
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: 627z8uEzHUGivp58pcGAef2UtW3nPp9AxfjctWTRK1E=
Subject key identifier: DD:B7:8A:21:54:3B:8E:60:DC:12:7B:1D:68:49:BD:1A:3E:6C:AE:12
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 019FAA50459F8A96EE80823E11DACDE97C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 0693
Signing time: Tue 28 Jul 2026 20:00:15 +0000
Manifest this update: Tue 28 Jul 2026 20:00:15 +0000
Manifest next update: Wed 29 Jul 2026 20:00:15 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: OhGwFdZ8G126VecPvbFtud1PxYbFfaGEenv5oUwknSk=)
2: XMgAgm3gSAeCF3IOkeJ-oVsVVUg.roa (hash: Rw3eTNo2WIrhUY+3AUmZ7F95kXpaBKgqcEkNNLJMkJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:45:9f:8a:96:ee:80:82:3e:11:da:cd:e9:7c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Jul 28 20:00:15 2026 GMT
Not After : Jul 29 20:00:15 2026 GMT
Subject: CN=ddb78a21543b8e60dc127b1d6849bd1a3e6cae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:19:40:9b:83:16:f9:ea:84:92:b4:e5:73:
b6:6d:ea:f5:ec:6c:27:7f:c7:80:3b:ad:df:2c:98:
f2:e6:2f:9f:61:10:fa:dc:53:20:45:b4:e1:4c:b5:
16:3a:e3:b8:e1:06:63:0f:ea:31:89:fe:4a:96:40:
0b:22:db:87:9d:22:c3:16:27:3d:09:e0:d3:53:a1:
a9:a0:d3:5d:7a:d5:72:22:4d:78:f1:5e:b0:76:33:
f9:dd:16:0c:88:02:a6:a4:94:a5:c6:52:14:f3:b0:
81:5a:26:d6:7c:ca:b1:e6:90:32:1c:b8:63:43:78:
b2:6d:56:b6:0a:42:6d:68:4b:c5:ea:1c:26:46:88:
ac:e3:cd:46:94:8b:e3:a2:40:c7:bf:f0:22:74:46:
8e:2f:de:6a:34:ef:d3:2e:2e:51:c1:4e:9b:f5:45:
ac:f2:6d:37:cb:07:0d:40:b1:61:53:0f:f1:93:40:
cc:7a:b4:a3:54:31:91:76:e4:9f:c7:7b:7d:39:8d:
91:ed:4d:5a:b6:77:1f:ca:c7:d4:5d:f8:12:df:a6:
6d:04:f2:26:24:74:20:fa:a8:53:c2:1f:a6:1c:a4:
4e:d0:90:7d:1d:6e:d9:99:d7:bf:c9:fe:e3:43:f8:
ea:71:7d:3b:05:d9:7e:d3:45:68:35:2c:82:ec:bd:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:8A:21:54:3B:8E:60:DC:12:7B:1D:68:49:BD:1A:3E:6C:AE:12
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6e:9a:98:a0:db:09:b7:fd:18:2e:c7:8b:ae:f1:85:13:9b:
7d:00:7c:90:cf:52:35:52:7e:a0:51:7d:40:e6:80:57:78:55:
94:cb:52:93:93:4f:62:d6:dd:17:e3:4e:fd:aa:3e:57:be:d3:
cd:5d:91:3c:a9:dc:bc:85:b6:d0:21:2f:1c:31:10:cb:f8:2e:
31:98:a1:6d:3e:59:7d:db:f1:a3:f6:7e:c3:c1:68:1e:69:80:
11:25:4a:24:2f:cc:82:91:11:cf:ef:40:f2:c2:94:00:d3:d5:
8e:a6:34:9e:67:c8:eb:7f:ad:40:1d:d8:70:ae:30:be:c2:2d:
7c:1d:d0:1a:a0:f1:e9:86:0f:cd:2f:65:2b:02:73:45:5e:f5:
80:80:fe:99:53:03:8c:b5:b3:da:4d:94:d3:2f:e9:40:9e:0d:
e9:23:42:d9:85:ee:1e:30:65:c1:fd:22:87:a1:9d:a3:1c:46:
74:a3:72:cf:b5:48:00:7e:60:3e:f0:f7:32:95:23:fe:5f:96:
86:4a:67:05:07:e8:09:cf:cf:e0:c9:2f:cb:20:73:00:b7:69:
e6:4f:dc:b6:b5:47:8f:7f:ff:1f:f4:2d:a6:f7:b4:00:91:0f:
5c:3a:7b:31:bb:05:ac:c6:5e:bf:cd:d3:1e:e5:4b:c4:dc:87:
a1:a7:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:06 2026 by rpki-client