Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier: YB/Nw66SeCszE76CABXJWfweyqxB620lWHyjthP84DM=
Subject key identifier: 04:37:C5:D3:64:C2:76:B3:48:ED:C6:24:87:03:21:73:CF:D9:50:0C
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial: 019CAA5918C7E9C7B4A2A263F28613AA217C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: 6cSa_sL_zfeEW4tqbm_0LpGh7YQ.roa (hash: jjo3CfqqV73DGrtKgHIkxz5yE5bxgtsWIxmAetQEk/k=)
2: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: xNomEG3tIbDFcNpCA2puIxya/QMDODtFKf81XBaTbYI=)
3: Fxxu6PyC1sBxWKbrCA5zXu5AwRQ.roa (hash: M2IUlH6kOG+Z48naXvw7MTp/Vu7+cGIozyMyXiWTQ14=)
4: Gf-VCYosyBVpPyCAGx0D3HqWf9w.roa (hash: DDyjNSe2l/f8wPKhdcTUlF9QrQA73oZdOx4+g2X9b/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:18:c7:e9:c7:b4:a2:a2:63:f2:86:13:aa:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=0437c5d364c276b348edc62487032173cfd9500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:9f:b3:58:1e:55:8d:01:3e:e6:4a:ec:ba:
83:17:19:cf:0b:1c:a7:3f:49:71:32:db:86:58:47:
57:f1:ba:8f:c3:ea:f5:15:ce:47:e6:ed:71:b5:49:
f1:78:d2:7a:c3:c4:3c:9b:b8:75:a7:ec:22:79:c8:
6e:20:bd:8e:38:4c:7d:ba:9c:55:c4:36:c8:e4:d9:
0e:f3:9b:c7:c2:38:35:e6:c6:55:8f:be:3c:49:73:
17:67:22:41:6e:01:20:a6:4b:b5:a1:42:64:2a:9d:
e3:35:bc:a9:55:d8:99:29:eb:b3:bd:12:c3:43:a1:
3f:11:df:7f:7e:89:41:69:20:ed:06:73:7b:85:4f:
b0:ae:85:96:34:f2:15:5d:5e:2e:7e:5b:5b:ad:f8:
fd:ad:85:e5:e3:e2:90:10:b5:e4:a5:de:ed:22:5f:
35:73:52:33:e2:e9:4f:34:e1:a3:a1:d9:2e:00:35:
3a:5d:94:e5:eb:45:f4:2a:c3:0c:77:ce:97:87:16:
ca:e8:af:62:93:b2:75:13:81:be:54:64:75:de:55:
6e:b1:df:ce:a0:80:42:78:09:25:f7:15:bd:21:f5:
c2:f8:e1:81:3e:e4:6d:64:f2:16:f0:ee:eb:73:ae:
3d:3a:da:8c:28:46:5f:b8:bc:14:78:97:96:d7:af:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:C5:D3:64:C2:76:B3:48:ED:C6:24:87:03:21:73:CF:D9:50:0C
X509v3 Authority Key Identifier:
keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:88:4f:f4:c7:2a:91:1c:c5:6c:02:59:05:62:84:af:86:
02:8b:03:b7:4e:54:c2:95:60:5a:c5:0f:ef:a3:99:0c:9f:47:
33:e0:5b:5b:a9:bd:df:48:7c:d9:e3:59:d1:49:c6:a1:71:2c:
cb:07:84:aa:92:03:33:da:20:55:77:f4:89:71:be:a1:a2:c3:
fa:8a:22:20:67:c5:49:ba:e9:bf:42:a1:3b:4a:82:20:39:ed:
ba:2d:59:08:6a:b0:21:40:53:16:39:4d:1b:87:65:bf:36:44:
d5:ce:5b:90:50:f3:95:82:1f:59:3e:61:1a:54:9b:ff:de:77:
e6:56:a2:eb:34:78:53:6d:7d:df:c3:48:ad:63:8f:7e:91:53:
0e:71:d6:57:c0:2e:1a:b1:f8:3a:88:9f:16:44:26:18:19:3f:
db:c0:d8:63:3c:88:fb:f3:0b:a3:f4:0d:05:c3:c2:84:6a:be:
3e:12:85:22:3c:a3:95:e2:71:67:22:ad:be:bf:f0:85:7b:33:
04:2e:f6:43:73:96:2d:3f:6c:d2:90:eb:85:75:4a:97:d7:c8:
1f:8e:a9:2d:14:14:cd:dc:66:a0:d2:4b:b2:d8:6d:2b:eb:58:
9d:3d:0a:f6:ae:da:1a:a3:47:23:15:b0:b8:50:83:dc:c8:fd:
6f:09:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:32 2026 by rpki-client