:8b:d0:2b:2f:ce:65:ec:df:e4:6a:
bd:8d:0a:d1:a5:3d:a8:de:7d:e9:0b:4e:1e:97:cd:
5f:0f:6c:d2:4e:fe:87:f9:33:ec:fc:07:40:9f:c4:
c9:64:90:f8:82:d8:e2:0a:72:98:de:c0:24:4d:27:
33:11:f6:25:03:b1:51:72:ee:ca:ca:32:65:08:83:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:E0:6C:62:61:BA:4E:E4:DE:C4:B3:86:17:7B:7E:62:B9:69:0E
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7f:98:c8:c0:b0:33:9d:97:48:66:59:33:39:e3:12:00:33:
86:03:62:ca:a2:bd:e7:33:e4:cc:25:56:1c:9f:47:36:2e:a4:
a7:2f:38:4b:a6:75:c5:28:7e:49:97:63:07:06:58:0f:46:db:
50:12:f6:19:bf:83:39:1b:e7:0a:04:c8:d1:e3:53:f3:2d:57:
cf:f0:29:7b:6f:85:e0:90:1e:67:ed:ed:47:89:3f:94:95:f9:
d5:f8:e1:d8:67:13:1c:6b:20:7b:0b:0e:26:5f:ba:f0:d5:37:
8b:4e:29:22:ad:13:d5:0d:f1:96:99:56:a6:7c:45:41:9c:71:
39:5d:29:a6:ec:ff:cb:17:a3:4e:fd:da:57:6f:2f:b1:9e:cf:
1d:9b:b5:e6:1a:ba:33:07:dd:b1:53:b9:b3:45:ba:37:f3:14:
48:83:0e:08:34:36:2f:42:f4:fd:b4:47:14:a8:7c:5c:2f:0f:
a6:f0:d5:4c:5c:b4:31:58:ae:9b:32:94:0b:c8:8e:f3:b1:ff:
2b:66:ba:8f:e2:c5:76:83:fb:19:20:b0:2a:80:47:56:33:4d:
55:4b:3b:00:12:bc:0a:e9:7a:c9:3d:23:47:f6:7c:af:d6:20:
c1:99:55:6f:b1:6d:72:09:90:ae:8e:2b:a2:b3:88:b8:72:4f:
36:47:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:58 2026 by rpki-client