Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier: C961cIS/XeJP8ONV1St7+azZvCO/lTi+vHdvGLCyh0I=
Subject key identifier: 16:2B:7C:13:E7:47:FC:3C:B3:F6:97:5D:7C:C8:ED:F3:89:3E:52:FE
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial: 019D270412DEE73AAC2964FA13DEF532090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number: 10AD
Signing time: Wed 25 Mar 2026 22:01:11 +0000
Manifest this update: Wed 25 Mar 2026 22:01:11 +0000
Manifest next update: Thu 26 Mar 2026 22:01:11 +0000
Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: 2Fo2bjD4lvVcIuEBAiJPC0WILmWTNGjohROyplfqPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:12:de:e7:3a:ac:29:64:fa:13:de:f5:32:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Validity
Not Before: Mar 25 22:01:11 2026 GMT
Not After : Mar 26 22:01:11 2026 GMT
Subject: CN=162b7c13e747fc3cb3f6975d7cc8edf3893e52fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:e5:19:79:b0:71:ee:08:ff:39:03:35:bc:
54:33:80:7d:61:24:49:b3:f0:c1:20:74:66:66:5b:
e2:68:ea:c4:f0:fd:8b:8d:44:fd:49:c7:e9:fd:d4:
46:84:92:b5:f9:0b:bd:07:cf:7f:3e:92:97:61:41:
ad:eb:98:6a:bd:9a:7e:0f:d4:d2:5e:f6:97:97:b2:
ce:4a:4d:81:cd:a2:7d:47:a6:ce:74:d0:93:f8:c2:
74:6b:52:fc:a3:e7:2b:1f:72:12:32:c2:99:17:0a:
e6:cc:17:63:95:3e:87:23:c7:9b:42:75:d6:f9:99:
72:28:8c:34:62:20:ff:65:28:30:00:ab:a6:b6:12:
e9:42:2a:37:bd:17:a2:8c:90:f4:02:32:b2:2b:85:
35:7d:90:0e:04:bb:a0:a6:ae:0e:93:7e:f0:1b:24:
a2:93:4b:a9:40:d3:f6:4e:b5:df:e4:66:5e:6f:e8:
04:33:b4:26:c2:fd:cf:c6:ae:72:26:a7:ee:2a:a2:
1d:5b:61:7c:ca:dc:68:57:7e:7b:3b:e1:5f:f3:42:
37:c3:74:a1:ca:a1:e5:1c:ea:15:a9:9c:b4:5f:8b:
4d:8b:ed:9c:f7:97:eb:9d:00:1b:36:56:bc:f7:a0:
62:2d:be:7e:e9:b0:cc:b5:75:1b:1a:3b:e0:0b:d4:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:7C:13:E7:47:FC:3C:B3:F6:97:5D:7C:C8:ED:F3:89:3E:52:FE
X509v3 Authority Key Identifier:
keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:a8:f9:f7:94:ff:43:8b:04:74:08:4d:f8:32:db:fb:cf:
9c:5c:51:6b:15:72:04:1e:c3:a8:29:40:32:ff:7f:60:cc:43:
b7:be:3a:d5:82:fd:69:a3:0f:32:0a:54:1a:03:09:88:52:51:
6c:3a:5b:92:3a:6f:3d:73:dd:08:4f:7e:f2:a7:b5:61:6b:8b:
62:08:e7:12:0a:98:6f:6d:52:aa:36:e9:3f:e9:e0:5a:9d:9b:
90:cf:b6:6a:60:2c:bb:07:83:b2:af:b0:61:e5:ed:4e:b9:cd:
29:43:3e:cb:37:b0:81:a8:30:c1:4c:b7:aa:23:43:76:08:73:
bc:2b:09:fc:8b:a2:00:7c:93:cd:1c:87:d3:d2:ab:96:aa:f3:
3b:dc:a5:ae:59:87:85:6d:cb:3b:cd:99:12:83:e2:d6:0d:59:
e9:a8:4d:b2:f7:94:30:5b:2e:72:f1:7d:69:6f:82:9e:09:83:
9d:03:19:e4:68:f7:d0:19:b4:a1:9c:d9:79:10:f6:7e:dc:6a:
4a:3f:3d:37:8a:db:40:09:d6:2b:39:23:e5:91:34:7a:fc:4b:
ff:e3:4e:b9:14:a4:a1:44:c8:a6:e9:d1:0e:56:dd:f8:25:52:
16:35:fa:63:42:a4:b2:c3:d4:27:40:2e:a7:79:a2:21:62:f8:
45:30:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:52 2026 by rpki-client