Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
File: _6_prvuHuuoh5EJdR7EZlr2x4o4.mft (raw, json)
Hash identifier: dzcku2cpPspBnztHHaTwF40s5rJVujOVtCmRT8c60EU=
Subject key identifier: 23:B6:6A:7B:E3:41:B0:40:68:51:BB:62:CD:42:80:67:24:16:F2:1E
Authority key identifier: FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E
Certificate issuer: /CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e
Certificate serial: 019D38667619D5E607815935ABBEEB6881B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
Manifest number: B9
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: C90AW3XegIArf-bNcNOqfY75gXw.roa (hash: oo8doFg3P1HFO6bcCo29StzUxxdgsNyQretz+OB8VTw=)
2: _6_prvuHuuoh5EJdR7EZlr2x4o4.crl (hash: 1Xk6s4Lvupo84XP1X+8iK/2N+BtRKV8d5u4BrRh85dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:76:19:d5:e6:07:81:59:35:ab:be:eb:68:81:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=23b66a7be341b0406851bb62cd4280672416f21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:1d:2e:39:37:ce:19:d8:a8:6c:78:6e:e8:
9d:7f:cb:65:5f:9d:06:8f:cb:a8:9d:ed:6d:24:03:
94:38:a2:a7:eb:aa:c4:e8:bf:8d:47:33:77:2e:3b:
b4:87:3a:04:66:7b:b8:a0:77:90:64:84:57:30:f8:
b7:42:5f:25:96:91:fc:6e:54:46:da:45:65:b3:7d:
94:f3:b0:81:43:a7:8b:0a:f2:99:1b:0c:d2:2c:be:
87:a1:c5:cc:4f:0d:57:d8:02:92:e8:00:36:bc:44:
38:ec:52:b5:65:a0:53:70:7d:d1:e9:82:6f:ec:d1:
9f:1f:e5:3b:76:ee:b1:e8:c7:09:2b:9e:bc:48:02:
06:b9:aa:13:ee:7a:2d:17:b1:91:41:ec:fc:8d:b0:
99:02:de:27:15:4d:5f:2e:01:9b:2b:c3:04:22:27:
64:aa:94:bf:01:01:c6:f8:4a:af:f0:9c:b1:65:c7:
96:32:86:9b:b0:aa:ed:ef:75:f4:48:95:21:81:6c:
20:c3:db:dc:3c:da:8f:43:5f:3d:40:39:1a:32:98:
df:32:cf:47:8f:49:b6:75:eb:01:fd:15:af:24:79:
c8:8e:f0:3d:04:ec:e8:d8:a4:6b:72:1d:88:c9:53:
32:bd:c9:97:e2:79:0d:e4:fc:53:2e:02:c3:ab:51:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:6A:7B:E3:41:B0:40:68:51:BB:62:CD:42:80:67:24:16:F2:1E
X509v3 Authority Key Identifier:
keyid:FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:df:cb:d6:cd:7c:fc:bc:c7:4d:fe:9a:88:1b:39:c7:e5:55:
8d:6b:fd:7e:17:c6:6b:da:f0:d4:19:0d:2a:54:74:3d:9b:2f:
c8:2f:0d:ea:f4:85:a1:b7:cc:92:d3:c5:a5:94:0d:8b:a8:1d:
89:4e:a0:b3:c8:b8:03:9a:39:96:2e:c1:7a:f4:d5:4d:50:8c:
b1:c0:a2:71:1d:06:98:19:be:06:e3:b9:38:b7:ea:d2:40:ef:
bd:c2:79:d8:65:b6:e8:bc:63:67:c8:6b:d9:48:ff:20:32:77:
21:55:9d:07:bf:02:40:61:dd:e1:7c:89:ed:3d:4c:f4:68:90:
46:ef:0d:de:a0:87:a7:8c:5c:c7:cd:5b:60:c3:05:46:19:63:
10:45:0f:e0:48:18:51:d8:1f:9e:28:c6:97:3a:e5:71:49:fc:
11:b6:1f:78:a0:6d:92:07:d1:ae:08:be:b6:ac:cb:aa:49:8c:
c8:53:8d:64:8b:1f:a4:d9:b8:52:bc:49:c1:61:e8:c1:ab:12:
e7:b2:28:6c:59:92:07:97:8a:b3:bc:38:8c:5b:9b:89:cd:11:
69:11:6b:20:69:89:12:2b:9a:44:e4:48:eb:ff:73:ed:ae:55:
1d:af:09:b2:7b:41:73:23:6e:f2:8a:5c:44:cc:72:e9:2c:b9:
8f:e9:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client