Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier: ATai0RJOHiwDObr1df3fg+zm78JLQ1pU6yH1pRCeOTM=
Subject key identifier: CF:9E:F2:C0:79:9D:3D:F9:AF:C5:27:AC:92:E0:7C:9A:8D:79:04:52
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 019CA9B3D295D4591851CFBAC24E487B20CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number: 0EC3
Signing time: Sun 01 Mar 2026 14:01:00 +0000
Manifest this update: Sun 01 Mar 2026 14:01:00 +0000
Manifest next update: Mon 02 Mar 2026 14:01:00 +0000
Files and hashes: 1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: BR6IrACFPFxo0gAXHLH3EiEVqD/Rcq+UQJ4/1jLfaxs=)
2: 7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa (hash: 9/Cnn9Mz/GVeQ/OrX2MtzdspTFn1KWilYOYP/ODpG8E=)
3: 9KB6jsA15iDe5hTvYqZPtVlVLBA.roa (hash: dgedybpWr2Mko0EXnuNN0p3FXF1lj/f5Eij3mnR2u6A=)
4: rWa57xsNqA6h9p133SuFrfwT1jU.roa (hash: nyGSyY5avNWGsV5nwcg1OwYhIlMW5PE6DQJT9vvTzMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d2:95:d4:59:18:51:cf:ba:c2:4e:48:7b:20:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Mar 1 14:01:00 2026 GMT
Not After : Mar 2 14:01:00 2026 GMT
Subject: CN=cf9ef2c0799d3df9afc527ac92e07c9a8d790452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:3b:ab:fb:23:e5:b2:62:68:a6:c1:a4:ad:
04:af:f6:7b:94:88:e2:36:ad:fa:63:d7:2d:29:56:
4c:11:73:e3:95:ff:7a:2f:65:5f:af:61:0f:e6:3f:
26:ef:d0:55:37:a5:6a:a3:58:d7:51:d7:a3:2f:44:
3e:12:5d:c9:d7:90:b0:3f:8b:6b:76:21:4c:54:9e:
53:5a:32:8a:41:1d:5d:9a:c0:64:68:c1:7e:f8:9d:
50:3c:65:26:ff:a4:bc:6c:8e:6a:8c:7e:49:92:e6:
c9:31:f0:ae:8f:9d:d0:da:cd:56:d8:d1:d6:77:9c:
8a:56:47:29:96:ad:bf:87:50:49:59:e4:77:22:b2:
a2:c1:25:ae:51:a2:40:50:a3:8c:56:7e:59:9a:4c:
d0:4e:c1:5f:a4:33:5e:96:ed:29:69:08:04:4e:77:
41:21:ef:ed:8e:09:2f:5e:3f:f1:f0:ab:35:ab:4f:
37:bc:2d:74:bd:24:3b:c2:33:41:04:b5:8c:bd:bb:
bd:66:21:d1:29:3a:04:68:7c:f5:eb:99:89:bb:b2:
39:92:05:16:87:f7:47:c6:c9:7e:0d:83:81:87:e2:
f5:c0:56:9a:c1:72:de:f7:d5:45:f1:c9:ba:06:74:
f5:e9:81:77:fc:8f:73:75:1f:94:86:fb:61:da:36:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9E:F2:C0:79:9D:3D:F9:AF:C5:27:AC:92:E0:7C:9A:8D:79:04:52
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fe:86:60:d9:03:58:2b:3e:56:ae:77:36:cd:be:e0:e7:f1:
69:2a:6f:15:5f:a3:8c:c9:25:24:f2:69:41:54:31:51:df:0c:
a4:36:5a:4e:88:25:9a:ab:e6:c8:10:44:2e:ea:a6:57:0b:f7:
f4:29:87:01:2e:a8:a9:f4:d2:aa:1f:ba:cc:93:9c:4c:de:ad:
6b:d3:6e:2d:66:7a:25:d7:9d:d3:3d:00:64:1b:1e:18:c6:21:
be:d8:c6:d9:c3:d6:b9:d2:60:37:19:48:a7:e5:23:9d:74:40:
76:c4:17:93:12:60:86:c6:13:5e:3e:19:c5:98:7a:05:6f:80:
44:65:29:c9:5e:4d:a1:91:00:3b:f9:1c:aa:6a:76:fd:4c:9c:
a5:9d:94:f4:c5:c9:81:58:74:c5:cf:a7:de:f1:23:51:93:64:
4e:62:fd:d2:96:63:5d:34:3e:c7:11:9e:33:27:cf:96:a1:39:
a4:45:a4:57:fd:e3:5b:1e:4d:8e:5a:8c:76:20:15:5c:03:c0:
37:23:bc:1d:9a:ff:76:8e:7b:4a:98:06:fb:c2:40:c3:cb:fb:
7b:93:8e:32:cd:29:64:78:e7:b5:27:ca:9f:b0:f8:48:19:e0:
54:ba:ea:79:7b:e8:28:0f:e5:76:e8:38:2f:26:fd:95:d4:68:
be:45:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:28 2026 by rpki-client