Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier: FEKoKMQ4ol8jsjyiiwxiFbIW399U2uUtUiRRHHZ0KNw=
Subject key identifier: DC:13:72:67:A0:A5:DC:30:D2:3A:B7:51:E1:64:36:39:B7:44:18:D1
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 019D37528EF912A2634AB5D292A2E9841F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number: 0FC6
Signing time: Sun 29 Mar 2026 02:00:50 +0000
Manifest this update: Sun 29 Mar 2026 02:00:50 +0000
Manifest next update: Mon 30 Mar 2026 02:00:50 +0000
Files and hashes: 1: 202qM1rsE239uIdAcf__Gnv7zdc.roa (hash: ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=)
2: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: oqLwMSmBThrv8+JJFdazGbKhu2bIFPffxg3Bgg9KRt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8e:f9:12:a2:63:4a:b5:d2:92:a2:e9:84:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Mar 29 02:00:50 2026 GMT
Not After : Mar 30 02:00:50 2026 GMT
Subject: CN=dc137267a0a5dc30d23ab751e1643639b74418d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:d8:52:99:47:bb:68:02:11:2d:f7:ab:da:
f3:3c:8c:c1:72:17:bc:50:6e:5f:85:d8:09:e7:82:
c9:d5:ad:3b:a9:cd:77:85:a9:40:fe:2e:ec:d1:25:
b8:be:41:45:e8:2e:f3:25:0d:a4:27:9f:d7:54:08:
7a:9b:b2:40:1b:a8:6b:4b:8e:1a:3b:ad:09:f4:4d:
b3:37:a0:2d:73:39:f7:8c:ed:b8:66:14:d1:78:48:
42:8f:13:2b:59:d9:bd:b0:0c:24:2b:22:d6:93:48:
f9:ab:9d:a3:54:b5:4d:41:58:45:36:93:fd:61:dd:
f2:0a:1e:8c:6a:50:3a:09:99:6d:0e:39:4d:de:12:
c3:dd:f1:52:4a:b5:af:10:33:02:1f:5f:01:df:a9:
2a:0e:7b:01:20:23:34:c4:51:5a:f1:35:7a:3b:c0:
3a:a3:cc:64:b8:f6:12:2e:a6:0a:d9:76:5f:d1:2e:
13:00:48:c0:44:3f:b1:b5:f8:dc:68:8c:ba:f9:74:
16:fb:6f:75:05:80:96:3b:09:26:a0:2c:44:e4:42:
7a:60:90:85:57:7e:b9:06:84:fc:27:31:d7:27:9d:
0b:72:22:ac:88:92:c9:aa:28:8b:7c:c2:af:da:6f:
a4:34:c8:e8:b1:6b:b6:d9:f0:cf:da:29:ba:2a:47:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:13:72:67:A0:A5:DC:30:D2:3A:B7:51:E1:64:36:39:B7:44:18:D1
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:50:f2:a0:9d:81:67:2f:5f:a3:0c:25:2c:ab:5a:60:cf:f7:
19:8b:79:df:5e:e3:68:0c:5f:67:85:2f:1c:f9:fc:e1:15:5c:
90:ca:00:72:7b:12:0e:4b:8a:1c:64:b2:b0:3f:dd:2f:da:72:
9a:4f:9e:31:67:5f:a3:c0:93:7e:12:3e:e9:97:82:7c:0e:bf:
7e:a9:3b:2b:7c:0d:5e:76:ed:d6:6e:5f:ff:4e:90:1b:7e:d1:
20:63:aa:94:da:a2:99:be:d1:f6:33:a9:eb:44:18:14:5e:6c:
ba:d1:cf:e5:84:f2:d3:d6:eb:bf:27:3e:ee:a4:86:94:2e:9d:
98:ec:a4:4e:d1:97:91:c8:21:9d:20:80:25:fd:29:59:3d:52:
ad:b9:e4:95:13:27:53:42:cf:69:a6:0a:d9:2e:40:ae:bc:1c:
e9:85:80:85:ed:d3:f7:27:4d:0b:0b:77:b2:a5:91:4b:1f:19:
96:01:5d:67:4f:bb:3d:55:48:b9:bc:7d:8b:73:8d:90:c9:9b:
cb:42:68:cd:09:aa:ea:f2:be:1e:ae:e9:c4:f4:4b:ba:0c:48:
4b:6a:14:1d:fe:77:b4:3c:32:89:c8:f5:7a:d6:e9:6a:f1:5c:
71:95:53:ab:6e:9b:69:8b:3e:9b:50:21:df:9f:1c:b7:00:9a:
08:65:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client