Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier: OUXJ8p6ihmrI6pq5hFZv41nLwjM/8UwjxbmioVjh5W0=
Subject key identifier: 81:57:12:D7:CE:36:1E:B4:C0:8A:C9:09:46:06:6D:A2:F2:A3:7A:1A
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 019D284E60C8931810049C9FF07197CE5BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number: 10A8
Signing time: Thu 26 Mar 2026 04:01:58 +0000
Manifest this update: Thu 26 Mar 2026 04:01:58 +0000
Manifest next update: Fri 27 Mar 2026 04:01:58 +0000
Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: gDV+/NDpXbH123uqfqHpC0NISRRs+dr/bx5tCKz6h0I=)
2: aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa (hash: 8KWuhZN2MwzTsWUN92o6fPQusuIkbhVe5Tp3v7UnNEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:60:c8:93:18:10:04:9c:9f:f0:71:97:ce:5b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Mar 26 04:01:58 2026 GMT
Not After : Mar 27 04:01:58 2026 GMT
Subject: CN=815712d7ce361eb4c08ac90946066da2f2a37a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:33:8c:a1:aa:18:dc:cc:e4:1e:be:85:eb:
4d:a5:b0:d1:0e:f7:35:a5:4d:76:11:3e:3e:ab:ac:
3d:93:82:61:36:d3:ff:5e:90:b9:5d:e9:1c:19:37:
57:d9:6f:00:70:bc:5d:7f:3a:76:ad:56:1d:4e:fb:
5b:e5:23:28:4c:f3:13:98:bb:68:3f:c5:0e:c4:4c:
6c:76:e8:4b:f4:74:37:77:cf:1a:8c:5f:59:8d:f3:
ae:c2:40:16:4a:35:57:59:bd:ad:97:97:86:a1:25:
b7:d9:22:db:91:ee:2c:b2:7f:0c:3a:47:52:de:f9:
67:44:9d:6a:ce:33:73:c3:bc:30:a9:f7:d8:3f:aa:
2c:8d:47:72:a9:ef:87:fc:66:e2:b7:a7:49:db:d1:
b0:11:62:12:30:8f:19:93:c1:e1:7f:5f:98:48:c3:
6b:9d:38:5d:76:fb:6c:6d:86:51:24:66:d0:1d:a1:
b4:a8:ba:6b:8d:2e:f4:aa:25:ab:b9:d8:1e:61:ea:
4f:15:d4:7b:93:bc:b9:dc:56:e9:87:77:ec:66:a0:
b4:3c:ff:ad:92:bb:9d:63:f6:0d:39:20:e2:05:d5:
0a:38:b1:21:15:be:9e:24:33:70:b7:7f:29:6e:8b:
d2:4b:12:5a:01:4c:6d:d8:41:92:77:a6:56:9e:4f:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:57:12:D7:CE:36:1E:B4:C0:8A:C9:09:46:06:6D:A2:F2:A3:7A:1A
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:8c:aa:f6:31:cb:1d:93:32:70:b3:c8:a7:ab:4c:87:5d:
94:58:f9:01:b4:89:b8:eb:f5:83:45:a6:d2:11:c0:9f:5c:c0:
a6:4b:ac:24:65:ad:1c:b4:29:12:4b:34:33:ff:3e:99:86:49:
98:52:ec:a9:8a:4d:f3:45:7b:87:c8:db:44:2c:0f:35:12:68:
80:ab:2a:0a:4d:7d:78:5b:03:2d:87:f2:35:73:8e:cd:80:dc:
6f:09:81:d1:36:1e:4a:84:3a:8e:42:6c:c1:eb:79:30:cf:54:
b3:13:d9:bd:0e:27:8e:f6:26:9d:cd:25:12:bc:31:d6:08:98:
35:9c:13:44:99:dd:e7:f2:32:94:43:86:1c:00:89:74:a0:3a:
0b:49:ff:97:09:94:82:01:f3:1e:31:a2:66:38:08:b2:86:ac:
db:b9:c4:6b:e3:d2:e0:7b:e9:6e:e3:91:57:8c:6a:80:3d:27:
4b:e0:50:98:3b:93:87:ab:4f:50:24:e7:58:db:8a:4f:d6:e7:
2f:86:e0:54:1e:74:ad:02:27:04:58:a2:3b:ae:5f:4d:7a:01:
cf:04:13:2c:b3:67:96:aa:88:ec:7b:8e:f5:fd:44:e7:9d:77:
0a:bb:ab:e4:56:52:80:61:9a:1c:15:a7:ab:e7:c5:95:39:2e:
e0:93:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:37 2026 by rpki-client