Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: Px8YYbc8HCyaedD5pB2cpzKLZ5Harrh8Qobd8f04Ez0=
Subject key identifier: 92:9F:08:94:55:C3:88:F6:89:86:1E:42:23:17:23:9F:AA:A0:1D:4E
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019D9AABE9AD2F192A0A29A14F35DC89D31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 10C7
Signing time: Fri 17 Apr 2026 09:00:50 +0000
Manifest this update: Fri 17 Apr 2026 09:00:50 +0000
Manifest next update: Sat 18 Apr 2026 09:00:50 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: eTA4TSP3X4l1jfLDXs+ibATLoI92VgmzM+WVMrNhQxM=)
2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e9:ad:2f:19:2a:0a:29:a1:4f:35:dc:89:d3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Apr 17 09:00:50 2026 GMT
Not After : Apr 18 09:00:50 2026 GMT
Subject: CN=929f089455c388f689861e422317239faaa01d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:70:e6:1a:f2:bc:d9:bf:d0:bc:34:30:2a:
9c:16:4a:e9:14:75:cb:0f:f1:78:34:3c:16:ab:a2:
0d:2c:ca:b5:ef:19:a3:2c:e8:75:0e:64:a8:66:bd:
f5:ea:c7:73:fc:d2:7c:20:46:1c:20:64:19:3b:cc:
04:e0:c1:56:bc:20:61:de:38:70:4a:50:31:39:57:
bf:f2:52:c3:1a:d8:28:9d:04:f7:e3:63:eb:a2:9c:
a2:ea:bc:01:ed:8c:ec:f2:32:d3:eb:6a:2e:c0:11:
05:d6:7a:fd:04:33:d5:84:b6:90:5b:ab:08:1d:ad:
f1:7a:e3:9a:22:ec:c1:0d:ad:24:d5:e8:5b:5b:7e:
c0:b8:6a:4f:f6:0e:24:68:12:f4:63:a4:b1:4f:0e:
ce:76:ca:be:cd:fd:8a:48:ce:39:f5:a2:39:04:3d:
69:e5:b5:97:b3:76:56:73:c8:83:2b:ca:aa:bf:63:
de:46:99:9f:7d:8a:c8:4e:a6:b5:91:c3:63:d2:a5:
98:ba:ef:f0:60:e1:af:62:d5:f6:11:ae:dc:64:1f:
d3:31:ad:64:6d:b8:ae:94:9a:60:9f:f2:85:96:b5:
a0:68:d0:93:8b:25:8d:48:07:f5:35:73:e8:e3:ed:
44:f3:62:1b:a6:b8:61:4b:0a:b8:ef:c9:d3:9a:11:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:08:94:55:C3:88:F6:89:86:1E:42:23:17:23:9F:AA:A0:1D:4E
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:68:0a:38:f5:31:bb:52:e6:6e:8e:c9:bb:f4:4e:85:1b:
5d:53:dd:eb:ae:4a:27:8f:d6:2f:72:be:16:80:cc:b4:a6:a0:
ba:f8:49:c7:d2:83:1f:a7:3a:4e:35:8c:89:88:43:1c:13:97:
ec:0c:4d:76:4a:19:5c:ba:71:eb:87:81:fb:ad:5b:fb:3c:5b:
93:e3:d8:3e:65:11:f0:ff:74:63:55:d9:55:33:50:3b:80:52:
f7:17:55:d9:03:d2:92:d9:7c:40:7a:09:be:81:64:2e:52:8c:
92:4f:97:11:34:09:43:fd:cf:d3:3d:70:fa:51:e0:51:76:9a:
7b:40:8c:9d:99:d2:32:77:e6:3c:bd:db:ae:ac:98:34:63:5e:
bd:c7:e6:ff:0f:de:9f:52:cb:2a:3b:3f:54:d7:b9:24:73:24:
6e:43:7b:05:50:0d:e3:8e:bd:d4:c6:ac:8a:26:a5:a4:c3:31:
e4:c7:b9:63:d2:2e:ae:e8:85:b8:03:9b:1e:c2:ab:fe:e7:6b:
b6:b6:1e:ab:93:39:a1:a8:36:23:a6:c1:8a:7d:b5:20:3d:4b:
3b:1f:92:b1:f8:a9:ea:58:bc:f5:69:d4:a8:92:25:54:df:0f:
5e:31:2d:25:12:b5:46:9e:c8:9a:9d:f2:bf:0f:6e:d5:3f:94:
84:80:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:04 2026 by rpki-client