Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: kzMfADaAKsa5o4P84Ih4pBEz9uL6arj5V0KR1d+Rbg4=
Subject key identifier: 59:43:A0:32:31:41:E2:AE:CA:C9:52:F6:55:52:7A:09:9A:CB:4A:1B
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 019DA3E622A67DAEE47A251F7D02A6D927B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 0585
Signing time: Sun 19 Apr 2026 04:01:01 +0000
Manifest this update: Sun 19 Apr 2026 04:01:01 +0000
Manifest next update: Mon 20 Apr 2026 04:01:01 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: GiWiTgGSr3C40hroKunr0bFixQkyfkvMfmvt4EMGjis=)
2: rIj8wufE-prK99O3Ylq0RCBcGE8.roa (hash: m+lWR0TLu74BujfNz39crAI9zcqKkYdaZMG20ho5wX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:22:a6:7d:ae:e4:7a:25:1f:7d:02:a6:d9:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Apr 19 04:01:01 2026 GMT
Not After : Apr 20 04:01:01 2026 GMT
Subject: CN=5943a0323141e2aecac952f655527a099acb4a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:4f:52:6d:16:10:67:0d:eb:1f:ee:4f:02:
96:ad:56:27:12:83:95:82:5d:55:30:f0:4a:6d:a7:
40:4f:92:4f:ce:77:99:7c:4a:6b:a5:32:f0:0e:57:
fb:f6:0f:14:07:e5:50:ca:cc:2f:9e:1e:a4:7e:85:
2b:8b:46:c5:40:b6:75:63:68:3b:7c:5d:d3:c3:93:
d6:3e:c1:1a:78:c4:41:23:51:16:b9:d3:45:61:ee:
88:8c:0c:ae:57:cf:8c:a4:ca:c5:2e:a2:61:5d:fe:
41:f7:5a:a5:3f:db:21:04:2b:57:9d:86:fa:ad:ac:
f0:76:52:c0:f9:7e:53:80:2e:ac:1d:fb:d5:7f:c0:
5a:b6:1a:28:91:90:1e:47:f8:bf:a2:83:1c:3e:41:
bb:69:1b:2a:fa:7b:03:66:ba:55:17:f8:8e:dd:15:
eb:ef:6e:f8:b1:6b:fc:c5:e5:1d:2b:d6:5b:d2:d2:
51:b4:6c:87:3f:93:db:8e:55:d4:d7:26:6f:de:18:
bd:70:aa:59:5e:b6:51:1e:52:4e:91:b1:a9:94:e3:
d7:08:17:c9:e3:9a:dd:16:c8:e4:7a:db:1b:3d:a4:
30:b1:79:c7:e3:25:d4:22:42:75:a7:61:1b:fe:bc:
69:80:8c:0f:4e:0a:4c:01:e0:3e:25:ce:15:23:ad:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:A0:32:31:41:E2:AE:CA:C9:52:F6:55:52:7A:09:9A:CB:4A:1B
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:93:c0:f3:03:90:ad:70:67:95:58:0c:17:fc:7b:80:b7:
1d:63:12:fe:1e:d9:2b:98:e4:8a:d2:b8:f4:c9:2c:fa:26:64:
96:28:4e:c0:ea:ed:3e:bd:32:82:c1:60:91:50:f9:e4:fb:41:
c0:99:bd:76:0f:44:a8:b0:00:79:a8:bc:3d:61:40:17:1b:0e:
b2:dd:22:84:aa:46:8c:a5:27:fd:42:b8:f0:64:06:97:e6:c1:
94:1d:47:7e:50:56:5c:d0:c6:90:a3:e9:be:26:73:bd:51:8c:
23:35:9a:d8:91:dc:82:e6:c1:d6:a1:ed:98:8f:88:70:24:c7:
6c:19:c3:92:ee:83:1c:26:94:8f:d5:52:35:95:53:ea:18:85:
ca:d3:bb:88:7a:74:ad:dd:7c:cd:a1:b7:41:f8:35:a1:11:f8:
f6:90:64:80:93:5a:98:f4:e4:57:b2:8e:66:1c:a4:5a:08:63:
3c:13:3f:8c:ce:88:b7:56:dc:57:a2:ff:e7:83:c0:f0:cc:d2:
23:d1:a8:c8:81:96:78:1d:ad:ff:3a:13:d0:e7:53:83:d2:42:
da:31:dc:c4:b9:39:86:fd:7c:ed:ca:2a:fa:82:c0:72:dc:1a:
a5:c0:c3:be:1d:04:a8:df:b8:de:a3:2c:bc:5b:39:35:0b:f7:
f2:d7:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:25 2026 by rpki-client