Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: WBKiHcWRSsGDvEcyC5xFWaGABUD1ayYM0UfYVicWw8M=
Subject key identifier: FC:9E:26:8D:83:87:4A:9E:86:51:7E:9D:FC:0D:11:60:E0:BD:C2:D4
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 019D2BBBE85A6729294B2A7B19C5A7C46857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 20:00:28 +0000
Manifest this update: Thu 26 Mar 2026 20:00:28 +0000
Manifest next update: Fri 27 Mar 2026 20:00:28 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: efXS6ecv090mlP1f7G2jKkmQ+exQPAzQyuCsc07w140=)
2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:e8:5a:67:29:29:4b:2a:7b:19:c5:a7:c4:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Mar 26 20:00:28 2026 GMT
Not After : Mar 27 20:00:28 2026 GMT
Subject: CN=fc9e268d83874a9e86517e9dfc0d1160e0bdc2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:86:8c:95:0e:54:13:1e:ee:94:76:fc:28:
d9:98:d6:00:14:c2:76:9a:66:f7:3f:31:fb:c5:d0:
7a:ae:ea:83:af:14:f4:8d:c4:a7:42:b8:f6:39:d2:
a4:f7:34:ad:27:16:a9:86:7a:bc:e3:80:07:9a:f4:
7c:ee:e2:f0:5e:3e:aa:df:dd:73:b8:71:6f:b0:9e:
45:e8:7c:be:fb:46:d7:e6:2c:d1:d9:1d:82:71:2f:
27:f8:b4:fc:9e:d8:48:1f:f4:68:33:10:82:ee:4b:
25:48:b9:46:98:a3:5d:87:6b:a2:bb:bb:55:ef:7f:
e4:16:6b:35:0b:6b:75:c0:10:0e:7b:12:a7:10:b7:
d8:fb:84:e0:ce:d9:a2:67:36:a9:f5:ac:fe:18:5e:
d5:f4:2f:75:0d:67:66:24:c3:dc:70:bf:5e:e8:0e:
fb:47:6e:2a:72:51:5b:dd:16:18:54:b9:0f:9e:95:
c7:95:5a:61:6e:2d:f5:34:c4:e8:5d:b9:6c:61:db:
7f:77:e4:66:9f:b9:5c:0b:12:de:49:8b:04:ec:f1:
14:a0:01:6b:69:ac:b7:bf:2e:53:b6:31:64:df:91:
8d:0a:a1:b5:ce:86:dd:b3:c9:34:97:94:30:ed:2e:
72:86:a0:3c:ee:d9:fe:be:c2:a8:50:c9:52:22:4e:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:26:8D:83:87:4A:9E:86:51:7E:9D:FC:0D:11:60:E0:BD:C2:D4
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6c:21:47:8c:a7:85:76:55:14:3c:b2:fb:fa:e7:a9:3b:62:
6a:a4:ce:30:b2:48:d1:11:22:7a:33:ef:a5:8e:03:f3:ff:0c:
0e:5b:c7:3f:ab:01:09:9a:94:4f:b4:e2:1e:ef:01:e5:5b:8a:
85:3a:17:db:c9:41:44:76:bb:cb:c7:d2:39:a9:3e:8a:07:0b:
d0:19:fd:d4:07:cc:ba:74:f6:36:3f:21:25:fe:7d:5e:4a:64:
23:83:51:fd:19:44:4b:cc:a3:37:08:16:cc:24:8f:24:d9:c9:
b5:08:25:24:29:89:af:1e:af:94:5b:5c:6a:13:ea:2a:ea:c9:
6f:cb:71:2d:f9:77:fa:73:ad:ae:b3:24:b8:eb:4f:19:fc:ad:
4f:3e:59:9b:98:7d:ce:8d:67:8d:32:cc:8d:94:c3:0b:7d:4e:
b3:a9:86:91:05:91:da:9b:10:c4:6e:a9:ac:46:02:e0:15:92:
bc:92:27:19:0d:07:2b:5a:07:10:ba:02:b6:24:92:f8:bb:0d:
7e:b2:7d:c3:fb:3a:dc:6e:0c:b2:d0:46:f8:b8:a6:08:67:41:
0c:70:a5:d6:e6:ec:bb:99:b5:c4:05:ad:9c:6e:75:b4:ff:f7:
b8:67:e4:cd:24:c0:9f:b7:0b:89:d2:5a:d3:fd:32:18:25:9e:
53:dc:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:27 2026 by rpki-client