Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: Ak9lvF3uJ9aOwS2abFajyrD6KSYBgmjTCFyEc7z+i6U=
Subject key identifier: 02:86:6C:9D:A6:F0:A1:67:8C:16:89:58:73:01:9B:6A:1E:F8:10:1B
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019E1F11482711763FCDBFC107BBB167073A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1727
Signing time: Wed 13 May 2026 02:01:26 +0000
Manifest this update: Wed 13 May 2026 02:01:26 +0000
Manifest next update: Thu 14 May 2026 02:01:26 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: vUoodtz+Mr+JyMTZk34pdF8kiL9UWnWulgWCuUy9GXw=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:48:27:11:76:3f:cd:bf:c1:07:bb:b1:67:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: May 13 02:01:26 2026 GMT
Not After : May 14 02:01:26 2026 GMT
Subject: CN=02866c9da6f0a1678c16895873019b6a1ef8101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:6a:be:ea:af:8f:fa:fa:47:aa:39:58:b7:
31:c2:62:ce:ee:67:61:df:9b:08:78:a5:b4:66:20:
09:c9:d2:48:14:31:00:1f:1f:2f:34:af:73:bc:f3:
69:d2:10:af:09:1b:2f:3b:9f:e6:06:7f:8f:a4:22:
83:28:b9:17:aa:c0:75:5b:0a:c5:b5:14:26:58:47:
e0:41:cb:78:62:f3:cd:08:83:b6:cd:e1:29:96:d5:
5a:57:8e:ee:d3:8e:3a:44:2d:61:44:9b:8e:d2:b5:
5d:cb:33:69:90:5f:eb:e2:71:c0:c2:75:f1:ef:a5:
94:39:c6:ab:92:2a:22:6b:51:ef:76:dd:34:fc:3b:
a7:9d:d1:86:d9:0f:fc:30:de:00:f0:0f:9d:2b:95:
39:d0:b6:40:f2:bb:66:77:6a:84:62:0e:7f:f5:55:
25:09:12:0d:48:b1:36:dc:b3:05:3d:61:ef:bf:30:
1c:7a:e6:4c:5a:16:10:4b:89:14:e8:f6:ca:cd:f0:
ed:a6:b7:45:1c:3f:50:2e:6c:80:22:04:08:ef:89:
1a:f5:21:2a:b3:34:c4:ea:60:2f:98:be:3f:97:53:
8d:49:cb:96:4d:98:b2:1f:0e:29:fd:75:9e:62:05:
57:a6:47:cd:f6:2c:f7:15:d9:e6:27:63:46:30:cf:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:6C:9D:A6:F0:A1:67:8C:16:89:58:73:01:9B:6A:1E:F8:10:1B
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ab:53:9f:23:d9:dd:90:5e:88:64:4d:a7:0b:52:4a:e4:72:
cd:1b:f1:31:e8:46:21:5b:cd:67:ab:fe:2e:cb:c8:54:97:27:
45:21:ae:8a:25:15:b1:1b:54:f4:dd:0a:29:d4:8f:26:34:55:
06:8b:c3:e4:0f:75:16:f9:c0:5a:58:cb:8b:56:79:a6:e0:d5:
ff:8b:90:18:8e:18:cb:bd:90:99:3a:8d:0e:e2:0e:6a:be:24:
e6:05:7a:7c:5d:c8:41:0a:45:25:c0:c9:75:70:b5:f1:74:67:
6f:21:d1:c3:38:60:ef:83:4e:52:3c:dd:16:a3:f9:39:05:64:
dd:8a:ad:85:12:24:b2:80:ec:b1:52:2d:71:64:17:4e:71:73:
2d:d2:48:5e:15:3c:cb:e0:d5:98:48:8b:56:68:47:51:a3:be:
93:59:1e:37:7e:9b:88:18:1b:ec:bd:98:32:3f:29:00:f0:35:
f1:5f:23:8a:cd:8d:51:ba:81:b7:34:24:33:3e:c7:4d:0b:f1:
d1:75:47:1c:32:a9:da:fc:53:4c:33:80:af:15:b8:6d:22:04:
16:c8:2b:57:6c:73:10:d7:61:e3:98:8e:5f:dd:82:cf:6f:83:
73:f0:c7:03:51:c1:71:a8:a8:7f:a5:e2:14:1c:60:46:66:47:
90:b3:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:50 2026 by rpki-client