Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: 8GzbclaH28FQOwbCdz9QSncLZWmwd7FOsM+zvx7oF94=
Subject key identifier: A0:36:85:5F:C6:4A:DC:69:A5:4C:C4:5F:77:DE:21:79:51:5B:E9:F4
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019D270496C2036137A5A4F1D07B1CE5FA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0CED
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: qqZdYZ2X9DuaVfSrT7LHNtwfNRxetVg36fuxxwF+p6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:96:c2:03:61:37:a5:a4:f1:d0:7b:1c:e5:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=a036855fc64adc69a54cc45f77de2179515be9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:71:ef:56:e7:b9:64:20:8d:45:12:67:ab:
d4:e7:c5:fa:01:96:00:6f:a8:3a:c3:e5:a9:9e:c4:
dc:5b:60:c9:32:cb:bd:fb:7a:58:47:ee:55:54:ca:
e9:64:8d:aa:f9:1d:28:9a:7f:8d:f9:55:c7:46:3b:
7b:0b:17:d1:7b:aa:70:a9:5c:b2:ee:6b:f6:ed:a4:
c3:1c:7a:20:85:16:4f:f3:ce:b3:8c:de:d0:1f:cf:
26:a8:fc:2e:76:ed:7e:89:2d:f2:0a:91:a9:50:c6:
96:da:d7:87:08:5e:ba:cc:0c:bd:45:fc:1d:c9:b9:
35:a2:a7:b2:50:d6:84:b1:a8:65:f6:05:b2:f3:93:
49:a3:8e:12:d8:96:c1:b8:d1:66:75:9f:e7:a2:34:
e4:b2:40:94:ef:aa:c2:a7:33:86:c8:fc:4a:b7:d9:
e6:3b:ae:e8:df:9f:d7:aa:f3:66:95:11:89:05:ae:
03:61:c3:94:a3:5c:f8:d7:12:f5:77:61:bf:31:a8:
7a:d0:c2:b5:69:5a:9a:0c:20:c0:df:4f:6a:dd:8c:
97:9a:eb:95:ad:73:45:bd:40:a8:10:f4:f9:07:a6:
fd:5a:0c:21:5f:86:90:14:d7:09:9c:a7:f6:ae:90:
75:00:44:aa:7b:61:25:0d:38:4e:c6:20:df:6e:08:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:85:5F:C6:4A:DC:69:A5:4C:C4:5F:77:DE:21:79:51:5B:E9:F4
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:cd:e6:fb:4c:6b:58:35:65:a4:32:66:78:9b:a3:c4:95:
85:0b:0d:78:92:65:54:b1:40:61:ec:df:c1:06:47:90:a9:2a:
61:50:71:4e:95:c7:eb:cf:b8:20:83:24:f8:dc:66:db:20:2e:
9e:9d:64:c3:ba:38:c0:9a:ad:27:35:d1:64:3a:ce:1e:99:dd:
d7:d0:62:19:6a:38:9b:77:2d:de:cf:8b:8e:5d:54:dd:d5:bd:
5b:91:e5:6f:e3:10:23:e3:19:6c:71:ca:b6:5f:ae:c0:19:db:
cb:bd:d6:98:85:e3:6d:d0:29:fc:c3:40:d2:65:04:52:fa:6d:
f7:a0:be:e6:87:49:be:48:e4:4c:75:4f:73:ba:d4:d5:e6:05:
ae:c3:5b:99:62:4f:77:90:5c:5a:39:a5:7a:49:72:94:72:51:
81:c5:a6:be:44:fd:28:b1:47:fb:a6:9a:b5:cd:79:16:44:0b:
7e:0b:2f:68:61:ac:4c:9b:00:ed:ec:4b:be:cf:d7:57:a0:77:
f6:d2:7a:1c:10:e4:72:26:72:b1:ff:88:fc:c8:83:a8:07:1a:
8a:cf:0b:87:36:e0:51:79:6b:90:bd:9a:b5:b7:a1:22:d9:2d:
f3:fe:8b:6a:24:a0:59:58:af:7c:e8:5b:e7:74:32:2f:6f:ce:
ce:27:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:11 2026 by rpki-client