
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File: cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier: en8KuA2SVfQ45WpNI7+k/JnZsOs8ygwkQi5g81DZko4=
Subject key identifier: 69:0E:A0:E0:07:3C:32:78:E4:32:A5:4C:FA:39:E0:F7:A2:80:FB:2F
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer: /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial: 019D284E793DD13BE1272A7F49A97F6B35BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number: 0F83
Signing time: Thu 26 Mar 2026 04:02:04 +0000
Manifest this update: Thu 26 Mar 2026 04:02:04 +0000
Manifest next update: Fri 27 Mar 2026 04:02:04 +0000
Files and hashes: 1: JjXMuecgBzxuqyS3slTwiSnr5mE.roa (hash: wyze/y0gn9suGrltw+Ca8tC8dvYUzoHSpwIJPVVFCho=)
2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: JjDq1OXmhPwVp16D6SBjhbYwHrVbV76fa1jX79F74HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:79:3d:d1:3b:e1:27:2a:7f:49:a9:7f:6b:35:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
Validity
Not Before: Mar 26 04:02:04 2026 GMT
Not After : Mar 27 04:02:04 2026 GMT
Subject: CN=690ea0e0073c3278e432a54cfa39e0f7a280fb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:e7:b0:ab:7f:7e:73:49:5c:14:38:55:20:
1d:58:0e:f2:2a:43:69:c6:24:83:f5:e7:2c:93:7a:
7f:4c:32:5f:b5:0a:49:87:a9:61:f2:39:0a:a3:f3:
28:2d:e4:db:02:c6:04:a0:a1:f4:fa:40:64:00:16:
e1:28:fa:a7:fd:1f:b7:f0:f4:a1:f8:a2:82:c3:08:
98:e5:c4:5e:99:42:34:80:ef:97:d2:d2:e5:90:69:
a6:7b:dc:5a:15:f2:0d:c5:fa:bd:de:c5:38:e9:a7:
9e:11:a5:54:1b:45:50:92:a8:e6:a4:d1:11:a4:c8:
e4:13:26:49:9a:4f:b2:66:00:88:2d:ef:61:64:ed:
15:7d:e1:65:80:11:43:21:be:bf:ac:fc:e1:9b:2b:
8e:ad:a2:28:57:42:bb:44:8a:db:c8:14:f7:78:b6:
0c:06:a9:e6:3a:45:a7:e4:2f:3f:3c:55:58:b5:49:
06:b5:03:57:5c:1e:2e:e4:16:64:6d:85:c9:b0:72:
ec:9b:50:56:13:f8:68:70:3f:d2:66:80:59:35:eb:
a9:5c:df:05:e5:5c:a3:a2:84:d4:92:2f:ad:a6:6e:
f8:56:47:b6:fb:c6:38:37:19:09:1e:3c:cd:26:1d:
92:15:4e:4b:cc:07:b1:ae:35:a7:40:26:7b:b1:a5:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:A0:E0:07:3C:32:78:E4:32:A5:4C:FA:39:E0:F7:A2:80:FB:2F
X509v3 Authority Key Identifier:
keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7d:d8:3b:cf:e1:05:f3:93:e6:a1:cf:73:0f:a8:61:49:95:
f0:7b:95:d1:a3:dc:17:bc:aa:00:32:91:b4:53:de:9e:7f:81:
44:fd:cd:31:28:d6:30:9d:6d:98:3a:42:38:8a:8d:db:7b:b2:
22:74:9b:72:e5:0c:80:20:9c:31:d2:9a:81:6e:3a:f8:46:a9:
e3:f2:cf:d7:3c:fb:18:1a:a2:28:86:64:0f:75:ae:12:ec:27:
04:7a:2e:dc:e3:82:26:e0:a7:9a:f6:2d:bc:a6:bd:3d:0a:90:
be:07:9a:4f:36:b3:2f:81:34:a2:bb:d9:24:73:41:18:6f:35:
e9:2c:f5:f7:fc:84:85:e6:d9:ef:02:5f:89:ae:f8:8c:3a:c2:
33:e6:71:ad:8c:f0:7f:2e:09:94:2f:54:34:3f:22:f4:61:28:
26:91:14:bf:f4:36:7d:51:56:1f:87:32:67:ad:16:29:11:40:
0a:a1:5e:31:52:d5:3f:f8:0a:33:e5:50:b3:dc:cb:e4:ca:13:
a3:8c:3a:a1:b9:97:1a:88:2f:70:b5:d0:b7:56:06:d5:65:b5:
8c:c1:d1:42:dc:87:08:a8:28:5a:7c:69:21:26:be:a2:c5:61:
9a:10:b6:3e:1c:81:c0:36:45:95:b6:b5:f3:7d:80:2a:4d:ac:
09:5d:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:21 2026 by rpki-client