Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: aWevIAyNc0AcoE85d/y1uD+ykxX/1cBZF7D7qRKcrQc=
Subject key identifier: 16:58:9E:5E:62:FE:FB:55:3A:C2:1D:97:8E:45:20:05:1B:52:D4:FC
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019CACB50B6F8534213AE59C877986B5F673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0D95
Signing time: Mon 02 Mar 2026 04:01:11 +0000
Manifest this update: Mon 02 Mar 2026 04:01:11 +0000
Manifest next update: Tue 03 Mar 2026 04:01:11 +0000
Files and hashes: 1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: B1jr0VXR6xjRg7+MYFKBMS+CsJMIRnZ6rj+Lu1y5+NA=)
2: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (hash: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc=)
3: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (hash: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ=)
4: _ciy-lTi4OPOE4H7jBh6iVeSzM0.roa (hash: UoO0miY2aliagEe8/7pX67pSC1+YIe4R/lR+1wd4LX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:0b:6f:85:34:21:3a:e5:9c:87:79:86:b5:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Mar 2 04:01:11 2026 GMT
Not After : Mar 3 04:01:11 2026 GMT
Subject: CN=16589e5e62fefb553ac21d978e4520051b52d4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:1f:b4:ae:fa:e3:1e:36:f8:c3:cc:1d:06:
12:cb:db:49:b6:b5:b3:85:30:f5:f2:b6:69:e3:af:
91:06:e8:ce:fa:c7:9a:87:75:5c:82:2a:5d:54:a4:
06:64:b4:5d:f1:82:55:2b:4e:1b:e7:ae:30:c9:28:
5c:00:44:7e:d9:b9:71:4b:87:ca:a2:82:f1:7f:dc:
f4:c8:82:28:1b:ad:93:56:42:e5:f7:88:1c:01:44:
88:35:b3:63:e0:7f:6b:65:d0:ae:59:9a:ea:81:84:
ad:75:7a:0f:93:4d:75:fc:58:fb:01:f3:34:17:38:
5d:b5:b5:ec:56:29:24:53:9c:d5:7b:8b:82:fc:f0:
7a:9c:b9:e9:2b:73:6b:6d:1f:ec:f8:bc:5d:fb:64:
fe:ba:c6:04:70:3f:12:0c:4b:1e:62:ec:37:dd:a9:
f3:87:35:07:28:1a:65:de:ee:ef:5d:a3:04:ca:6b:
91:c4:ee:ba:bf:9b:45:6b:9a:c2:68:1c:03:14:47:
75:8b:f8:e5:53:a4:30:34:3c:5e:e2:f5:80:af:e0:
18:2c:cb:2b:65:a6:2e:eb:14:e3:4d:64:30:8d:8c:
4f:b0:f2:22:51:73:9a:15:74:eb:cc:ef:f1:4e:7e:
71:bf:db:bd:f3:3a:c9:71:d6:e7:e9:78:ab:39:cb:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:58:9E:5E:62:FE:FB:55:3A:C2:1D:97:8E:45:20:05:1B:52:D4:FC
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:6c:74:e0:08:f3:30:37:5a:53:d6:e6:7c:1b:e6:ae:77:
e1:52:7d:f2:41:a2:ca:6c:89:85:1b:c1:3e:c5:49:b7:0f:2b:
0b:fe:5d:cd:d7:a9:15:1b:af:40:b0:41:58:4a:b9:f1:eb:62:
6b:92:a1:dc:08:a5:58:0c:ae:bc:49:71:be:46:80:01:3c:ad:
0c:ce:eb:a5:f3:0c:79:64:a3:5b:b4:85:c8:75:28:37:0d:8b:
f0:30:57:80:5e:db:ab:48:b6:8b:31:a8:31:2f:df:ba:7d:00:
24:61:b2:ab:1f:7f:99:b9:14:ae:52:a9:b2:81:d7:d3:12:fe:
86:88:27:cf:09:c6:46:ce:03:05:da:f3:a5:2f:ba:52:c1:ec:
69:16:76:81:5a:74:8b:bc:5e:58:8d:bc:17:af:44:66:92:50:
39:66:29:de:53:05:9d:5f:49:2d:66:37:94:cf:98:09:49:9d:
73:30:e8:71:36:88:40:ed:20:96:84:fe:07:82:64:e9:6d:02:
e4:cc:a9:9f:bf:ac:bd:bd:4a:4b:8e:4f:5b:30:56:0b:88:01:
df:40:fc:73:cd:38:a5:28:a2:20:65:20:f3:8f:ba:63:ab:e8:
e4:06:76:d4:6a:fc:b9:54:69:a6:43:35:f2:4f:e9:52:57:68:
90:2b:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:55 2026 by rpki-client