Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: 0vSPKpiEkiWTqsC4fuDDPrJ27qgXQecLsB6ayUfVT6A=
Subject key identifier: AF:D9:18:48:A5:A6:F8:2A:AD:52:78:82:C8:4F:E2:FE:2E:43:67:C2
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019E20237FA4686469B8281D200AD9D0B58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0C39
Signing time: Wed 13 May 2026 07:00:57 +0000
Manifest this update: Wed 13 May 2026 07:00:57 +0000
Manifest next update: Thu 14 May 2026 07:00:57 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: urjGIDdgr2ywH7QdpvojQ4kYIkGNVAAIpkayNDH4bKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:7f:a4:68:64:69:b8:28:1d:20:0a:d9:d0:b5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: May 13 07:00:57 2026 GMT
Not After : May 14 07:00:57 2026 GMT
Subject: CN=afd91848a5a6f82aad527882c84fe2fe2e4367c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:1d:1c:80:82:f4:3a:06:21:46:8a:dc:44:
5f:31:06:2b:36:a8:31:de:33:a3:1b:51:dc:65:63:
bd:14:d3:f5:e5:07:c8:58:6c:55:c0:4c:f9:a4:28:
22:d4:c8:0e:46:e9:92:b8:32:60:75:88:7e:6e:28:
00:5b:95:9d:86:c3:74:ef:7e:92:0f:d5:04:65:42:
46:bf:4d:b8:78:34:35:29:2e:6b:71:33:e8:dc:87:
ca:35:60:ca:a5:79:4a:c2:37:cb:18:e7:c3:2f:64:
81:8c:2d:34:de:99:81:6b:c0:7c:91:2e:f7:c9:78:
a8:0d:f6:04:fd:aa:51:90:59:12:a8:fd:51:82:95:
5c:07:01:63:6d:40:52:84:7d:ed:3c:34:4c:98:91:
8d:88:77:d9:ab:38:57:76:34:42:7a:74:d3:3c:91:
32:35:12:61:a7:0b:1b:94:65:01:a7:27:ae:37:b5:
30:32:3b:ef:6b:1d:12:d3:ad:70:6c:d6:c4:6e:b0:
4a:7e:fc:01:9b:35:4b:98:98:d4:e1:b9:e4:44:1b:
d6:e8:cf:d3:01:f5:37:ad:5c:97:f1:fb:5b:46:2c:
65:c0:76:4d:5b:9d:af:e2:f3:38:28:fc:b8:d8:ba:
58:c7:51:39:e5:7a:d6:c3:22:e7:28:40:e8:3a:c8:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:18:48:A5:A6:F8:2A:AD:52:78:82:C8:4F:E2:FE:2E:43:67:C2
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:bc:e6:cc:f7:82:4b:1e:b6:2b:f3:bf:7e:02:b4:77:3a:3f:
0a:8d:5a:7e:79:9c:02:0b:af:33:87:e1:26:7a:08:85:be:4a:
0f:4e:04:78:fd:95:39:53:77:b9:9d:d1:79:01:0a:9d:c7:73:
2e:7c:cf:10:d7:c0:70:e1:1a:f2:f3:69:12:fc:2e:4c:5f:14:
36:42:43:d7:db:a0:15:d8:d4:65:47:27:98:59:74:64:5f:06:
50:a2:79:24:a1:18:6b:f2:69:21:4b:67:28:77:73:48:b4:e9:
ba:c2:7f:c9:ea:65:8f:94:b5:a1:5d:a3:a4:c3:25:e9:be:5c:
83:4f:3f:9f:4c:2d:f4:57:43:b0:78:64:7e:2e:53:10:1d:36:
65:9f:ca:dd:f0:08:e4:9e:0d:a6:f8:1a:a2:4e:1c:6c:59:73:
64:39:e2:ca:16:d2:2d:ed:22:7a:17:e5:2b:4b:6a:48:38:1f:
d0:6d:5a:a5:19:64:d4:f2:03:2e:f0:7d:46:b5:0c:ae:b5:ed:
62:70:d4:65:be:41:10:37:6d:2d:df:dd:d4:0a:eb:2d:f8:54:
7e:08:a0:8f:00:cb:4a:55:13:38:9c:58:aa:eb:1e:c3:11:39:
9f:06:2f:fc:31:32:e2:50:4c:74:7f:b2:01:15:6d:6a:98:85:
39:2d:3d:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI3+kaGRpuCgdIArZ0LWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2RjZTg1MGNiMjYyN2E1MmJkZjRiOTkzNGExMTI4OGNi
NmQyNzcwHhcNMjYwNTEzMDcwMDU3WhcNMjYwNTE0MDcwMDU3WjAzMTEwLwYDVQQD
EyhhZmQ5MTg0OGE1YTZmODJhYWQ1Mjc4ODJjODRmZTJmZTJlNDM2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfMdHICC9DoGIUaK3ERfMQYrNqgx
3jOjG1HcZWO9FNP15QfIWGxVwEz5pCgi1MgORumSuDJgdYh+bigAW5WdhsN0736S
D9UEZUJGv024eDQ1KS5rcTPo3IfKNWDKpXlKwjfLGOfDL2SBjC003pmBa8B8kS73
yXioDfYE/apRkFkSqP1RgpVcBwFjbUBShH3tPDRMmJGNiHfZqzhXdjRCenTTPJEy
NRJhpwsblGUBpyeuN7UwMjvvax0S061wbNbEbrBKfvwBmzVLmJjU4bnkRBvW6M/T
AfU3rVyX8ftbRixlwHZNW52v4vM4KPy42LpYx1E55XrWwyLnKEDoOsjD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/ZGEilpvgqrVJ4gshP4v4uQ2fCMB8GA1UdIwQY
MBaAFOk9zoUMsmJ6Ur30uZNKESiMttJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMt
ZjVlOTM2NDY2OThlLzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMtZjVlOTM2NDY2OThl
LzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1rzmzPeC
Sx62K/O/fgK0dzo/Co1afnmcAguvM4fhJnoIhb5KD04EeP2VOVN3uZ3ReQEKncdz
LnzPENfAcOEa8vNpEvwuTF8UNkJD19ugFdjUZUcnmFl0ZF8GUKJ5JKEYa/JpIUtn
KHdzSLTpusJ/yeplj5S1oV2jpMMl6b5cg08/n0wt9FdDsHhkfi5TEB02ZZ/K3fAI
5J4Npvgaok4cbFlzZDniyhbSLe0iehflK0tqSDgf0G1apRlk1PIDLvB9RrUMrrXt
YnDUZb5BEDdtLd/d1ArrLfhUfgigjwDLSlUTOJxYqusewxE5nwYv/DEy4lBMdH+y
ARVtapiFOS09XQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:26:29 2026 by rpki-client