Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier: //pIryAsmq4JZMeRYGbhE1e36Kq7acbTTZR6i5OIXbc=
Subject key identifier: E3:DD:56:FC:CC:9B:36:8C:E3:70:55:7D:04:EF:6D:47:7F:92:CE:91
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 019D2A727D57BA247BF623AA5AB74F90C0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 14:00:39 +0000
Manifest this update: Thu 26 Mar 2026 14:00:39 +0000
Manifest next update: Fri 27 Mar 2026 14:00:39 +0000
Files and hashes: 1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: lEgvu8pH1RzFV6xpK7h8Ip3owKYX6xpWT7hccc4QCk8=)
2: WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa (hash: aBowCUk8GvTX31weJsT2u+VJHO3DLPfjbtv1Dgnekcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7d:57:ba:24:7b:f6:23:aa:5a:b7:4f:90:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Mar 26 14:00:39 2026 GMT
Not After : Mar 27 14:00:39 2026 GMT
Subject: CN=e3dd56fccc9b368ce370557d04ef6d477f92ce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:91:e7:7b:41:97:a1:6c:a7:b0:62:c1:c7:
73:07:13:74:ab:7d:87:e2:c8:d3:a8:26:e8:d7:a9:
98:eb:58:50:3f:66:c1:fa:d1:3b:29:57:a5:20:a8:
9a:3f:23:f9:85:39:31:a5:36:d0:02:3c:59:ca:2c:
05:88:32:93:38:70:fe:e4:56:30:d8:37:48:b5:a4:
3c:ea:24:62:3c:a6:b2:b4:ed:52:12:2a:ee:82:59:
51:09:5b:08:64:34:98:24:81:03:9f:51:76:85:db:
67:73:39:e9:43:d4:73:dd:01:2a:c1:53:b4:ad:9d:
72:89:61:fb:4e:96:23:a9:1a:7c:83:71:06:34:00:
bf:82:a9:2c:ce:aa:c2:f3:de:46:15:90:eb:12:8c:
48:ad:7f:54:81:bf:5c:15:63:8a:16:5b:7e:73:2e:
0a:09:d4:b2:c2:38:55:ee:0f:1c:aa:e3:62:0c:b7:
82:97:5b:82:65:41:0d:7f:2a:8f:f4:c5:57:ff:2a:
df:04:6f:c5:6c:ca:92:30:7f:4d:f4:90:e0:4d:6d:
ef:d6:1f:b6:9c:0b:50:ff:13:9c:18:75:f1:a0:27:
72:2e:d3:2c:b5:74:10:ac:f5:e2:9b:54:f9:34:8f:
9f:76:df:1c:7e:8d:7b:c5:3f:d1:38:fc:da:ed:71:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:56:FC:CC:9B:36:8C:E3:70:55:7D:04:EF:6D:47:7F:92:CE:91
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:22:7b:9b:b0:75:5b:a7:f0:bc:33:99:44:ee:65:45:ed:
ac:be:3d:09:a8:36:c0:cc:94:ab:85:ac:a7:f7:e0:b6:1e:4a:
2f:c3:1a:31:4a:17:af:ed:6b:cd:e3:4f:7c:a7:af:40:33:55:
df:61:05:e5:67:e0:9a:92:8b:56:c5:a2:1e:74:41:85:27:06:
3f:2b:ec:e8:64:f8:bd:b9:ec:db:fb:e9:da:27:84:a5:3b:8a:
9b:f9:3e:d9:d7:6d:2a:3a:ec:c6:ba:f3:4d:00:46:c5:d6:49:
ec:24:de:6a:9d:ea:34:cf:55:35:7c:72:e2:00:17:fb:ad:9f:
e3:d4:ae:2a:36:83:0b:80:5e:83:9b:ff:db:74:73:16:4e:b8:
93:b5:61:37:9a:dd:7e:a3:d3:61:7d:9d:ea:eb:52:43:28:c9:
36:c9:38:70:d6:5c:9c:c7:61:5f:8b:58:2a:af:62:00:a1:dc:
92:0d:04:89:d5:0d:bf:45:81:e3:d8:c3:a7:15:1e:78:30:dd:
17:17:86:d5:81:42:94:cf:a0:73:70:e1:25:44:0a:14:40:ac:
9d:7b:71:9c:5d:1e:5a:11:5e:a2:bb:8f:b0:9c:0c:25:ec:41:
28:46:22:b2:39:28:85:db:e0:1a:7f:22:58:9b:72:23:b2:35:
b5:c8:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:06:00 2026 by rpki-client