Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: wPKc5LOyAihUHEx61nayeX7iRrYh3RqfAWvdxG1L/w4=
Subject key identifier: 6B:84:40:A2:60:67:A0:50:59:4A:BD:62:12:83:8B:82:E2:36:30:5A
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 019D265F8D46E356ADA3484D5FB1071B9DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:29 +0000
Manifest this update: Wed 25 Mar 2026 19:01:29 +0000
Manifest next update: Thu 26 Mar 2026 19:01:29 +0000
Files and hashes: 1: Av5bsVoq8UQGaosqV8V6-3ucUR4.roa (hash: QEALuD9emwTtaKDjepBpTR7X0rF/uZcvg9fbjrjCtSw=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: trGY3MM/sBjI1NpnKEsCXg+fH9U358LbqOe6zPcpjGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8d:46:e3:56:ad:a3:48:4d:5f:b1:07:1b:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Mar 25 19:01:29 2026 GMT
Not After : Mar 26 19:01:29 2026 GMT
Subject: CN=6b8440a26067a050594abd6212838b82e236305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:f8:35:40:3e:b0:89:a0:70:a5:c5:f2:d3:
91:b2:a8:2c:d6:7a:91:e7:38:7b:f0:8e:b3:ba:fb:
59:60:38:1e:44:b6:3d:8d:df:30:19:9a:53:98:6d:
50:14:d4:08:9e:76:cc:c8:3b:cc:9e:45:91:ba:7c:
96:a3:d3:ca:7e:9b:76:ea:b5:06:d5:7f:4c:e6:a4:
45:d9:63:a9:aa:36:9b:c4:10:37:25:5b:e6:4e:23:
8b:92:dd:c4:1e:95:b8:76:0e:da:65:1b:41:b0:b6:
be:55:f8:66:bb:ed:91:9d:0b:28:06:b5:60:22:c8:
d5:48:6a:46:86:76:26:4f:a1:bd:b7:33:7d:c9:a2:
69:41:e0:e0:d4:76:05:94:80:05:2c:7e:6c:b2:03:
40:4f:70:88:5e:fa:ce:2b:47:18:5e:b4:e0:a4:56:
e1:07:20:f2:76:df:a7:2f:e4:41:3f:48:4f:e0:46:
e8:f9:71:83:3f:d8:ec:0a:68:16:c0:39:c3:ad:21:
ef:c1:47:71:43:2a:aa:da:3b:92:c2:ba:81:0d:0d:
0e:01:6b:25:da:57:a5:9c:47:05:aa:76:b7:6b:43:
b0:45:69:44:c9:f3:22:f6:de:02:f1:44:43:21:ba:
c4:6c:8e:b5:3e:24:68:bc:c9:0c:b8:71:9b:06:77:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:40:A2:60:67:A0:50:59:4A:BD:62:12:83:8B:82:E2:36:30:5A
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:83:c4:11:33:df:ce:e4:76:dd:2c:48:62:08:87:0c:34:15:
2a:d2:57:72:b5:9c:eb:65:9e:c4:69:cb:ea:12:4e:dc:ed:4b:
ea:96:06:e1:38:91:91:ae:d3:0d:a9:1c:8d:93:8a:c6:7b:49:
07:06:98:05:af:9d:26:92:08:66:bf:e1:24:76:73:6a:8e:5b:
f0:f5:1a:b9:ca:39:bd:e8:6a:44:c0:6a:50:12:e3:b7:3b:ff:
1e:9b:f3:95:8c:99:7e:ed:b8:9d:af:6b:32:ea:9d:f0:56:cd:
df:0b:ff:e5:ff:f0:b9:c3:69:48:ad:39:01:2e:9c:d5:a0:e1:
c9:03:82:be:69:ea:d7:c5:f9:bc:6f:22:f5:db:4e:0e:62:1c:
6c:15:5b:03:ab:3f:c1:52:b5:05:a2:01:02:52:49:3b:81:21:
0d:f5:5c:5a:4a:0f:b8:31:b3:f2:d4:f5:77:81:68:63:04:fb:
13:eb:54:fb:09:ad:af:d8:b1:3b:d4:a4:b6:b3:41:7a:e9:c3:
88:68:fa:ca:a2:3c:72:d9:d7:a3:6e:01:61:39:62:f9:4c:7c:
24:b5:bb:28:cd:f4:ee:bf:2b:36:2f:e8:c6:d7:96:59:e2:74:
de:19:58:d7:dd:f7:d7:e0:b4:c2:fe:a6:de:52:90:d1:2f:91:
db:0c:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:48 2026 by rpki-client