
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: FRYGLkcDRteLvxdurY0EX2l+w7Y5Qv9lQuISennZj/Q=
Subject key identifier: DD:1B:31:20:59:F6:D3:DE:46:64:80:94:6E:27:13:D7:7D:B2:9C:89
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 019D29973C39BE2F93B61C56A085B923505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 10:01:10 +0000
Manifest this update: Thu 26 Mar 2026 10:01:10 +0000
Manifest next update: Fri 27 Mar 2026 10:01:10 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: CDHFfUcRQ8cAI6xfKAAHP/EmU9lqvnXoeufq3rx5OPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3c:39:be:2f:93:b6:1c:56:a0:85:b9:23:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Mar 26 10:01:10 2026 GMT
Not After : Mar 27 10:01:10 2026 GMT
Subject: CN=dd1b312059f6d3de466480946e2713d77db29c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:b7:9f:bc:58:de:41:f4:6a:d7:e2:be:ad:
4a:c4:b7:90:6f:1e:81:01:6c:52:96:23:65:e6:34:
2b:5f:92:8b:ad:9c:d6:ec:9e:86:7e:c4:57:d7:5c:
a5:36:f0:d0:ce:69:27:78:70:37:84:31:1d:08:41:
7f:f7:6d:41:d2:65:3c:04:b2:f0:0b:32:48:ed:18:
87:c8:38:70:56:2c:f4:bc:c9:9e:a5:4f:48:fb:fd:
bf:10:6e:c8:47:1a:2c:67:a7:7c:1a:7c:2d:8e:56:
5f:0b:ba:e8:bd:5f:ec:08:b1:d5:dc:40:bf:b8:4d:
d1:f2:61:a4:12:c2:8a:0d:8c:63:8d:fa:23:ac:57:
95:22:40:fd:50:05:07:7a:d3:ff:69:10:41:bd:e9:
ff:59:fb:2a:b4:b3:6f:9c:0c:93:5c:38:40:14:e9:
42:a2:ad:ba:36:af:9d:52:50:04:19:e0:67:0b:da:
a6:04:9c:19:c3:dd:18:56:65:9c:f2:e0:a4:cb:a3:
83:a4:db:32:2c:39:74:a3:a2:24:9e:85:17:f4:0d:
ee:19:0c:d9:9e:69:ad:a7:90:d2:e8:a2:be:c8:ad:
ff:7c:72:54:43:87:2e:1c:5f:41:17:f4:fa:90:08:
a1:0f:7b:27:04:7c:9c:ed:31:66:c6:5f:5f:f0:fb:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:31:20:59:F6:D3:DE:46:64:80:94:6E:27:13:D7:7D:B2:9C:89
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:0e:7b:28:a9:38:34:49:15:a8:07:d7:82:b7:51:78:11:
0d:4d:bb:aa:0c:d1:bb:d8:ce:73:67:bd:29:0b:a6:2e:ae:da:
16:c9:fb:3c:ef:99:3d:c1:52:68:eb:60:1e:68:83:19:5a:8a:
8a:d7:93:3e:bd:8e:71:82:06:d6:92:ce:9f:35:86:df:30:0d:
61:13:97:13:53:f4:c5:07:01:ee:73:3c:f4:bd:07:a1:d0:aa:
8c:07:00:cc:3a:3f:7f:ac:7d:05:64:e5:6a:38:d7:dd:5c:65:
0a:b7:85:cb:7e:75:94:20:08:57:54:dd:23:d1:df:19:df:8c:
15:2d:95:1c:9b:d7:eb:b7:a7:3c:51:a9:9c:fe:81:41:1d:29:
b6:74:73:e7:da:ab:d0:1b:c7:b4:50:a2:f1:cb:03:d4:1e:d5:
b7:fe:21:ad:64:66:15:70:b3:26:4c:3d:08:ef:93:13:62:ed:
33:7f:40:66:7f:00:f8:7f:c9:69:df:12:7b:45:9a:2d:be:d1:
a7:8e:18:da:97:99:8e:47:39:a0:0d:88:95:83:2c:b3:f7:6f:
2f:14:d9:a7:d4:5a:96:4e:17:05:c8:1e:a7:20:ef:f3:dd:83:
1d:10:91:0d:37:8b:21:b0:ce:b9:74:8a:1c:6d:d8:44:8f:d3:
87:22:09:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plzw5vi+TthxWoIW5I1BfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl
NjE4YmYwHhcNMjYwMzI2MTAwMTEwWhcNMjYwMzI3MTAwMTEwWjAzMTEwLwYDVQQD
EyhkZDFiMzEyMDU5ZjZkM2RlNDY2NDgwOTQ2ZTI3MTNkNzdkYjI5Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdi3n7xY3kH0atfivq1KxLeQbx6B
AWxSliNl5jQrX5KLrZzW7J6GfsRX11ylNvDQzmkneHA3hDEdCEF/921B0mU8BLLw
CzJI7RiHyDhwViz0vMmepU9I+/2/EG7IRxosZ6d8GnwtjlZfC7rovV/sCLHV3EC/
uE3R8mGkEsKKDYxjjfojrFeVIkD9UAUHetP/aRBBven/WfsqtLNvnAyTXDhAFOlC
oq26Nq+dUlAEGeBnC9qmBJwZw90YVmWc8uCky6ODpNsyLDl0o6IknoUX9A3uGQzZ
nmmtp5DS6KK+yK3/fHJUQ4cuHF9BF/T6kAihD3snBHyc7TFmxl9f8PuoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0bMSBZ9tPeRmSAlG4nE9d9spyJMB8GA1UdIwQY
MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt
OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm
LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwMOeyip
ODRJFagH14K3UXgRDU27qgzRu9jOc2e9KQumLq7aFsn7PO+ZPcFSaOtgHmiDGVqK
iteTPr2OcYIG1pLOnzWG3zANYROXE1P0xQcB7nM89L0HodCqjAcAzDo/f6x9BWTl
ajjX3VxlCreFy351lCAIV1TdI9HfGd+MFS2VHJvX67enPFGpnP6BQR0ptnRz59qr
0BvHtFCi8csD1B7Vt/4hrWRmFXCzJkw9CO+TE2LtM39AZn8A+H/Jad8Se0WaLb7R
p44Y2peZjkc5oA2IlYMss/dvLxTZp9Ralk4XBcgepyDv892DHRCRDTeLIbDOuXSK
HG3YRI/ThyIJ6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:51 2026 by rpki-client