Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: xhB3fmP/TG4nLlKm3Kg+MctRjXvg2VU98r97q1yvwtg=
Subject key identifier: 56:45:D4:A2:62:44:53:F9:84:B2:EB:A0:60:06:18:FB:B8:C7:99:07
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 019CA9EB3B438905472932F4451DC102EF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0F3B
Signing time: Sun 01 Mar 2026 15:01:31 +0000
Manifest this update: Sun 01 Mar 2026 15:01:31 +0000
Manifest next update: Mon 02 Mar 2026 15:01:31 +0000
Files and hashes: 1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: QVZTnaX3h+448xOV68LYMYJjXtvv3wRF/muky/8lavw=)
2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:3b:43:89:05:47:29:32:f4:45:1d:c1:02:ef:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Mar 1 15:01:31 2026 GMT
Not After : Mar 2 15:01:31 2026 GMT
Subject: CN=5645d4a2624453f984b2eba0600618fbb8c79907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:1c:bc:ef:99:f0:dc:ac:b8:00:10:50:ab:
8f:1a:af:a6:52:c3:62:7c:3a:5c:a7:3e:17:08:4c:
ec:c3:e3:12:eb:20:b7:2d:1d:c2:99:97:53:6c:74:
c2:9d:f1:2d:f6:90:83:55:d1:91:92:62:62:7d:62:
03:34:1b:86:b4:a9:f9:ec:f9:95:be:3c:16:1e:ec:
f8:0a:42:50:53:41:47:e7:8e:61:61:3d:61:be:b3:
e4:3b:d2:17:2a:b6:cb:41:64:a2:a9:4d:00:b8:b2:
6f:94:7e:27:fe:24:64:be:76:dd:fe:cd:a7:b6:29:
65:3c:12:01:a1:48:f0:5a:91:b6:34:d8:0f:b6:c8:
4e:39:0c:e5:17:23:77:a4:30:1a:b5:30:15:81:e2:
f6:cc:3c:db:cd:d5:56:88:42:d4:27:f1:06:50:f7:
c3:a3:6c:e1:0e:30:c4:c2:9b:99:49:fe:b8:b8:1b:
e3:49:fb:0b:b4:a4:9d:c4:a6:5e:81:79:b4:23:76:
9c:1e:49:bd:aa:92:43:ab:91:eb:14:b1:ed:19:95:
3e:b7:27:a2:2b:6a:02:36:18:1e:33:05:cb:aa:26:
aa:2e:9a:bf:67:0a:35:03:10:93:e6:ff:73:c0:8d:
7d:59:5c:9a:dc:9c:4d:39:c4:76:24:f8:b2:bd:8b:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:45:D4:A2:62:44:53:F9:84:B2:EB:A0:60:06:18:FB:B8:C7:99:07
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d0:5e:92:c0:bd:10:92:c9:82:f7:c9:f5:cc:99:75:50:b7:
00:2d:7e:ce:d0:c0:0e:c5:65:79:cc:87:5d:a4:7a:3b:95:1b:
a2:1a:c9:de:11:97:94:23:4f:9e:02:f0:fa:7a:05:9c:5b:e7:
39:b4:92:de:73:3a:9e:c2:8c:d3:0f:3f:c2:11:21:e5:97:75:
75:00:b9:75:05:c2:6c:c0:96:fa:8a:fb:e9:6c:36:4c:d6:e7:
83:b6:02:43:37:6f:19:e8:8d:8c:12:6f:02:52:2a:63:1e:53:
1f:57:28:0a:f5:ae:d7:1e:72:1f:e9:92:6c:ef:3a:71:42:19:
74:34:d8:8d:6c:0a:f5:48:ab:98:a0:d7:82:17:67:81:44:9a:
90:0b:ec:76:cf:13:18:67:9f:2d:04:80:be:c9:af:39:88:7d:
cf:b8:b6:42:ab:6a:8d:32:49:ac:27:12:2a:a1:6a:35:62:be:
33:84:ab:2f:ce:02:b4:76:28:84:ae:f1:a5:19:4b:c5:bc:97:
ff:af:8e:ff:fc:91:dd:2a:d6:39:e5:2b:ea:54:ec:6b:be:0f:
b6:d2:97:86:04:9d:11:d6:c7:50:51:81:bb:44:52:20:30:32:
42:e6:56:75:f8:f9:c1:79:31:1e:64:e2:09:f7:9c:ad:91:05:
b9:7e:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:38 2026 by rpki-client