Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: old1aDuh99mz+sz0EHGZjLiaQHvfthaf3l0IdP9cGzw=
Subject key identifier: F0:10:B1:98:71:CC:81:78:C7:0A:37:7F:0F:99:A6:87:A1:A9:84:78
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 019D273AD448FEDC816E6239B78979CC1E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: Tz8w/5CsrWzNuqf/euvOOcNhtaImi0JLPAos7FOLAj8=)
2: c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa (hash: 4vJbjz8heF/m4GioZY43zb7qdmLusK1fKEnTbwbhKuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d4:48:fe:dc:81:6e:62:39:b7:89:79:cc:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=f010b19871cc8178c70a377f0f99a687a1a98478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:84:09:aa:d0:a1:c9:d0:8e:89:56:9e:93:
3d:05:a7:1e:33:bf:bb:54:27:88:fc:b8:ba:7a:7b:
17:06:ce:7c:64:d8:03:03:3a:bb:96:71:9e:25:ab:
ff:83:ef:aa:27:3d:29:e0:24:d1:99:ba:b7:e8:40:
6e:d2:72:44:15:5c:5d:e5:24:e1:8e:4d:75:b1:c7:
7d:c7:bf:2b:a1:70:61:9c:eb:2f:95:85:95:70:de:
39:5f:ac:f1:74:7b:ca:c9:e1:6f:10:c2:32:a3:de:
f2:82:0a:f2:a9:5e:13:93:87:ec:b2:9f:13:5b:6e:
47:c3:32:c3:a5:90:34:43:5e:43:e3:ed:e6:f8:59:
27:12:76:7d:2a:78:77:0e:a2:eb:5e:d9:6d:e4:80:
31:6f:6f:84:53:cd:96:96:3a:e2:54:3d:09:f0:cb:
7f:4a:f0:11:4b:d6:5d:a2:94:cb:b0:60:f3:f0:b6:
0e:b2:fe:da:46:59:75:b8:69:e7:ed:fd:3d:1e:5c:
4c:f7:13:7c:a1:45:0c:2a:50:b0:38:c4:f2:01:43:
00:75:5f:9c:1f:63:0f:db:e8:be:70:60:5a:35:3d:
1a:4f:08:36:a8:9e:f1:54:76:81:8c:fa:9e:2b:7e:
7e:8d:56:db:b9:06:39:1f:97:20:aa:a4:2f:56:2c:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:B1:98:71:CC:81:78:C7:0A:37:7F:0F:99:A6:87:A1:A9:84:78
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:f4:13:f1:85:c1:7d:f3:9e:67:16:5d:9f:38:49:ad:48:
e6:66:e4:42:57:d9:74:7a:3b:fe:dd:6c:bc:b7:6a:5e:60:a8:
d9:a8:cb:26:e8:b7:5d:e2:2f:2e:a9:ed:c1:2f:ea:3e:a4:c9:
3e:28:d0:cf:35:25:c3:c0:c4:bb:22:27:3b:1b:25:75:6c:c0:
aa:71:2b:07:1f:60:c7:b7:97:a8:fc:89:67:2b:54:6c:d0:a8:
f7:bc:af:6c:35:8f:87:2a:c5:f4:21:77:4c:21:40:60:55:a2:
0a:d2:e6:53:f4:33:d0:53:fe:d8:63:76:0f:61:30:b5:bd:7e:
b2:2b:9f:f3:db:f3:31:45:36:46:4f:52:5c:d7:83:f5:99:52:
88:8b:e9:cc:d1:0b:46:ba:57:8a:77:2d:47:a3:40:b4:ee:15:
85:a6:05:ff:35:05:d7:cb:a7:a7:52:b8:f1:3d:fd:79:5e:93:
d1:bb:0e:d6:9a:de:d2:0b:01:47:d2:16:fa:2d:70:c5:89:86:
9f:60:33:35:f6:ed:84:b7:c0:13:1c:9e:07:2c:a7:7b:2a:ed:
8c:2d:07:64:20:6b:87:4f:fb:34:3e:70:f1:cb:6f:15:ad:e7:
5e:24:95:24:79:8d:f4:07:66:d2:b8:26:5b:e9:39:5a:b6:7c:
1f:a8:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:03 2026 by rpki-client