Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File: 6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier: TjPagUwHK/pHIaFNF/SFfBD7Mn5fooXXy2K3KNorQ9g=
Subject key identifier: 06:A7:CF:A0:A1:7B:07:59:D8:02:1B:5E:A2:6D:83:91:4D:9F:B8:14
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer: /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial: 019D2AE121ECFFDA792AB15F56C3248B44B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 16:01:30 +0000
Manifest this update: Thu 26 Mar 2026 16:01:30 +0000
Manifest next update: Fri 27 Mar 2026 16:01:30 +0000
Files and hashes: 1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: vgMrfdgn/OsdS56oxL3fD1lqv8hZEzQKYU8D7uyLf8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:21:ec:ff:da:79:2a:b1:5f:56:c3:24:8b:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Validity
Not Before: Mar 26 16:01:30 2026 GMT
Not After : Mar 27 16:01:30 2026 GMT
Subject: CN=06a7cfa0a17b0759d8021b5ea26d83914d9fb814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:a4:ee:01:6f:ac:93:04:b6:65:ab:ef:af:
cc:33:fd:5f:85:1e:49:17:3f:e3:6e:aa:b6:cb:6a:
18:24:28:15:7f:84:05:ae:e3:1c:13:a8:ea:8c:4d:
d5:8d:7e:ec:b5:82:2e:a7:e1:b3:78:1a:1f:96:ff:
69:94:c6:f9:b7:4d:32:d9:72:2e:3b:87:66:f0:9a:
99:88:73:a3:6c:89:ef:bd:39:89:06:ed:98:98:14:
89:be:60:e6:28:b9:1e:c9:02:79:1c:a6:fd:00:99:
d5:a2:d6:8e:d6:e2:8a:92:93:fa:bf:8e:16:f9:00:
6b:a0:b6:c8:05:2b:28:3d:a4:f4:25:4e:d1:f2:3f:
d0:78:ce:57:d6:b9:4c:33:47:22:fe:54:df:48:98:
7f:03:3d:d5:7f:00:7f:6b:f9:0e:ce:ab:0e:fa:d1:
cf:80:c7:10:e3:fa:ce:14:38:f4:7f:44:ad:16:87:
8f:f4:bc:02:f5:19:52:db:8e:72:82:60:e6:90:8d:
ce:00:c4:e1:ae:80:78:11:50:da:17:a2:37:4d:34:
36:c5:eb:0a:53:50:97:3b:c8:f8:a3:db:49:61:c9:
63:57:95:b4:89:96:9c:c5:22:d0:1e:cc:df:25:87:
0e:0f:82:b4:dd:3a:74:53:23:72:d4:e2:e7:64:a4:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:CF:A0:A1:7B:07:59:D8:02:1B:5E:A2:6D:83:91:4D:9F:B8:14
X509v3 Authority Key Identifier:
keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:09:d4:85:4b:c6:ee:60:c1:4e:56:28:96:68:c3:15:1e:
32:49:e7:01:87:71:8e:84:04:67:6b:dc:e4:03:a9:ac:27:55:
0f:4d:5b:14:12:32:17:c6:ff:90:fc:36:41:77:ae:21:3f:18:
ee:c7:31:53:01:c5:55:0d:72:f1:f2:3a:ed:2c:91:60:42:e2:
09:b7:fc:30:e8:fd:e3:b9:60:38:51:1b:22:74:76:4a:9b:25:
c2:82:f3:c8:55:ff:59:99:cd:e0:b2:f8:ec:9c:45:4b:f7:39:
af:10:e4:80:48:81:0d:99:4a:bf:86:d2:1d:54:c1:5a:bf:1e:
ec:7a:a1:a4:34:d6:14:c3:4c:be:0a:91:dc:87:f6:5c:ca:46:
e5:24:7f:4e:3f:21:62:f8:14:76:3a:c4:f9:92:09:eb:8b:aa:
7d:bd:28:a0:50:3d:e2:c2:16:5b:63:17:52:98:03:de:28:a2:
8d:08:6b:05:fe:b8:bb:bf:09:8b:a8:3d:e3:ca:50:57:42:53:
bf:39:6b:f6:2c:00:7d:55:e7:2a:29:b3:d2:88:12:34:cd:9e:
fe:16:f8:1f:62:ad:fa:fa:26:bf:3e:6f:27:30:d5:89:ab:51:
fa:4b:62:48:55:42:59:12:60:bc:3a:e8:eb:81:7d:f7:38:c3:
65:db:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:00 2026 by rpki-client