Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier: Yioc/IAo3qvrpr/dezC3XOhYLZt90ahRuoInO67tHW8=
Subject key identifier: FE:4C:FA:F7:C5:59:FF:5A:2D:92:9F:35:35:87:FA:0B:03:E9:23:2B
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial: 019CAA8FEB566271BA499AC559959BFF314B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number: 05ED
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: cQCDgJdM56OvB-BfvF6zionxI8Y.roa (hash: +/gYe8nRfG+QFdVNaYVDkUqqDuLW/SmfqR2wjvDlTHY=)
2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: hb+SgK366XXx3MmJOv4RUY5ujClCvqPN094BT7838U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:eb:56:62:71:ba:49:9a:c5:59:95:9b:ff:31:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=fe4cfaf7c559ff5a2d929f353587fa0b03e9232b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:43:1c:50:7f:7d:74:44:78:9f:8f:6e:68:
4c:38:1b:d1:2e:41:76:78:c3:43:0b:3d:f4:50:2b:
12:59:05:e2:72:47:97:ba:77:7b:61:59:de:57:2b:
bd:ae:f8:50:17:c5:24:42:bf:c4:1f:61:da:4a:3b:
51:4b:17:b9:64:ac:62:42:d6:56:a2:c1:e3:c8:9e:
1d:4a:e6:5c:17:cf:23:9b:85:12:9d:0e:b3:07:62:
c5:e9:db:d2:76:9f:d8:dd:1e:ed:a5:e4:b2:11:d9:
ac:7d:65:f9:b2:08:e3:87:35:27:06:93:0f:7d:3f:
4f:51:bb:0d:a8:51:a4:75:0a:90:9b:34:6a:a5:77:
c4:65:be:ce:22:38:5c:6c:f5:a0:7c:ca:d4:95:c1:
bb:d1:c6:bf:aa:37:90:99:2a:4b:a4:8b:2a:c2:56:
b3:a7:37:e4:9d:9e:a4:a2:c4:03:7b:c1:8e:2e:53:
f5:31:94:bc:c7:b7:d2:58:67:0b:e0:ac:44:a7:b0:
e2:c8:cd:00:24:b0:fd:5f:67:1c:37:f4:1e:c4:b0:
63:34:59:bc:c7:90:2f:f7:8f:78:29:31:d9:00:b4:
9e:4a:c4:52:15:e0:cb:38:5f:34:31:f9:fa:54:65:
70:b2:54:3e:07:02:69:68:40:01:12:59:32:57:cd:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:FA:F7:C5:59:FF:5A:2D:92:9F:35:35:87:FA:0B:03:E9:23:2B
X509v3 Authority Key Identifier:
keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:15:a3:32:02:90:8f:6b:9a:5d:c9:f1:85:b2:00:db:67:e8:
57:54:d3:f5:18:9b:1b:fc:6b:7f:04:b7:17:9a:98:03:f5:ce:
0f:bf:c1:b3:91:73:b6:01:d9:74:00:41:2f:85:75:45:af:b9:
40:79:b1:6d:af:e1:6b:f9:36:c2:2a:1e:a1:72:7c:c5:89:a9:
66:29:3a:95:a6:c2:6a:09:30:3a:0c:2e:bc:28:68:93:4b:b8:
e3:b5:5e:58:a6:0d:6d:64:0c:6b:78:5d:c1:b5:bc:1a:11:26:
f4:e3:af:ba:8b:ff:79:9f:a7:3d:44:3d:4d:18:90:c1:49:d9:
28:43:8e:52:4d:0e:d6:ee:bd:0e:93:e6:24:79:12:53:01:85:
56:52:c3:04:bf:bf:f9:e5:2e:fa:e6:ff:bc:31:5e:c4:23:cb:
2f:9e:c5:17:f4:7e:5b:08:62:fa:98:56:6a:41:fb:91:40:62:
2a:8c:4f:14:9e:f9:3b:67:f3:3d:7a:6c:9c:fa:54:06:19:db:
b2:95:af:28:a5:4e:09:bd:c6:0a:fc:1f:8a:fe:6a:19:03:09:
07:52:ff:f1:84:87:8b:e5:8a:f4:c3:41:65:17:22:d0:65:52:
dd:ac:e5:f7:b7:63:3b:33:34:ca:66:9c:7c:1d:a5:25:f5:48:
79:74:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:53 2026 by rpki-client