Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
File: p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft (raw, json)
Hash identifier: JgtVUSETksgcwlfp/QZil+omFWpU1tHujLwDoj2J1yg=
Subject key identifier: 27:1C:10:31:02:94:70:4D:C6:7E:20:87:3C:74:F0:F2:24:DD:31:04
Authority key identifier: A7:A3:B2:FA:61:91:DE:F6:0F:5C:72:2A:D7:30:21:21:D5:CD:BF:1F
Certificate issuer: /CN=a7a3b2fa6191def60f5c722ad7302121d5cdbf1f
Certificate serial: 019D2816C53E8ADE899E9E9BE29540747CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
Manifest number: 2A
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: p6Oy-mGR3vYPXHIq1zAhIdXNvx8.crl (hash: k8iLCS+ao16FIh3KN+6HxQrxodoqy1h6CNLOtZp2un4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c5:3e:8a:de:89:9e:9e:9b:e2:95:40:74:7c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a3b2fa6191def60f5c722ad7302121d5cdbf1f
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=271c10310294704dc67e20873c74f0f224dd3104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:db:26:de:9a:18:0a:77:d8:e5:9d:4e:87:
1c:5c:e0:9c:f1:22:04:25:41:9b:a8:38:1b:68:a2:
31:01:69:f1:3e:8b:a8:1d:2b:63:34:6f:b7:47:f6:
be:aa:02:3a:ac:31:4a:5a:a0:04:a1:1e:25:ff:42:
08:53:56:39:e7:ec:55:0c:1a:34:bc:b6:97:25:2c:
5e:21:59:68:e3:2b:96:68:de:3c:49:86:7a:1f:e0:
4a:d8:c7:12:14:6d:8e:74:f3:52:4b:d0:54:28:c6:
82:ec:c8:1a:13:ab:07:36:10:42:40:b6:8b:d7:60:
ac:af:9c:4f:d9:83:12:e5:1a:7b:0e:23:0b:b6:85:
a2:93:80:16:8f:0b:7f:a2:fd:15:f2:d2:ed:eb:1c:
72:e6:9a:d0:ff:fa:34:6a:27:ca:d9:33:e3:33:0d:
f9:8b:21:dc:16:8f:9a:85:1d:7a:df:1e:a0:e4:51:
db:d7:a2:28:85:eb:e7:67:bf:17:c9:c5:a4:82:6a:
7f:5b:ce:43:05:9a:fc:1b:3d:c7:92:28:eb:71:55:
29:1b:3d:1f:f9:85:04:2a:23:b3:9e:d5:72:79:fa:
2e:47:02:e3:e0:c3:b5:7a:a8:b5:0c:64:b3:43:7c:
47:2f:b5:10:21:53:dc:ad:6c:d0:c6:68:99:6c:f1:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:10:31:02:94:70:4D:C6:7E:20:87:3C:74:F0:F2:24:DD:31:04
X509v3 Authority Key Identifier:
keyid:A7:A3:B2:FA:61:91:DE:F6:0F:5C:72:2A:D7:30:21:21:D5:CD:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:32:82:de:4f:44:dd:6a:96:08:a0:1a:68:a1:8e:62:2e:d2:
40:15:94:05:e6:4a:6c:f2:7c:8d:37:06:dd:71:b9:a1:f7:5c:
97:67:8a:f3:08:2d:8f:df:9a:29:ba:9a:87:53:9e:52:ac:b7:
f6:4e:7f:68:73:15:5d:bd:de:bb:b5:f2:b1:2e:6f:f7:23:39:
40:86:8c:5e:89:67:5c:8d:9b:70:a9:13:38:60:36:cd:36:80:
55:d0:0c:ab:a8:8f:92:29:0e:3e:7a:a9:d4:8a:00:a9:1f:ae:
0d:a2:5e:1e:c5:11:ee:f5:4d:42:3d:df:37:25:36:72:03:ec:
0f:c4:ef:45:c3:48:7e:e2:bc:99:d8:f2:85:9f:d5:aa:30:52:
ab:f9:65:c1:86:aa:31:7c:71:3a:07:d9:02:f8:f1:67:eb:13:
fc:5a:be:fd:99:08:ae:b3:db:ec:0a:c6:b2:7c:a1:9d:e5:52:
a3:85:43:79:47:ac:cc:a9:0f:67:b9:4a:89:ec:45:ef:b8:1a:
dd:6d:99:19:b8:2a:6c:d0:28:eb:bf:e4:8f:0b:d6:de:90:99:
53:4a:e7:68:9b:cf:82:33:45:6f:de:f3:7c:7e:73:2c:7f:a0:
3b:26:8d:31:c7:17:a4:d9:60:78:91:61:2f:d9:c1:b6:55:57:
25:8b:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:15:39 2026 by rpki-client