Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: g5ONUlX7fHfeGeKhWu9Ssy7vLmmr/E9ZA8vu4fsQYHQ=
Subject key identifier: 3A:32:D9:97:E1:CE:6A:2C:99:E3:36:89:B3:92:76:AF:C5:CD:98:F9
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 019F9323BD732B7D9893152ADB064A912792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 0687
Signing time: Fri 24 Jul 2026 08:00:20 +0000
Manifest this update: Fri 24 Jul 2026 08:00:20 +0000
Manifest next update: Sat 25 Jul 2026 08:00:20 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: KGv2QdGISIdLyjH8552qHciR/Ons8nQRGxf/h7n7xO0=)
2: XMgAgm3gSAeCF3IOkeJ-oVsVVUg.roa (hash: Rw3eTNo2WIrhUY+3AUmZ7F95kXpaBKgqcEkNNLJMkJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:bd:73:2b:7d:98:93:15:2a:db:06:4a:91:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Jul 24 08:00:20 2026 GMT
Not After : Jul 25 08:00:20 2026 GMT
Subject: CN=3a32d997e1ce6a2c99e33689b39276afc5cd98f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:2c:7d:ca:d6:79:13:0f:b4:64:67:de:0d:
63:1a:17:9f:3b:ab:01:47:e0:d3:f3:e1:19:e8:ba:
c3:c1:44:33:4a:a8:05:1f:a4:62:39:57:70:d7:0a:
8e:38:71:28:78:ad:d5:8b:e4:f0:e2:e0:45:37:74:
e4:37:b2:72:6b:d8:ce:a8:b4:d2:f5:40:66:dc:c6:
ce:20:8f:ed:c1:c4:58:a9:e9:44:e9:aa:6a:34:41:
b9:dd:75:7a:d6:90:bf:14:0c:72:d8:14:24:d3:88:
fd:53:49:25:97:9a:db:b5:41:66:49:69:cc:aa:39:
f1:e5:26:35:97:18:09:45:77:1d:cd:aa:c5:34:bb:
02:b2:83:23:b2:4c:96:62:8c:78:65:23:81:23:5a:
fa:46:42:a5:55:3e:02:ae:95:84:04:63:29:19:dc:
32:e5:33:3f:a8:0d:3a:3d:32:9a:19:d1:d0:ca:3e:
ab:da:9c:f0:cc:ab:37:a7:e4:da:90:95:f8:e3:f7:
65:6a:d0:67:56:a5:d7:91:8d:0f:c1:f9:84:72:a1:
52:77:78:d0:64:36:ca:25:27:79:1d:a3:bd:17:09:
d4:8f:a1:87:e1:44:6a:59:80:d7:40:42:bb:5f:29:
83:39:ec:19:f4:fc:44:43:42:61:1f:1f:e5:2a:2a:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:D9:97:E1:CE:6A:2C:99:E3:36:89:B3:92:76:AF:C5:CD:98:F9
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:82:6f:ee:93:89:dc:b5:be:f8:82:a8:71:28:93:c2:7b:a9:
6d:3c:3a:d1:ec:53:22:54:07:d1:29:89:b7:33:ae:f3:12:12:
5b:74:11:8d:45:3d:d0:7c:6c:dc:95:2a:4a:ad:92:02:19:22:
b1:d4:b6:74:19:52:fe:91:cb:fc:42:63:20:a6:41:1b:cb:c0:
8a:ae:f8:54:d9:08:41:69:23:83:a2:05:6d:86:08:c5:9e:b5:
48:53:4c:60:5a:32:56:98:56:e6:fe:28:ac:b8:20:8b:1c:f2:
e0:de:32:97:88:f7:3e:bf:a4:1a:73:ca:37:17:ec:a6:36:1a:
81:3a:db:e8:45:e5:8f:80:8f:46:d6:83:8f:16:a5:62:ef:a7:
70:77:e4:a5:c2:23:c5:e2:62:8b:11:b3:1d:34:87:57:78:c8:
5a:ec:be:7e:e1:f2:27:21:bf:10:ad:01:a8:ca:14:43:99:72:
60:59:50:4a:80:14:b4:25:94:1e:30:55:04:0b:f4:85:de:02:
33:3e:ac:8b:f0:78:c1:d0:c4:1f:a5:6a:a5:50:89:22:b7:90:
02:cb:fe:b7:d6:5d:0c:e8:95:99:30:6c:27:7d:15:03:c6:77:
a3:de:fb:af:15:4f:1b:2c:46:9b:36:50:a4:32:90:b9:d9:d0:
3a:49:70:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI71zK32YkxUq2wZKkSeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWM1MGUwNDU4MjI4MjMxNzZlNDc4MzJkZWM4ZjIxMWI3
NGYwMTMwHhcNMjYwNzI0MDgwMDIwWhcNMjYwNzI1MDgwMDIwWjAzMTEwLwYDVQQD
EygzYTMyZDk5N2UxY2U2YTJjOTllMzM2ODliMzkyNzZhZmM1Y2Q5OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHksfcrWeRMPtGRn3g1jGhefO6sB
R+DT8+EZ6LrDwUQzSqgFH6RiOVdw1wqOOHEoeK3Vi+Tw4uBFN3TkN7Jya9jOqLTS
9UBm3MbOII/twcRYqelE6apqNEG53XV61pC/FAxy2BQk04j9U0kll5rbtUFmSWnM
qjnx5SY1lxgJRXcdzarFNLsCsoMjskyWYox4ZSOBI1r6RkKlVT4CrpWEBGMpGdwy
5TM/qA06PTKaGdHQyj6r2pzwzKs3p+TakJX44/dlatBnVqXXkY0PwfmEcqFSd3jQ
ZDbKJSd5HaO9FwnUj6GH4URqWYDXQEK7XymDOewZ9PxEQ0JhHx/lKipisQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoy2ZfhzmosmeM2ibOSdq/FzZj5MB8GA1UdIwQY
MBaAFNOsUOBFgigjF25Hgy3sjyEbdPATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUt
NTQ4ZDMwMmNjZWRiLzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUtNTQ4ZDMwMmNjZWRi
LzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4Jv7pOJ
3LW++IKocSiTwnupbTw60exTIlQH0SmJtzOu8xISW3QRjUU90Hxs3JUqSq2SAhki
sdS2dBlS/pHL/EJjIKZBG8vAiq74VNkIQWkjg6IFbYYIxZ61SFNMYFoyVphW5v4o
rLggixzy4N4yl4j3Pr+kGnPKNxfspjYagTrb6EXlj4CPRtaDjxalYu+ncHfkpcIj
xeJiixGzHTSHV3jIWuy+fuHyJyG/EK0BqMoUQ5lyYFlQSoAUtCWUHjBVBAv0hd4C
Mz6si/B4wdDEH6VqpVCJIreQAsv+t9ZdDOiVmTBsJ30VA8Z3o977rxVPGyxGmzZQ
pDKQudnQOklwoQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:17 2026 by rpki-client