Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
File: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft (raw, json)
Hash identifier: hAU0lk0AZ3aMw1ScBPTbevSJYzKzYX8rmVfBXrKmQG8=
Subject key identifier: 75:31:FB:3C:5F:A6:90:9D:2C:7F:B0:67:B2:17:27:25:76:91:D4:7C
Authority key identifier: E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
Certificate issuer: /CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Certificate serial: 019D28BB28469809D73641A6FF46A748C813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
Manifest number: 12F3
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl (hash: kHh0bKEfb5f1MBs3vH9ixKHI82REAfqoeyXXZMeYAbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:28:46:98:09:d7:36:41:a6:ff:46:a7:48:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=7531fb3c5fa6909d2c7fb067b21727257691d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:70:82:b6:48:cb:76:f1:b7:03:83:7f:08:
12:33:72:1d:2e:31:d3:4b:88:52:b1:90:2f:e0:fa:
aa:ad:fb:11:d5:70:b4:a5:73:26:ff:73:3b:eb:7b:
7e:ca:44:26:0e:17:5c:d8:0f:73:d3:94:d2:0c:46:
99:7c:f1:ef:c0:fd:46:41:a0:e2:4f:a0:6b:2d:1d:
94:ee:35:39:49:e0:a2:19:d1:4a:af:e3:46:4f:e5:
28:0f:4d:ad:c9:fd:0f:40:39:8f:ae:16:bc:64:b9:
fe:5b:a2:64:af:2e:5b:36:86:e7:8c:17:cf:ad:04:
0f:e7:f0:e6:dd:c1:7e:c0:08:11:b2:6b:e3:d5:11:
9e:ab:48:42:b5:83:73:f0:34:24:74:a5:a4:6a:cd:
f6:2c:82:2d:e5:ab:04:e3:4c:4d:b6:36:12:62:f5:
4a:d3:85:2b:2c:26:1e:71:f1:2f:35:02:1b:07:6f:
91:f7:87:67:dd:43:35:05:b0:7b:fd:a4:f2:4c:9c:
8c:68:ce:7a:73:ea:46:e9:eb:c2:a8:19:6b:eb:33:
1b:58:06:7f:fa:16:2e:76:cd:e2:d0:c0:5e:3e:66:
8a:02:b7:e3:ab:f6:01:9d:1b:a8:f5:ec:34:d6:1a:
8a:8d:fa:9e:b8:03:23:8b:42:9c:99:9f:08:99:50:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:31:FB:3C:5F:A6:90:9D:2C:7F:B0:67:B2:17:27:25:76:91:D4:7C
X509v3 Authority Key Identifier:
keyid:E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:61:64:cf:6a:04:ef:9d:78:3f:ee:25:e6:a3:56:f7:16:33:
a3:b3:22:63:2f:ae:04:df:ae:5a:1e:f9:2d:76:df:33:3f:60:
3a:cd:0b:bd:7c:44:a9:e3:6f:a8:5a:73:40:a5:e0:8f:c0:2d:
07:97:05:06:85:bd:f9:05:d1:26:e1:f4:9e:86:7e:ef:a4:e5:
8d:2a:0c:22:0d:1f:31:72:34:09:d8:15:81:1d:b5:a0:dd:48:
31:10:57:2b:c8:a1:d5:ad:19:d1:12:63:80:02:f5:05:71:39:
99:d4:6e:45:af:f6:98:24:73:ec:7b:d4:8f:02:42:7d:be:d5:
ad:cd:22:d7:27:19:ce:46:22:2b:b4:f5:9a:33:e6:ac:dd:a5:
d3:99:64:32:d1:a6:14:71:d4:71:73:b6:fd:d9:5d:6a:fc:7b:
4d:c0:31:29:71:10:44:fa:da:55:f3:bf:b6:62:a6:f4:ca:24:
71:7b:34:36:f2:49:ae:3c:bd:e7:c9:fd:08:25:9f:d0:d3:72:
34:c6:c0:06:ae:c9:08:7c:f8:7d:1a:51:df:41:cc:d1:1c:40:
f2:60:16:05:97:8c:9f:6f:f6:0a:82:be:54:9e:87:78:0a:d8:
f8:e9:72:b7:ca:9c:09:d2:11:79:fa:6d:69:7f:0c:fe:98:4e:
1c:58:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:53 2026 by rpki-client