Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft
File: 6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft (raw, json)
Hash identifier: fKyOAjr50ipEhzob5qAXQ3LFB9L/kF7LxWMT5uT8fh0=
Subject key identifier: CA:03:95:E6:74:37:91:28:87:7D:9F:6D:24:11:66:2B:16:44:20:9F
Authority key identifier: E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50
Certificate issuer: /CN=e857fab761632db3be781a5b9b48557089efd950
Certificate serial: 019D25F1DE9014CE99EB01B004CA585A2C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft
Manifest number: 0140
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: 6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl (hash: Xm4ve6zFXL06/utco4U6SCNzmczsymh6ihPK3jrf5qQ=)
2: rZt-gRYB_VT6dIk9StzZ2Gm63t0.roa (hash: Calm3AK+uP+/fxUV++NGXZPUSUIj2wsCu9YGBXIQfNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:de:90:14:ce:99:eb:01:b0:04:ca:58:5a:2c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e857fab761632db3be781a5b9b48557089efd950
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=ca0395e674379128877d9f6d2411662b1644209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:62:a5:21:f2:4b:50:d1:e1:0e:03:65:cb:
0d:f3:74:88:93:e5:95:22:0b:c1:74:fc:83:4f:82:
a9:f5:d1:b8:22:e2:78:42:a9:58:b8:d9:9b:23:19:
bb:54:b1:3d:2d:d7:13:f4:65:db:ba:66:8e:6c:47:
dc:0a:10:af:dd:1d:c3:b6:c4:85:a8:78:86:a1:44:
79:63:92:97:c4:80:61:50:b8:d4:67:5a:f3:98:bc:
fe:48:c7:b1:14:cd:22:e3:73:85:00:6a:d3:27:9c:
44:f1:25:de:bd:54:93:14:21:47:68:e6:8e:fb:6a:
b1:2c:e2:c1:a6:93:c5:ad:65:20:7f:1a:9d:84:82:
2b:d9:79:78:88:58:7e:82:35:0c:ad:06:e7:80:16:
2c:34:4f:b1:5b:1d:2f:cd:8b:35:fe:74:80:9b:d0:
6c:c5:d9:cb:96:c4:23:05:75:dd:7a:68:f5:f9:a9:
00:92:e1:2b:e3:3f:fc:0b:16:de:1c:f0:a4:a1:e4:
64:a3:fe:b4:e7:4a:1d:b1:70:aa:ac:1c:f3:e1:c3:
13:59:06:9c:27:10:df:5e:67:3c:7f:43:73:7f:43:
f9:7a:37:72:78:ba:da:f5:a9:82:fb:ce:20:a0:38:
31:fd:d9:e1:52:d2:aa:96:ba:c7:39:e6:47:4d:da:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:95:E6:74:37:91:28:87:7D:9F:6D:24:11:66:2B:16:44:20:9F
X509v3 Authority Key Identifier:
keyid:E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:0f:45:98:1d:72:5e:8a:c8:41:16:a4:4a:9e:45:40:8c:
a4:cf:da:2a:c4:59:e8:2e:9e:01:a3:4f:a3:28:10:d3:37:1a:
28:50:d9:10:61:a9:24:bf:d6:06:b8:d2:88:e5:39:20:15:48:
bc:31:15:98:8e:aa:05:75:28:8b:15:c8:2e:dc:b9:57:bd:76:
5d:66:53:57:42:5a:3d:b9:d5:be:f8:a9:f6:a9:e3:70:5f:82:
04:15:93:c8:2c:08:96:2f:d8:e6:6d:11:31:e4:2f:76:ea:a0:
b1:b2:e9:6d:6b:58:88:07:89:67:23:32:5d:c0:1f:8e:ce:2d:
9c:c7:96:3e:46:1c:56:5e:31:bb:fb:dc:e5:99:80:4d:90:99:
52:94:7f:6f:dc:13:3c:07:5c:a9:5c:70:a0:ef:72:79:51:f7:
c0:c2:51:08:d7:10:d5:4c:71:d2:28:ce:5b:6c:86:b9:84:71:
24:56:5c:3b:b3:57:fe:f5:fa:b9:58:6a:8a:4f:d0:6a:ea:a7:
eb:7f:84:db:89:0e:ed:2d:bd:35:5d:7e:4e:de:6f:57:cb:ae:
c3:0e:b3:87:bb:dc:bb:64:21:bf:50:64:7f:a2:88:9e:bc:fc:
df:77:8c:fe:9d:48:02:77:90:77:a1:bc:33:72:33:1e:cb:56:
40:e7:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:07 2026 by rpki-client