Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: rpbNxcqnhgVkSWU9nY27zIdEpkMxCdi/t0R+1TL7Igc=
Subject key identifier: 4F:61:AB:66:63:4B:B9:89:AB:5A:E9:7D:6F:65:7D:EF:01:B1:4D:B0
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 019D37F7176A5195C6DE01120FFA4BFA041F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0C77
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: H+pOIjAzkqGcjtVrRtXv/1iUhaEmL3SmJX9KRX4vSyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:17:6a:51:95:c6:de:01:12:0f:fa:4b:fa:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=4f61ab66634bb989ab5ae97d6f657def01b14db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:9d:ab:da:d2:09:cc:0d:9b:15:3a:b1:3a:
92:8a:68:92:ba:e3:b0:b7:1d:c5:a4:71:7d:63:72:
80:43:a8:41:36:93:df:a3:05:2e:f0:4f:74:78:b1:
72:7a:82:34:d3:0a:e9:de:76:d0:89:74:02:6a:5a:
1c:2b:46:ef:d0:b2:5e:9f:13:03:8e:d9:11:2a:d1:
d6:33:a2:ec:b6:7f:a6:56:5e:40:38:81:d5:bc:57:
8a:e3:57:9b:ea:ac:48:3f:30:6e:99:31:33:36:6f:
bb:4f:65:3c:d5:b1:02:11:b7:b6:d7:a7:c9:e2:14:
4f:42:3a:07:d6:fa:04:d1:bc:e4:03:91:fe:2f:80:
c6:e4:07:d4:b7:9c:ef:58:12:47:de:fb:99:37:16:
fe:9c:c2:a3:a5:8c:9a:b1:26:be:7c:a9:4a:f6:a6:
af:b2:d9:b8:9b:0e:29:76:ad:a6:7b:31:fa:1a:f1:
d9:ff:4c:5c:37:88:b6:d8:93:ab:86:a0:a7:94:a6:
8f:f6:f9:5d:4e:21:72:1a:db:e8:6d:ed:98:f1:92:
48:25:1b:1a:e7:4e:bf:99:cd:ac:99:9d:75:24:8a:
81:37:a4:4f:07:0a:40:62:eb:39:6f:7e:f6:7c:70:
f5:61:bc:a9:b4:45:aa:72:39:79:c8:54:3b:94:bb:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:AB:66:63:4B:B9:89:AB:5A:E9:7D:6F:65:7D:EF:01:B1:4D:B0
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c8:8f:1a:d4:6a:f8:8b:e1:54:be:03:81:4b:f5:4f:dd:cd:
1d:ef:7f:cf:06:a7:7f:90:fb:27:85:85:64:3f:2b:e0:a0:72:
ee:92:6f:0b:57:1c:f4:17:2f:84:05:0b:dd:14:f3:35:ba:50:
40:3a:10:c5:e4:20:d3:87:c2:60:94:f1:3a:b9:13:f5:cc:f4:
1c:06:bc:f3:81:24:f8:d9:6d:0b:68:26:05:0f:62:b7:ba:43:
68:f3:83:36:b0:e1:e3:da:85:4e:c5:f4:d1:2d:41:88:a6:68:
fc:66:5a:53:da:13:87:80:23:bd:96:d3:30:52:c5:fd:a8:9a:
ff:8f:a6:06:3e:de:20:4b:cc:36:cb:a9:ef:a8:a6:bb:10:d2:
70:2e:e7:59:73:84:65:ac:c2:35:98:93:a0:44:4f:7b:4d:ea:
71:ec:53:0f:1a:45:7b:71:dd:c8:a9:73:5f:fd:c1:98:6b:12:
6e:d4:66:a2:8f:99:89:ec:a5:26:61:e7:5a:67:91:b3:bc:b7:
53:64:ae:ef:4e:43:ea:31:5c:a2:e1:a9:1f:0a:00:51:04:b5:
cc:4e:29:34:d1:b6:9c:72:8a:53:5d:52:9a:e6:17:b3:c7:be:
ae:0e:c2:d1:d8:2e:d2:b4:e1:0f:e3:41:8d:da:df:28:3e:b5:
89:09:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client