Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: VAWxp3mgTACPSyfY3GTqB1oKax5zWG0lAZCt7OXp4hI=
Subject key identifier: D1:B7:D2:CA:26:6C:CE:B3:A6:CF:C3:FE:04:0A:4D:57:5E:E2:EF:7B
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 019D2A3C013367F442C641259E3A33266F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 0679
Signing time: Thu 26 Mar 2026 13:01:08 +0000
Manifest this update: Thu 26 Mar 2026 13:01:08 +0000
Manifest next update: Fri 27 Mar 2026 13:01:08 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: VIcxjWSqRptF+D+lg3FCSPBMyIgrB73Ifkc6Ets+HfI=)
2: 1-SaWdtO8pdOQET4wsZV_w5fiyWk.roa (hash: zaJRPeqwzt+WfSQ7RYOKb5vKsolyWyvGl3t7Hee8+w0=)
3: 9Hmh9m38mGNmN4Pp6ZWTawq0DmQ.roa (hash: HMoQ8f4iT6ChZh4ybS/urKDZ7WBqnYWqnn6iUi5rfzU=)
4: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (hash: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:01:33:67:f4:42:c6:41:25:9e:3a:33:26:6f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: Mar 26 13:01:08 2026 GMT
Not After : Mar 27 13:01:08 2026 GMT
Subject: CN=d1b7d2ca266cceb3a6cfc3fe040a4d575ee2ef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:14:e2:73:43:b1:41:8a:06:d5:6d:29:64:
73:30:8a:09:de:58:d0:84:7c:dd:98:61:26:eb:fb:
69:42:35:62:d0:0b:74:c5:b0:fa:85:90:41:9a:a2:
c1:4e:60:b6:b5:22:09:62:88:50:e7:d6:7d:e2:e1:
ff:56:1d:13:5e:eb:f8:d2:63:f3:cc:c3:70:83:e4:
21:14:45:44:19:b6:65:a9:d6:69:da:fc:b9:48:c1:
8b:12:30:30:bb:83:aa:ed:d5:9a:73:0d:41:3d:cb:
11:1b:0c:fc:f2:5b:06:78:b9:c9:53:4b:bc:95:fe:
fd:fc:9f:d5:78:7f:41:79:8a:49:ea:39:56:10:40:
d5:3a:f8:6e:5b:06:10:57:52:df:26:f4:5f:d8:c9:
37:09:48:f5:2a:05:ab:13:8f:22:cc:9c:80:5f:8e:
e4:be:0a:55:db:63:7c:d6:63:88:78:29:73:43:b5:
53:7b:1d:c9:86:cf:bc:42:d5:38:b7:d2:2a:9f:35:
ec:41:f8:71:75:a5:5f:37:af:dc:1c:90:3e:64:20:
73:62:be:7f:b1:a0:92:2f:75:c3:54:1e:6e:da:fb:
e3:35:b7:ce:a1:3e:62:50:4c:8b:f2:5a:e7:ff:33:
db:9e:c3:26:4b:c6:7b:28:73:4a:53:d8:3e:7c:d8:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:D2:CA:26:6C:CE:B3:A6:CF:C3:FE:04:0A:4D:57:5E:E2:EF:7B
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:76:19:ee:13:a5:91:90:7e:87:a3:ab:16:dc:56:cb:63:47:
2e:25:90:4a:2d:73:8b:6a:3e:f9:d8:7e:07:ec:40:17:3e:36:
01:b3:cc:53:ba:bf:86:b6:2b:cc:1c:de:82:46:75:6d:54:a7:
21:40:f5:b9:54:ac:71:cf:3d:62:80:15:bd:38:8c:f7:30:97:
cd:97:77:cf:ee:28:bb:9d:8f:3c:01:86:65:a0:59:a0:a9:4e:
3b:25:c7:16:7a:e6:29:76:52:a8:7c:d5:cb:54:70:eb:82:24:
f0:86:df:02:60:b3:be:b7:ca:32:34:0b:ac:9f:43:62:6a:8e:
fa:61:90:71:00:58:ef:5c:76:46:c8:79:bf:53:4d:83:5f:5f:
a9:f4:e2:b8:90:58:1a:c1:81:71:45:e2:7e:88:75:96:38:34:
26:ac:bf:33:9c:c0:8e:87:6c:9b:74:15:f4:05:dd:fd:9b:9a:
15:bb:70:76:98:5e:5e:bd:65:5b:2a:7c:ed:96:07:74:76:58:
29:3f:8d:c7:4d:c7:78:55:28:2d:50:50:18:44:d8:d0:60:d7:
96:28:cf:71:61:ca:8a:da:88:a5:95:f8:23:5e:fa:4c:fb:76:
7d:c0:e3:f4:92:68:bb:e1:1a:59:87:0b:52:56:b8:e5:2d:d5:
ff:a0:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:20 2026 by rpki-client