
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier: UNHMbOTuMSX3zaHe2HdUiNRWs0+sh5BQMOwryIO+12o=
Subject key identifier: 7F:14:B0:7D:47:8F:1C:FD:19:FF:88:FD:4C:06:FE:02:A0:60:57:7D
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer: /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial: 019CAB6B2454E5A8023D4DD0124A065D62E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: y/mJQNl5sMwi7IwtZPAOOhALJ2WMY7yAh+NTbjKy20U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:24:54:e5:a8:02:3d:4d:d0:12:4a:06:5d:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=7f14b07d478f1cfd19ff88fd4c06fe02a060577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:6c:af:df:12:de:d6:d2:b9:2d:92:49:b1:
55:ff:eb:d1:c9:d6:1e:64:47:6f:bf:f5:3c:fc:5b:
bd:4f:41:0a:97:53:20:88:d2:94:0a:75:c2:f0:84:
19:2d:2f:75:11:b8:d9:47:29:97:49:13:2f:1d:77:
84:b8:87:28:2f:fd:06:40:70:d0:64:ea:45:8d:4d:
27:31:13:b3:3b:e9:9a:8d:82:c6:98:bd:93:2b:ad:
ed:60:24:b4:be:e5:cb:84:26:8f:b8:4d:2c:0f:58:
4a:4b:cb:db:40:f2:0b:d5:89:a3:6a:8c:df:71:76:
bf:cb:81:67:9f:06:89:79:f6:1b:74:eb:e0:75:1a:
0c:04:0b:2e:2e:34:41:df:f1:df:28:ae:b1:5b:ff:
61:76:ce:89:56:e9:8d:c3:1d:4c:22:db:37:ef:03:
0e:de:ec:5b:3f:e0:78:09:f7:1f:27:07:d1:65:7d:
8b:b5:d5:ab:93:0e:bb:01:7a:ee:2e:08:46:72:cd:
94:f7:cb:58:28:c9:a6:ac:e7:6b:9f:b5:85:9a:ec:
dd:3c:19:11:4c:80:e2:f6:ab:f8:64:a0:b9:ff:7c:
cf:2d:17:72:c7:7b:f8:bc:55:21:52:53:2f:c9:e5:
84:75:16:2b:a3:5c:f5:49:0f:fa:9e:3a:87:1d:4f:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:B0:7D:47:8F:1C:FD:19:FF:88:FD:4C:06:FE:02:A0:60:57:7D
X509v3 Authority Key Identifier:
keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:0f:84:83:05:12:11:f1:65:3c:72:17:3a:ff:43:4b:46:
9a:04:0f:87:26:0f:df:fb:78:a6:33:fd:a9:b1:0e:88:2a:91:
c9:99:01:a8:b9:fa:7c:50:39:e6:73:4a:58:a8:f4:a8:71:14:
72:11:be:80:99:2a:81:be:a5:e8:dc:76:d0:73:5e:61:e8:5a:
a6:ac:02:f2:aa:fc:a6:50:a2:f5:3d:91:24:c3:a3:63:af:6c:
e1:50:d5:29:0c:e6:af:54:f0:2e:03:80:1b:9f:76:3b:96:05:
52:38:6c:31:2c:1b:69:54:04:51:37:0d:92:e5:ab:f5:d5:6c:
89:3f:83:d4:83:bf:0a:cb:89:7b:f9:12:0e:d7:c5:3d:da:8f:
a2:7a:9b:81:4e:f3:51:e8:0a:a1:36:41:c0:3f:50:be:b4:0a:
8f:3d:ea:33:42:7a:93:5f:ce:8c:f4:4a:4f:46:75:c3:5c:da:
72:d9:b8:01:ee:42:77:f8:24:e1:df:f1:a5:72:62:7b:23:92:
c7:b1:ea:05:1c:6a:24:1a:8b:44:89:57:b8:d6:a2:7d:a4:5f:
fc:d8:84:81:87:4b:cc:74:30:19:3f:50:74:00:95:70:4a:e5:
ee:75:30:eb:a9:21:1f:f1:8b:56:1c:70:86:bb:0d:bc:a4:c4:
d0:5c:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:22 2026 by rpki-client