Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
File: 6Vv1iCFn0VKIW0akbDYJbscsEOg.mft (raw, json)
Hash identifier: LHc6hl1mGQ39nQLiJoar3K4ptfFQpYtKi2xgCujY2zc=
Subject key identifier: BA:90:6A:E8:67:09:A0:A8:BB:DC:E0:8D:30:7B:2C:05:AF:39:8D:86
Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
Certificate issuer: /CN=e95bf5882167d152885b46a46c36096ec72c10e8
Certificate serial: 019D2B171A79DE27E53B4C1A6F44C26A17CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
Manifest number: 0281
Signing time: Thu 26 Mar 2026 17:00:27 +0000
Manifest this update: Thu 26 Mar 2026 17:00:27 +0000
Manifest next update: Fri 27 Mar 2026 17:00:27 +0000
Files and hashes: 1: 6Vv1iCFn0VKIW0akbDYJbscsEOg.crl (hash: Utb/iX6/aopLMMku6ENNzs8NoTePMnpVBYu6V/4z5n8=)
2: lsqyIsBpeXNcnzeA__pb_tIJpCw.roa (hash: HoC4xWQnoAYB+cqd8waKYlqr45hX2BtPdIJZjs3Wcow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:1a:79:de:27:e5:3b:4c:1a:6f:44:c2:6a:17:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8
Validity
Not Before: Mar 26 17:00:27 2026 GMT
Not After : Mar 27 17:00:27 2026 GMT
Subject: CN=ba906ae86709a0a8bbdce08d307b2c05af398d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:c0:9b:ed:1f:dd:77:c4:d1:be:2e:1e:74:
61:9e:7d:a5:75:24:4e:c3:de:fa:ff:e2:ca:ac:ca:
8f:0d:39:72:ed:9d:0d:46:cf:2e:37:6d:86:18:1d:
20:12:c9:19:7c:a8:16:8f:72:e0:c0:d9:f1:b1:cc:
df:9c:99:35:e4:cb:9f:3b:d2:a8:88:f3:19:fd:a9:
b1:d3:d9:0c:43:db:f7:a3:58:e1:e0:1d:45:fb:6a:
5e:28:b1:3b:81:14:89:f6:c7:03:f1:f5:fc:8f:5e:
09:02:d9:01:a1:36:b8:49:0b:c3:68:6b:5f:4e:2d:
61:a2:04:e5:00:1e:23:26:c6:de:45:ad:e5:30:5d:
3c:24:3e:1a:0f:9f:ff:0a:84:c8:f8:59:ac:4e:2b:
aa:bd:80:9a:36:b8:86:a2:e6:eb:fb:0d:cc:c8:eb:
b3:82:7d:be:1d:8f:6b:aa:e5:cb:2d:cf:3a:3f:05:
7e:59:0e:82:78:d3:4f:5f:cc:f0:db:98:3a:d1:7f:
19:d1:e4:d0:88:f6:13:6c:50:3a:e6:f4:6f:ab:4b:
5d:3e:82:04:76:a5:83:8b:a6:f9:80:52:2a:35:57:
c8:52:d1:ed:63:f1:e8:21:6b:ea:1d:b9:42:52:87:
d9:77:35:f1:a5:56:24:71:35:26:96:f0:66:bd:58:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:6A:E8:67:09:A0:A8:BB:DC:E0:8D:30:7B:2C:05:AF:39:8D:86
X509v3 Authority Key Identifier:
keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:25:ed:c2:80:99:84:23:42:b6:05:13:13:2c:ca:9a:d8:24:
ed:50:82:ae:ac:6b:7f:76:cc:4f:40:4e:61:aa:d0:88:db:f1:
ae:d3:65:a4:1e:b9:b0:b9:76:15:01:06:67:85:f9:28:e4:1a:
2e:65:3d:9e:a8:d5:b1:65:7c:b8:98:1b:e7:b4:a4:0e:a7:b7:
05:e2:9f:d2:76:b1:a1:39:31:08:34:f8:1e:46:45:4e:f6:5a:
a3:7e:4a:e5:0e:e0:b6:9a:85:37:bf:e2:50:27:db:3a:c5:fe:
1f:bc:26:ff:10:02:b2:f9:d4:ec:db:ab:2d:38:37:2b:a3:d0:
98:35:d7:36:67:84:03:96:a1:68:2a:7c:92:17:45:05:08:a8:
73:ca:a0:09:62:77:8a:96:84:36:33:28:6d:7b:d9:20:0d:f7:
2f:28:56:bb:11:03:fb:42:59:b5:0e:69:dc:1f:5f:b4:86:80:
f2:d5:a5:1b:76:77:4b:ae:3c:9b:39:18:c9:62:54:1b:43:e4:
13:5e:bd:18:59:38:af:a5:4b:c0:3f:94:0e:7c:96:8e:fb:19:
b7:60:f5:41:37:0b:ca:d8:a3:57:fd:cd:c8:ef:ca:97:77:98:
42:a3:9f:f4:45:de:17:76:ee:04:c5:49:ee:dd:ce:1f:31:f3:
66:dd:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:18 2026 by rpki-client