Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File: 06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier: 40/GZcuZLP59QQMcfeB8vnDX28uLs2n6YtWcOLiX4zk=
Subject key identifier: 6A:4E:1E:76:AD:AF:13:66:D8:C5:05:F1:ED:EB:22:4F:49:2A:15:20
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer: /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial: 019D29607A3B8D94D1DD9571947E8C5C4298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number: 8D
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: o3JB9Kv735Do7EntMv8+74qa5RMO46tF05JGTTGGc48=)
2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7a:3b:8d:94:d1:dd:95:71:94:7e:8c:5c:42:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=6a4e1e76adaf1366d8c505f1edeb224f492a1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:e0:17:91:6c:59:db:e5:ce:cf:00:23:fb:
e3:db:24:7b:2d:e2:d8:31:9d:fc:d2:b2:5b:60:60:
b2:c7:61:21:92:37:9e:89:66:f8:ff:d6:0f:37:5e:
4a:5e:7a:83:50:2a:14:c5:77:12:31:9c:f4:c8:9f:
1b:38:f2:a4:8e:d3:07:5e:be:58:0c:cb:cc:9c:83:
e3:71:e3:12:dc:57:3c:55:e2:dc:d9:7f:7f:e2:ba:
4f:69:48:df:b2:1f:ee:9b:b6:cd:aa:53:a8:3a:9f:
cc:74:8b:9a:90:55:f5:f6:81:10:84:99:1d:83:3e:
d8:7b:c7:ce:d5:4b:89:54:98:fe:4d:ee:89:2c:1c:
3f:d1:da:db:41:cc:6c:b3:7d:51:9a:53:18:08:34:
d3:38:57:a4:17:fa:9d:a7:57:d7:bd:2f:16:a0:67:
65:a6:4e:9a:90:ba:3b:a5:fe:ce:eb:38:d1:dc:94:
cd:3d:e8:34:91:39:48:ce:47:ca:37:b8:ee:fa:5b:
33:6c:87:54:68:08:c6:0b:bd:25:8d:de:fa:78:7c:
05:61:14:11:a9:a0:7d:03:21:f1:19:29:55:33:98:
a7:7e:36:ba:94:b0:64:90:0a:20:32:a0:a0:8a:f5:
7e:67:57:37:d1:91:0b:54:d6:b3:9a:7a:fe:af:25:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4E:1E:76:AD:AF:13:66:D8:C5:05:F1:ED:EB:22:4F:49:2A:15:20
X509v3 Authority Key Identifier:
keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c9:cc:a4:06:6d:67:18:da:d1:d7:dc:ca:89:c3:72:31:32:
35:e3:78:47:f1:43:84:76:80:66:ee:c5:8b:5f:97:f3:54:8e:
2b:ef:fe:c0:f0:40:b7:60:d7:ae:e1:c5:29:5a:50:53:38:ca:
be:67:ca:13:33:14:e0:cc:c8:a6:80:7a:28:d7:8b:55:e1:5f:
ee:72:20:c7:34:af:6b:c4:68:bd:8b:8f:a7:b9:26:be:78:5a:
cc:e3:df:e7:9f:1a:34:5f:cf:ac:9e:71:6a:e1:f5:a6:c1:e8:
6c:ea:7c:6d:24:3c:ac:7d:f0:77:91:85:21:e3:18:35:de:3c:
ef:ff:fc:03:9f:c0:06:f1:5d:9c:76:2d:de:1a:28:9d:94:6a:
77:c4:99:1c:cf:72:51:cf:c0:57:55:6c:7f:41:02:63:05:0b:
33:23:0d:e6:97:2d:df:d4:4c:41:3f:81:34:03:b8:7f:8d:9a:
2f:ab:41:85:85:b7:26:5d:60:b9:6b:0a:b6:76:cc:a9:ec:d3:
4a:29:20:9b:4b:e3:9d:af:8c:55:89:5b:f9:0b:d1:01:8e:c6:
d9:84:85:c7:56:1c:30:7b:b0:66:44:b3:fa:48:c3:bf:22:01:
3a:78:57:75:8e:95:df:fb:6c:39:ca:ee:67:f3:b1:c1:30:fa:
46:8a:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:42 2026 by rpki-client