Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: qw1744CZZLw/Qu2gigZ5/IrDJ2Jh/DoEixSYXu117Lw=
Subject key identifier: C6:2B:CF:5C:05:DC:92:E7:8E:FA:F1:C0:B7:2C:70:BC:52:23:6D:5B
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019D265FD1DC3618ED353E5B0635818C93E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: 3Of5BgqJfL7wv9FOtJDKSGP8JIkqQJpQWl8aIHxc7Vw=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa (hash: joUgZ1+fSeYV8k7xjRhKW4mLd1zfaAQo+STxOJIkVhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d1:dc:36:18:ed:35:3e:5b:06:35:81:8c:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=c62bcf5c05dc92e78efaf1c0b72c70bc52236d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:b6:63:77:a1:a3:c4:0c:c4:dd:56:41:2e:
7a:d2:ba:f1:9e:4b:ad:dc:f1:7f:ad:9c:b4:8c:00:
bf:d4:12:dd:21:05:ed:8c:87:fa:c8:37:2b:09:f6:
37:d7:fd:ec:4e:79:03:0f:f5:7a:d4:00:0a:f8:6c:
a6:1d:cf:10:02:ce:bb:8e:e2:9d:d0:c9:3d:cd:aa:
2f:eb:da:91:af:0f:32:b1:33:65:12:2f:44:37:27:
df:bf:53:dc:a0:27:78:1a:a9:fb:8e:c3:ad:fa:3f:
e5:d9:ab:a1:38:45:cd:c5:1a:57:01:45:e3:23:f4:
4c:10:93:1d:c9:0d:4f:97:67:4b:de:5c:25:db:c7:
cc:ff:5d:15:cf:c0:d4:5e:bf:99:1e:88:b9:60:d1:
db:b3:0d:14:77:a9:22:d2:78:13:bd:90:e7:ae:89:
77:6f:82:fd:4b:80:a3:44:d1:3c:f9:f7:97:87:c5:
49:20:b8:20:17:30:29:2b:49:1d:c0:cd:c8:3e:59:
98:75:38:ee:4a:ca:3e:f1:0a:97:c8:60:e4:22:4b:
44:13:a6:2f:6e:26:0d:00:51:e8:c9:ef:86:8c:af:
c9:0e:47:af:3a:f2:f0:b7:53:fc:93:c9:37:dd:ce:
87:31:d7:92:b6:11:98:a7:eb:4b:43:1b:c6:52:c6:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:CF:5C:05:DC:92:E7:8E:FA:F1:C0:B7:2C:70:BC:52:23:6D:5B
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:72:ab:e0:e3:23:49:0e:b1:26:14:5f:7c:11:54:9d:06:
84:42:6f:d4:4a:a4:fd:28:0d:bc:1c:c8:2b:84:19:17:09:ef:
7a:2f:4c:b5:3b:d2:79:af:da:27:ea:7c:90:53:47:3e:a2:46:
45:63:ad:2d:89:a3:51:07:36:36:19:95:a2:db:9c:b3:fb:e4:
9f:16:11:7a:76:da:b4:2e:d0:58:58:f8:9f:a6:c4:73:cf:1a:
b0:a3:6e:99:2a:21:a1:39:77:91:9e:9a:df:b5:c1:f2:df:7f:
e2:a8:50:82:c0:70:c7:4d:2f:4d:69:b7:e8:8d:3b:7b:0c:3b:
dd:98:86:92:99:38:28:0c:fc:d3:2a:b9:35:e5:4c:24:82:7d:
f5:cd:06:e2:8b:d2:d2:56:60:ac:d7:26:67:86:16:59:e0:a7:
4c:0d:53:c4:ac:8e:4f:bb:d9:00:6c:b2:6f:6f:1f:2b:9c:35:
8c:a1:e0:5e:01:d8:37:b0:05:bf:41:cb:07:62:e9:9a:ca:ab:
b0:ae:67:d7:4a:a3:68:cc:fa:97:9e:fc:36:80:70:15:86:cd:
be:e5:05:c1:c8:c4:ea:fe:51:ee:af:02:c5:06:de:cf:3a:b4:
ad:9f:45:d6:e3:72:26:24:b2:3f:ee:60:3e:13:0c:ed:42:49:
c3:2b:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:24 2026 by rpki-client