Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: l0gxtwlh+ROShqz6OZpyDPTOuuqh0N+MBy8Ci/oTmgg=
Subject key identifier: 77:C8:31:B9:52:07:9D:78:B4:E5:16:71:40:47:A3:D8:02:70:39:05
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 019D28F2D5A0B63D9CF3DABE1231050E530E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0C9E
Signing time: Thu 26 Mar 2026 07:01:36 +0000
Manifest this update: Thu 26 Mar 2026 07:01:36 +0000
Manifest next update: Fri 27 Mar 2026 07:01:36 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: SxQgOUjzo9am+TkHBqk9O0wxSQ92M3KD3Vdp/YuAqNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d5:a0:b6:3d:9c:f3:da:be:12:31:05:0e:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Mar 26 07:01:36 2026 GMT
Not After : Mar 27 07:01:36 2026 GMT
Subject: CN=77c831b952079d78b4e516714047a3d802703905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:fb:08:89:40:be:c7:0a:86:cb:8b:38:d6:
b2:cb:10:e4:b1:da:92:5b:a2:1e:99:85:18:f2:2c:
9f:2e:43:d9:7f:b8:7f:3f:00:95:0e:0c:00:40:39:
b3:80:8e:8d:d8:56:36:8b:5b:3d:d2:e4:ba:99:d9:
dd:66:a8:f1:b7:46:94:9d:9d:1e:ad:28:26:ff:6f:
73:0c:56:75:7b:b1:ad:52:df:1a:be:4c:e1:bf:75:
e2:d1:cf:7a:5a:ed:f5:0d:ea:d0:c7:d0:1e:48:c3:
ed:b3:3a:9d:f1:74:ac:83:a0:f6:4a:3e:3e:e3:aa:
bf:df:49:85:b6:4e:4b:a9:18:66:b8:38:df:73:c3:
6d:fd:04:8b:34:81:66:2a:91:01:65:2a:fb:27:21:
70:e4:b4:38:8b:92:51:0c:1d:7e:2b:23:b8:27:62:
4b:20:98:0c:b5:41:81:e4:8e:98:75:70:84:4f:3d:
72:b4:84:be:af:3d:03:09:98:d4:aa:0f:ad:ff:c0:
50:3d:cf:f5:37:b3:5a:86:a8:53:6a:8c:c2:5c:dc:
43:ff:46:db:91:6b:3e:1e:a2:37:64:61:e4:28:98:
50:fb:41:48:bd:2a:87:fb:9f:51:b4:e2:0b:4d:89:
a5:fb:72:7f:42:43:a2:de:96:0b:df:c3:01:32:15:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:31:B9:52:07:9D:78:B4:E5:16:71:40:47:A3:D8:02:70:39:05
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:d5:21:6d:b8:25:60:ca:9f:9f:08:d9:41:55:1f:dd:0a:27:
bc:22:d6:e1:05:c2:22:69:de:29:7b:39:b4:f3:2d:f5:56:26:
9a:67:de:f3:16:78:39:82:45:31:a6:6f:20:87:9c:f9:e3:f5:
e1:27:71:2e:09:aa:1d:1b:50:2f:f8:3f:f7:4d:9d:29:e5:4a:
0a:5b:7c:4d:6f:87:b4:72:05:42:06:3e:01:82:39:00:71:2b:
c2:de:c4:92:ce:2d:0e:64:ec:ba:f1:63:33:62:f5:2b:6d:df:
a5:4c:6e:6f:bf:30:ba:2c:0a:68:0b:d9:85:72:2f:0f:4f:ca:
33:1e:6e:62:73:c7:6d:2d:5c:62:10:59:04:89:c2:39:44:8c:
95:13:31:23:97:e0:e1:47:b5:2f:16:9e:33:de:3c:c4:b1:82:
1d:8a:78:fe:66:6d:32:4d:39:77:0e:58:2f:12:a1:51:3f:4f:
03:d7:b7:95:3d:57:4b:8c:bc:24:6d:65:4b:8c:c1:e0:72:ec:
d2:8e:81:fe:67:cb:64:a1:db:30:b2:da:d2:69:6d:13:c1:33:
b9:50:8b:e3:d3:b2:fc:1f:e7:23:43:63:bc:e1:72:44:8f:86:
7c:cc:83:ae:39:20:d0:f0:52:b4:f4:b1:01:9b:3e:b5:30:f3:
75:ad:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:55 2026 by rpki-client