Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: toG5dF/EFh9YFTrmJGCN52h5BfSDMsMvNXJJNxGVZrw=
Subject key identifier: 8B:ED:6D:7E:D2:BC:24:1E:A2:0F:AA:B3:3C:E7:77:A3:A8:51:88:9F
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019D2A3B5E81B451AA7133DF12BCF568E174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 07C6
Signing time: Thu 26 Mar 2026 13:00:27 +0000
Manifest this update: Thu 26 Mar 2026 13:00:27 +0000
Manifest next update: Fri 27 Mar 2026 13:00:27 +0000
Files and hashes: 1: Iiwk2jKDW4IaNjmsgGUwYMpnKAM.roa (hash: wDkZJq8BzyqmEdB2P1wzL21xUqvQ8gUqXRFb8fOP5T0=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: r7eaM/Yag9+gLd0uTzr2UUbxDkuY3H9vnrM6SXicexc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:5e:81:b4:51:aa:71:33:df:12:bc:f5:68:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Mar 26 13:00:27 2026 GMT
Not After : Mar 27 13:00:27 2026 GMT
Subject: CN=8bed6d7ed2bc241ea20faab33ce777a3a851889f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:ba:1d:67:12:80:db:1e:19:02:7a:4d:0a:
2b:fa:81:37:b7:29:c0:19:1a:89:03:2d:0b:60:ac:
a0:07:b6:b9:3c:a9:ce:cf:47:2c:17:74:ce:99:f7:
c6:04:64:87:2b:77:a4:b9:28:3d:22:b7:7d:8e:e1:
99:b4:69:7a:f2:2f:9c:66:67:d2:f7:e0:3b:76:1c:
9c:3e:2f:10:12:36:7c:54:a4:da:bc:32:f8:de:95:
6e:e1:d8:d0:14:18:09:aa:64:d6:c2:8e:af:75:76:
a5:6d:a8:29:77:2e:cd:36:79:02:77:43:d5:6b:51:
31:fd:ab:8f:5c:6f:e4:6b:a9:aa:16:75:c8:e6:6b:
95:f8:74:be:98:64:ca:8a:0a:4e:79:f0:39:41:d9:
39:f1:4d:de:ad:6a:c7:b7:7d:f0:aa:51:9f:fd:67:
85:27:b2:7c:f5:50:46:8f:6a:28:23:2a:e1:0a:56:
43:a9:8e:c6:b2:fe:56:e5:c1:d0:0b:f8:4f:e9:81:
9a:33:dc:d6:cb:19:dc:33:00:d0:0b:1d:6a:6a:b8:
4f:e8:10:d9:ec:81:98:4b:dd:5d:60:77:88:34:6f:
98:9e:c4:bf:fd:2d:32:88:9e:55:e9:de:06:1a:86:
06:a5:6e:e7:d4:00:ec:d2:51:45:61:e3:d1:2d:c3:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:6D:7E:D2:BC:24:1E:A2:0F:AA:B3:3C:E7:77:A3:A8:51:88:9F
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:0c:9b:0b:21:b4:5b:70:2c:4e:3e:dc:01:bb:12:4b:32:
f4:af:9e:b0:9b:2c:9a:b6:11:79:ed:79:f1:b0:d2:92:fa:c5:
55:5c:b7:83:b3:57:42:c9:f7:aa:1c:0e:98:f6:2f:78:6c:ed:
f1:c9:08:bf:69:4e:b3:1f:3e:11:f4:88:6e:03:f5:82:bf:e0:
27:99:a3:a6:c6:f6:10:28:c2:88:98:9a:4f:5b:80:28:44:92:
51:a7:8a:31:a6:c3:08:11:f2:30:61:ba:05:55:13:67:1d:0e:
db:fc:2c:f4:2d:19:3d:6d:ef:40:25:c8:3c:ca:d3:89:e4:4c:
97:d0:00:1b:0b:1c:a3:4b:66:04:05:5f:df:e3:bb:c6:78:3e:
13:01:aa:d3:bb:a0:e8:66:a8:67:4a:59:a8:74:8a:68:72:7d:
15:98:ba:08:73:b1:c1:7f:2a:a2:2a:50:57:6a:c7:1c:b7:df:
fa:db:34:8f:ef:6a:8a:f6:ec:79:bf:44:23:6b:7a:85:64:95:
30:e2:81:1d:e6:fa:36:d1:57:fc:43:45:20:c2:15:b2:ef:0f:
62:a7:d0:8d:8d:ed:bd:75:ff:75:72:fa:dc:4d:50:58:70:bd:
0b:23:e8:32:3a:52:69:40:12:bd:9e:36:13:8b:f1:57:cd:bf:
40:88:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:59 2026 by rpki-client