Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: IZvvYDamyf+60VqjeLa4i6ZJD6RdwNohsXjv+yzCHJI=
Subject key identifier: 5E:B5:08:0A:FF:8B:8E:42:00:93:33:A6:F2:DD:A8:5A:52:E4:6B:3D
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 019D265F7EBA9A42648AEE2B9001980963B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: +j+ATOQyKEdTb9FFBEJQ0Tv9QGCCVV6nqwYBiMxywJ8=)
2: u65mmO6HRK5seaMFhAXBI1NDzRY.roa (hash: bDLwuznXJEsV9R4nt39n1oPS76JZaY8ubPqpqj3zceQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7e:ba:9a:42:64:8a:ee:2b:90:01:98:09:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=5eb5080aff8b8e42009333a6f2dda85a52e46b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:0e:f7:8d:e3:0e:41:fd:fc:92:87:c6:65:
0c:2d:0f:a1:b3:05:33:9d:b5:7e:28:aa:fa:1d:70:
cc:5a:75:c8:e7:c1:8e:88:dd:dc:81:0e:b9:b3:ce:
74:27:dd:45:13:8d:83:ab:2c:3b:ca:e2:40:7e:cf:
75:f3:bc:74:93:7f:24:28:41:91:0d:20:1f:5a:c8:
fa:39:b5:6a:86:3c:c8:1b:6d:0a:49:4a:ec:d6:35:
7e:15:52:83:a5:af:e2:00:a9:6c:58:b8:f0:a1:b0:
e6:4f:5f:3f:15:85:2c:4a:0e:cd:29:60:a0:4a:80:
c4:3d:8f:7c:b7:85:cb:e3:39:10:91:70:7c:ce:5c:
49:da:92:2a:01:df:14:50:3e:d2:20:1a:da:7f:d3:
69:26:2f:6e:d2:fd:70:38:da:9b:dc:44:c9:52:e2:
16:e6:5d:e1:28:8f:90:db:af:a1:d1:b1:55:8d:f0:
8d:be:15:d0:ef:e8:3b:d0:75:fa:22:cb:8b:27:9b:
6e:6e:6a:31:4c:06:4d:dc:70:1d:33:f8:d2:5e:4f:
55:9a:fd:66:2c:7a:fc:51:ae:0c:70:d3:73:70:ec:
0e:f2:ec:31:17:37:49:ed:82:0c:39:19:a5:1d:e8:
6c:24:f5:34:b0:3d:41:b0:5d:66:97:e3:75:de:65:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:08:0A:FF:8B:8E:42:00:93:33:A6:F2:DD:A8:5A:52:E4:6B:3D
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:00:3d:8c:52:76:f0:1f:a3:e2:a1:7d:18:5c:ab:3e:1f:c0:
0b:70:89:1c:59:c2:85:c9:3a:cf:bb:38:9a:40:2b:e6:b2:fd:
0b:0c:d5:f8:e0:39:21:f2:23:16:25:ff:8c:8b:81:42:af:84:
9c:a2:ff:51:b0:d4:1b:79:da:80:5c:56:25:7c:2b:f6:1f:d4:
d1:2f:4a:40:a3:59:3b:9b:ca:ae:60:06:0d:30:ab:f3:af:32:
1a:c5:05:af:25:25:bd:11:6b:c8:61:98:de:c2:48:3d:0c:0b:
9a:87:40:3c:d6:54:a1:9b:7e:99:d5:3f:29:19:e8:9d:a9:c3:
12:ef:a6:07:15:16:ce:9d:4b:26:d5:52:bb:03:3f:4c:35:90:
6e:f9:e1:1e:0f:ac:30:15:e2:72:7b:ef:a7:44:44:34:48:42:
a6:0f:bb:09:f7:1a:40:51:0d:55:26:f4:fd:d9:c7:02:96:8f:
35:fa:d1:3e:02:95:b0:0b:fe:e5:4b:95:bc:c8:5a:7d:ce:3d:
fb:f4:f6:2d:e6:0c:a8:d3:1e:b6:70:a3:79:c0:95:d8:42:96:
42:1b:24:28:a9:24:27:fe:ea:d5:35:17:f5:df:91:e3:8b:f3:
89:05:8f:78:d4:09:51:3a:2b:f1:7a:d4:a6:be:21:3d:ed:6e:
13:2d:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:12 2026 by rpki-client