Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: YnBXn5BeFyhXfWuRJN6fUU99y+WUNL3G9UuS6twUTaw=
Subject key identifier: DF:F3:B6:81:0C:5F:16:DB:5C:81:8F:73:21:67:C3:1B:AC:7B:91:4F
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019D2884772C8359296A9FEB5DF8AA596609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 16CB
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: A5BE6wSmyNYxiJGdnRcT09KNCYGY4BIxghs9w7/8Foo=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:77:2c:83:59:29:6a:9f:eb:5d:f8:aa:59:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=dff3b6810c5f16db5c818f732167c31bac7b914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:57:f3:4a:96:c2:9c:52:73:86:bb:19:84:
cb:d0:5d:20:63:a3:c7:a8:aa:a2:50:da:f0:f4:cd:
45:0c:eb:91:e7:11:21:96:a2:b9:8d:9b:23:be:5e:
9b:77:f2:bd:1b:e7:f3:2f:bb:00:d1:63:4a:5f:61:
9a:be:b4:5b:6d:6d:cf:e9:7c:4b:56:4e:eb:1f:a1:
ab:e4:bf:74:2f:4a:ec:e0:ed:a4:d1:2d:d3:7a:6f:
1a:31:3e:27:26:e7:0b:d8:ac:fb:55:cf:40:7c:d0:
3f:2e:d5:15:b6:37:f8:df:a3:a5:7f:67:ee:91:8a:
a0:21:6d:a5:3e:0c:72:7c:f5:3b:2b:59:72:9c:f9:
1c:16:1c:39:e6:68:a2:46:f6:7d:5f:f8:3f:41:bb:
ac:6b:19:57:27:80:61:7b:0e:7b:2e:6e:96:29:54:
ca:66:38:3c:02:95:33:b7:79:2a:cb:33:72:10:27:
99:81:ef:8a:a2:a6:58:d3:6b:ef:fa:c1:a1:fd:f1:
1d:59:6f:62:9a:9a:bd:9d:6e:ff:55:06:3a:74:d0:
47:c6:24:05:4b:6c:70:16:ea:6b:97:0e:88:c0:07:
be:c4:ce:cc:b8:85:c9:bd:55:e2:aa:96:63:dd:f2:
76:4c:79:ac:ad:92:c1:60:71:ad:41:19:c9:42:49:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:B6:81:0C:5F:16:DB:5C:81:8F:73:21:67:C3:1B:AC:7B:91:4F
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c5:d4:d8:4f:3a:0d:7f:ce:c4:e4:a4:80:35:48:53:76:d9:
86:09:7f:58:eb:8f:19:5e:4f:90:91:c5:a9:ec:63:a6:43:3c:
54:f7:b9:91:4f:ab:9f:0e:95:c2:95:0f:14:79:7a:e8:96:38:
89:da:d7:cf:8e:2d:8e:8f:80:ee:1e:7d:e8:10:42:0c:73:88:
96:96:45:7c:ef:9a:a4:97:2f:3d:47:ad:a8:d5:8b:63:f9:13:
fe:12:9c:e6:81:ef:7a:35:e5:d3:9a:1c:d4:f9:b1:ae:e7:23:
8b:3b:36:c9:69:ac:8c:3c:74:2c:2e:2c:b8:2e:19:b3:c9:c4:
fb:97:49:b7:fe:1f:64:98:ef:30:46:e0:f4:0f:29:86:81:df:
0a:77:d8:29:75:ff:69:af:10:c0:a1:73:a9:5a:94:f9:6e:31:
7d:b5:10:d5:d3:bf:a9:32:ad:38:5b:54:a9:a6:00:fb:a1:ea:
20:7d:2e:21:a3:36:79:04:94:9a:85:0f:e0:f5:75:13:c1:5f:
59:20:e8:dc:a6:1a:30:01:00:b7:d5:a4:7e:a3:d7:24:e8:72:
19:38:5f:e3:47:8f:48:11:18:aa:c8:be:7e:52:49:0d:09:3d:
30:eb:e5:0a:94:7c:75:b0:49:96:53:90:78:67:fc:c8:2d:20:
60:6a:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:38:33 2026 by rpki-client