Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: AAfcRfyXUT2qGuNWykzULZc68KTUY0Vqk68KCWsmZR4=
Subject key identifier: 1D:AC:1B:65:85:3F:2C:D4:83:DA:3E:D0:AB:5F:44:C7:E6:72:4E:B8
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019D29293FB8662AAFE207CFA0B8D6FB3DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 067A
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: VBUGyHmnlMxYRfbCqwRj6ctznA42IUJbbbag/2WrTXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3f:b8:66:2a:af:e2:07:cf:a0:b8:d6:fb:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=1dac1b65853f2cd483da3ed0ab5f44c7e6724eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:de:f8:09:36:fa:8d:1c:35:97:2d:d1:c2:
6b:3c:0e:30:a3:c7:0f:3d:6a:60:6c:00:54:e5:c8:
e9:13:71:ff:37:f2:af:25:2e:28:e6:4b:ec:cd:f8:
03:5f:31:d8:58:3c:dc:aa:34:63:e7:af:ab:eb:f2:
da:4f:fd:fe:04:13:6d:3e:96:1e:ba:8b:06:a8:a4:
b4:d4:38:06:b0:33:3b:bc:67:f8:b2:2c:33:32:82:
e9:a2:2b:56:c8:52:dd:49:43:0f:53:b1:78:f7:c7:
56:bf:01:b4:44:76:e2:a0:c2:e3:86:c0:94:c2:f8:
9e:f5:62:1e:12:0b:a1:f0:a5:e0:d3:70:a6:43:0b:
62:b2:9e:7a:b9:d5:07:2c:c0:a3:cf:e0:f1:db:66:
bf:1c:59:72:b0:c3:2b:ff:7e:1f:54:b2:86:65:ad:
5a:cb:57:48:30:ee:a5:b4:b9:ec:d5:03:2a:42:91:
ef:6c:c8:00:e1:27:8c:ac:1a:1c:b3:65:2e:77:b1:
95:fb:b2:da:e4:8d:8a:c7:f6:d6:7b:c1:05:9e:77:
6d:db:fd:32:d1:9e:a8:77:a9:90:81:12:d3:00:23:
aa:56:05:2f:57:30:ad:f5:11:de:83:78:de:b4:91:
13:8b:f9:cb:47:b6:09:b2:50:ce:8f:8e:6f:6a:97:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AC:1B:65:85:3F:2C:D4:83:DA:3E:D0:AB:5F:44:C7:E6:72:4E:B8
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d0:ec:5f:64:81:f0:6e:f4:f9:fd:83:f8:5f:d2:dd:46:62:
cb:95:a6:0d:64:99:cc:a3:34:16:be:b4:78:4a:4f:74:fb:41:
c7:bb:09:c1:34:59:57:5f:79:c4:55:b6:ad:56:6c:1e:0c:5a:
45:3a:45:e0:cf:05:ff:dd:48:05:85:e1:e4:cf:e0:b5:d5:6e:
de:70:02:61:1a:4f:0b:50:5a:37:31:3d:ac:b3:3b:25:f9:15:
41:fd:9a:71:fc:5f:74:72:43:5a:10:f3:ab:d7:88:a7:03:8c:
a1:8f:2d:a2:bb:d4:ef:7e:7c:8c:b2:6e:5f:99:4e:79:c1:f0:
86:73:ea:c5:b4:10:6e:2f:85:55:f7:e0:2b:97:54:cc:e1:93:
49:af:52:03:c6:d3:12:6f:ab:25:f9:46:9e:4e:a6:45:6a:11:
c1:85:a5:38:ef:81:e7:b6:66:38:e2:01:ee:ca:55:db:f1:ce:
29:fa:6f:1a:b9:f6:12:fa:82:e7:ec:47:97:cb:16:b2:c3:5d:
1d:dc:32:75:dd:47:23:25:00:00:4e:05:08:f1:68:17:f4:14:
23:52:ed:b5:41:2c:0b:b5:4f:50:93:c6:66:ab:00:a2:c7:ff:
52:1e:6e:0d:1b:c1:db:52:b6:9d:21:39:37:7c:4d:57:af:68:
56:67:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:10 2026 by rpki-client