Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: C5l8vRt8oXYcBoBB2N+K8x24Zt9M/g77H+dfYqcjzxQ=
Subject key identifier: 68:CF:94:51:61:E2:B0:46:6C:BD:D1:E9:C5:63:A7:CB:7D:EF:89:D5
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 019D337604709FE3BFE402EA73F1F2572FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 1004
Signing time: Sat 28 Mar 2026 08:01:05 +0000
Manifest this update: Sat 28 Mar 2026 08:01:05 +0000
Manifest next update: Sun 29 Mar 2026 08:01:05 +0000
Files and hashes: 1: _gW6_ATArxZNHvgaWQ05KuNKBX0.roa (hash: dFaWNsbS79y0+AVBCBe7DvN6VorOmUFS6jQbSvd7JW4=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: hfmUgEHWXHMlb++Z3srrR89B2KFY27gh64DAmR/Lh+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:04:70:9f:e3:bf:e4:02:ea:73:f1:f2:57:2f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Mar 28 08:01:05 2026 GMT
Not After : Mar 29 08:01:05 2026 GMT
Subject: CN=68cf945161e2b0466cbdd1e9c563a7cb7def89d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:1d:85:66:35:b9:8e:54:26:81:e6:d8:25:
4a:ae:3e:7d:83:53:82:37:bb:bd:51:ec:09:b8:04:
be:da:83:96:b4:2e:71:a7:24:a2:38:a5:f8:62:d8:
7c:52:55:4a:b7:99:de:32:7c:78:bf:c9:72:18:e0:
af:6b:47:50:10:f1:89:25:40:0d:ea:dd:bf:8c:5c:
f1:03:33:cf:d2:c5:84:29:fc:f8:91:88:c4:22:52:
fd:c2:05:5f:47:5b:3a:d7:34:69:a3:e6:48:c3:96:
9c:5d:f3:c0:ad:4f:63:7c:8b:55:84:a7:7f:0e:ba:
63:7c:97:47:0b:af:d4:dd:a9:c2:57:76:40:e3:75:
2f:44:12:68:85:79:4e:30:81:c4:f3:84:9f:7b:18:
bb:cb:9f:90:b5:8e:87:4f:32:95:4f:ef:fe:a7:9d:
6e:5b:c5:0d:e6:58:b7:ad:6b:c7:fc:c3:2d:d1:0c:
f1:8a:4a:75:03:a4:a8:c3:d3:24:b5:bb:e5:b1:50:
90:24:38:be:e6:99:19:99:e3:bb:67:6e:b2:aa:71:
64:79:cb:75:ed:25:15:5a:2a:76:3f:d5:0d:70:19:
0e:2b:16:32:ad:b6:58:dc:28:e1:a8:76:62:04:96:
a1:39:ed:7e:46:c9:0c:5f:05:f7:a4:2b:3a:e3:7a:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CF:94:51:61:E2:B0:46:6C:BD:D1:E9:C5:63:A7:CB:7D:EF:89:D5
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:77:fc:93:3b:e5:4a:ad:e9:2d:d0:0f:e5:e9:a7:e0:5e:ea:
25:f1:a8:45:6a:68:ed:64:ab:1a:57:f5:4b:26:de:dd:84:e9:
a0:db:f9:ce:10:fa:92:bd:b1:8e:cd:02:3c:4c:45:7c:82:35:
b8:34:2f:5b:d4:0b:23:08:c9:9d:b8:df:d6:9a:9c:8e:ff:fc:
8f:0d:48:b4:ca:25:b5:cc:52:43:9d:ba:de:f5:ab:f9:0d:2e:
0c:ee:b4:64:63:50:19:a0:56:cc:94:1d:18:44:b9:db:27:52:
5a:69:07:db:60:2d:2f:6f:95:d8:7a:9d:9a:98:95:6c:49:31:
65:df:9d:33:48:64:3b:ef:c4:5f:b0:8b:15:b0:d2:d4:b8:e4:
2b:35:68:3e:6d:01:f0:7f:77:e5:1a:7c:13:86:64:c1:26:f1:
79:af:12:8a:4c:e1:15:7d:77:a1:a2:54:be:01:01:cb:18:aa:
7c:d4:b9:12:46:77:ed:2e:4b:fd:81:0e:95:2a:a8:3a:1d:9d:
d4:b3:06:f0:79:fa:c3:d1:fe:80:ea:a9:37:07:ed:41:70:3f:
1a:cc:6a:8a:fa:51:6f:5a:00:b5:14:4a:54:d6:1d:5d:f1:79:
26:8e:94:4a:d1:fc:ea:6d:bb:ad:ea:cf:fc:7f:42:05:15:94:
64:03:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:24 2026 by rpki-client