Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File: svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier: dZQ3TWo8CzGq7Ge3eF9niVjxUqbYJ5ZZ4CkYB5SXQ3k=
Subject key identifier: 71:62:D5:B6:86:ED:02:1F:9B:35:78:BD:27:86:86:CB:86:9C:11:EC
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial: 019D2A72519991A6852E4537E2B312CE552B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number: 112E
Signing time: Thu 26 Mar 2026 14:00:28 +0000
Manifest this update: Thu 26 Mar 2026 14:00:28 +0000
Manifest next update: Fri 27 Mar 2026 14:00:28 +0000
Files and hashes: 1: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (hash: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc=)
2: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: u0RzO+obMcm7jfzyNEy4BBMGDVNDqGwzBS58zGl3xkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:51:99:91:a6:85:2e:45:37:e2:b3:12:ce:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
Validity
Not Before: Mar 26 14:00:28 2026 GMT
Not After : Mar 27 14:00:28 2026 GMT
Subject: CN=7162d5b686ed021f9b3578bd278686cb869c11ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:f9:3c:9e:cb:38:81:04:cf:bd:bf:ae:47:
21:cd:30:02:20:dd:a0:2e:de:01:b3:4b:6f:15:69:
e1:64:bd:eb:d0:b3:18:8e:6f:c0:b0:12:8c:f9:fc:
e7:e4:d1:03:17:95:6a:e4:87:4d:8c:68:28:ac:33:
05:db:4b:ba:3b:7b:98:d6:02:11:31:7c:3a:2d:f8:
8b:4a:74:f3:5b:8b:c1:03:ba:47:bf:95:92:62:da:
b8:51:e8:f5:1a:92:87:06:d2:de:7a:df:d5:20:6e:
ab:ed:ff:96:98:1a:10:fd:07:bc:de:17:e7:f4:fa:
31:f9:af:be:ce:ae:21:1d:14:f6:59:29:4d:b4:04:
90:85:ea:14:b9:14:c2:39:8b:f3:a7:15:46:ba:69:
e8:21:cf:df:a4:9c:a4:52:d0:c3:7e:97:6e:c4:6b:
21:07:53:c5:1a:c3:8a:92:45:7f:0e:2a:83:d3:b3:
c9:7d:aa:1f:d7:87:72:a8:66:40:a2:ba:01:43:7e:
af:a3:90:06:fc:e4:c7:18:51:8f:b3:1d:8e:05:37:
85:2b:cd:92:8a:18:00:e8:c9:b4:3c:a6:19:8f:56:
3e:36:5c:a4:d5:cc:13:74:d0:ff:6b:c1:cd:c2:6a:
39:7b:bb:7c:86:e0:e9:06:bc:b6:00:43:3f:6f:f7:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:62:D5:B6:86:ED:02:1F:9B:35:78:BD:27:86:86:CB:86:9C:11:EC
X509v3 Authority Key Identifier:
keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f6:9d:82:fc:c2:35:4a:43:04:0d:ca:0b:f9:b3:ef:79:65:
c5:fd:cb:f2:d1:59:47:c8:5e:2d:e4:40:95:f7:63:2c:77:1d:
39:4d:07:0f:be:35:78:cd:7b:5c:e3:54:0a:2f:95:85:77:e2:
3a:56:76:0d:2e:47:af:12:a3:77:15:98:f2:e1:28:49:5b:53:
8e:e7:c1:c9:e0:0e:cf:71:a4:9c:03:d0:b6:de:20:1a:c9:c8:
75:c3:ac:3b:ed:f7:3a:ab:84:be:d5:e4:ec:7f:9d:80:56:70:
6d:b3:0e:2f:06:9a:c4:63:d6:32:e6:ed:aa:2e:4b:11:6c:c7:
8b:39:0e:cf:5e:f0:04:1f:71:34:29:07:b6:5c:32:a1:8f:61:
10:df:cd:a6:c2:1a:47:8b:55:5e:62:3f:de:82:7e:f7:32:ec:
b3:40:35:24:a3:2a:ea:cb:bd:61:5a:ec:a0:4c:37:13:e3:9e:
4b:9a:0b:e5:0b:74:0a:d5:dd:08:73:cf:e0:8d:fd:70:83:ae:
f8:70:bb:26:be:44:0e:e2:bc:e5:38:14:b2:cb:c0:90:a4:57:
96:d9:8d:aa:4a:da:1b:2a:38:c6:89:2c:0a:ec:65:6e:1a:99:
82:8f:20:25:60:e1:a4:df:fe:63:5b:44:fd:90:90:23:d9:f5:
a7:a9:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:50 2026 by rpki-client