Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: jO4rtc5IKbMm18Rlb3bimD8RFeMb6duwRRWNxNDVU8s=
Subject key identifier: 2F:56:A1:58:A1:1B:D2:07:0C:1E:CA:74:F1:80:6A:A5:DE:99:0C:32
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019D2A04D08639CDCDF5F754AE8ADBFDAA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0BDF
Signing time: Thu 26 Mar 2026 12:00:51 +0000
Manifest this update: Thu 26 Mar 2026 12:00:51 +0000
Manifest next update: Fri 27 Mar 2026 12:00:51 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: m2Vg/b4t2ifeKIvqtNuKXilsS1T28BbKFURLx32B7pI=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d0:86:39:cd:cd:f5:f7:54:ae:8a:db:fd:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Mar 26 12:00:51 2026 GMT
Not After : Mar 27 12:00:51 2026 GMT
Subject: CN=2f56a158a11bd2070c1eca74f1806aa5de990c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f5:56:98:a2:3b:82:66:b5:10:42:32:43:b1:
0c:ca:a4:c5:f5:a3:a8:82:56:a6:a4:00:a7:50:48:
32:35:ff:83:ab:5b:6c:33:7b:0a:75:ec:ec:ea:a9:
39:3e:c4:4f:16:ee:4c:d3:5a:db:c1:31:96:97:48:
5e:02:1e:a9:0e:5f:a1:82:6a:7d:9a:64:ec:fc:17:
18:38:54:86:ff:89:81:ce:0a:67:72:16:87:03:0b:
3b:f6:b8:b6:b0:68:b0:0b:09:df:13:28:cf:9a:01:
7b:d3:da:50:da:f5:a0:c8:86:1e:43:6b:af:e5:60:
91:2e:d4:42:22:2c:2d:fd:6c:80:86:41:1b:4f:a8:
d0:b7:28:c6:59:ee:9c:b7:8a:3d:fb:38:32:06:96:
6f:c1:18:fe:a1:e6:ea:dd:cc:b9:e4:8f:7a:43:d5:
f8:03:f8:f7:f4:29:29:a9:dc:a6:92:8e:d2:ac:c6:
58:22:f6:3d:36:ae:ab:0b:ff:d8:b3:9e:ae:58:47:
72:31:0c:59:5b:e6:30:8c:11:fd:5d:de:57:c4:60:
74:24:0d:1a:61:d7:2c:26:00:2a:66:09:75:3c:7e:
35:30:25:b2:ba:0b:a3:85:f6:78:11:c2:f0:37:c7:
7a:0c:9b:10:1e:3b:d0:71:2f:da:aa:22:7e:10:22:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:A1:58:A1:1B:D2:07:0C:1E:CA:74:F1:80:6A:A5:DE:99:0C:32
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:17:6b:ba:7c:55:ec:fb:25:b5:e6:e4:46:6e:68:6c:7a:aa:
36:16:b1:0e:d0:20:5d:f9:c3:89:01:15:38:0a:5f:3e:19:05:
86:23:ea:86:7a:be:4d:e0:53:5a:77:25:76:cb:98:52:b9:5f:
9a:99:a8:07:f1:d6:92:ca:d7:03:09:c1:c5:7d:fe:ca:74:f4:
3a:2d:01:b8:c8:45:e9:59:9a:bd:ff:e4:74:22:5c:ef:ad:af:
0f:05:df:59:43:2b:be:36:d2:69:7a:74:38:c7:45:48:fd:c3:
56:ae:46:83:de:e2:a8:33:f7:1f:41:a4:40:05:4d:06:26:c5:
c9:fa:02:6f:f2:72:de:a6:0c:0d:7c:58:3c:3f:3e:42:50:ac:
79:a8:48:8c:a9:ef:57:e8:fe:ef:42:98:bb:4e:dd:d9:21:61:
44:1d:b1:05:02:71:be:f6:6d:2f:a5:66:60:47:0a:4a:52:9f:
46:bc:66:c8:2b:81:4e:1a:01:4c:f9:d5:db:f8:9e:dc:a7:a9:
cf:8c:db:fd:fb:8d:13:34:f8:3d:c8:da:df:65:56:ce:4f:93:
1e:21:7b:4c:e6:ec:eb:9d:0b:e3:7d:a8:e4:dc:c5:76:d9:22:
95:2d:39:2a:b0:9b:d2:0c:41:87:2e:2b:f4:00:83:4b:86:b3:
1e:d5:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:35 2026 by rpki-client