Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json)
Hash identifier: am3kQ1qLmT2IhB/+GOirKYiC18ClL/gu8eB+JKCUxFU=
Subject key identifier: C5:C8:53:09:3E:3E:3B:42:70:41:0B:32:2F:AB:5C:DA:0C:48:D3:DE
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial: 019CAC10060641B8055EB5CCBF3608D64668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
Manifest number: 1190
Signing time: Mon 02 Mar 2026 01:00:57 +0000
Manifest this update: Mon 02 Mar 2026 01:00:57 +0000
Manifest next update: Tue 03 Mar 2026 01:00:57 +0000
Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: 3BTo0YbYcyNs7gPUFD9MXyN1qePCsBIXB0yzEkWZkNE=)
2: vHb2PXbLOQDiEgmgNVeM25O_uYw.roa (hash: A0zzK6+DweI9ov6X0YBv5MoDDd8w4Zw2H0qKl9mjATM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:06:06:41:b8:05:5e:b5:cc:bf:36:08:d6:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
Validity
Not Before: Mar 2 01:00:57 2026 GMT
Not After : Mar 3 01:00:57 2026 GMT
Subject: CN=c5c853093e3e3b4270410b322fab5cda0c48d3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:97:fb:f6:3d:05:4c:ff:86:66:fa:5b:4a:
38:55:46:3e:cf:dd:b8:68:ad:3e:80:eb:1a:59:78:
53:96:45:52:cc:a9:9f:95:b6:2a:2d:26:dd:1e:d0:
2c:65:67:66:ea:3d:89:b4:b2:a2:e7:12:98:d4:5c:
5c:ea:8b:fc:ed:78:7c:e9:bf:0b:3f:8e:72:54:ea:
00:f8:c5:9a:b1:bf:ba:db:05:9e:3e:2d:c2:7c:ab:
3f:a4:1e:e4:e7:d1:1c:5f:e7:d9:96:b7:8f:eb:db:
99:37:6b:35:97:47:4f:3b:6c:d0:f1:a7:43:bf:82:
88:3f:96:80:66:5b:a0:57:7a:6d:1d:1f:01:47:8a:
7a:2d:0b:07:16:a3:af:26:84:a0:8f:ad:3f:ab:a0:
b0:73:5f:b5:df:bf:05:17:79:4e:6e:48:fb:30:67:
9c:78:18:89:f7:d7:9c:1b:47:7b:e9:3b:2b:cd:5a:
93:7e:5b:02:67:30:58:96:45:79:13:63:92:23:d2:
ea:e3:16:bc:38:b5:ef:8b:fe:e8:d6:e7:bc:01:8c:
33:de:14:02:43:a4:35:ce:15:7c:4a:5d:dd:20:d8:
bd:2a:dd:38:d8:fa:96:9a:da:02:8a:35:39:61:e1:
7f:32:d3:37:8c:00:7b:e7:71:b6:cc:0d:af:40:00:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:53:09:3E:3E:3B:42:70:41:0B:32:2F:AB:5C:DA:0C:48:D3:DE
X509v3 Authority Key Identifier:
keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:36:09:31:c4:3d:ac:e8:94:53:18:5b:83:ed:53:a9:d3:dd:
74:4b:0e:48:b7:e0:55:fe:d4:ad:07:b5:eb:97:e1:8a:fb:36:
98:53:06:04:3f:c2:da:ed:e7:59:74:a0:b8:3e:53:eb:73:84:
f3:d9:6e:b6:e3:5d:97:7f:e6:c1:a1:b6:38:47:8f:b8:0b:e9:
8e:45:e8:fa:0e:b5:f8:34:55:ad:b6:4b:a8:9c:02:47:b5:07:
6f:bf:63:85:24:22:ec:d1:12:be:f4:1a:4d:cf:7c:ac:b5:24:
6a:fb:35:04:09:7e:88:7d:4b:3f:06:55:4c:50:da:33:f6:eb:
af:d4:eb:ea:50:49:59:46:dd:67:66:dd:bf:ce:f0:bd:b5:a2:
86:bc:21:bf:63:54:b4:60:84:fe:cf:3d:88:ae:fe:d0:85:76:
eb:43:45:5a:3a:17:8c:ad:27:6e:e7:87:da:6b:5f:58:6b:35:
f2:d5:6a:a5:63:4c:6c:dc:fd:b8:d8:47:9d:67:b1:94:34:11:
e8:98:2f:80:b8:93:62:67:4d:b8:8e:35:93:33:99:f3:77:b1:
a7:a2:6a:48:76:26:8c:f9:78:22:fc:3f:59:03:de:4e:c4:fc:
b3:e3:1d:19:66:cd:b0:6f:cf:da:c1:c2:cf:20:d5:8d:71:cd:
6a:1f:fa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:53 2026 by rpki-client