Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: XpG2zbh9uQXAqFKENjIrmxjqLq7PDJJ1io6bncX5w7g=
Subject key identifier: A6:E9:57:FD:AF:B4:3D:BC:DD:FC:F4:67:F4:A3:0F:A8:CB:4C:B6:FE
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019CAE35982B3A6BF0DA28D9FE6BA3973CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0906
Signing time: Mon 02 Mar 2026 11:01:13 +0000
Manifest this update: Mon 02 Mar 2026 11:01:13 +0000
Manifest next update: Tue 03 Mar 2026 11:01:13 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: ufE9gss+9aioEEBNH1J9ncYCJdYZ4203fS4PygUL53Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:98:2b:3a:6b:f0:da:28:d9:fe:6b:a3:97:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Mar 2 11:01:13 2026 GMT
Not After : Mar 3 11:01:13 2026 GMT
Subject: CN=a6e957fdafb43dbcddfcf467f4a30fa8cb4cb6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:1d:42:2e:57:ae:e1:7f:39:41:97:7a:48:
3b:b6:22:7a:c2:d1:90:b7:df:e5:b2:dc:87:b2:8a:
e7:b0:37:f7:8d:a6:ae:f7:ce:0a:ee:0a:3d:0e:7b:
5d:b4:fa:2e:31:e3:dd:ec:de:18:65:10:e6:58:90:
9e:08:77:10:93:e7:e3:22:eb:b2:7c:1f:cb:f7:15:
c8:82:d1:37:14:ef:89:21:d5:48:b6:30:e8:d1:93:
84:a9:1a:9d:d8:55:ff:ea:36:6c:f2:b7:aa:72:9c:
97:c9:8f:e3:d4:12:f5:eb:99:89:bc:67:56:5f:72:
92:ed:8e:be:d4:29:0c:a3:5d:b8:7e:7a:08:cd:01:
31:22:cb:06:61:fc:ee:a7:34:d3:57:be:82:4d:4f:
bb:7b:4e:20:ed:fe:33:37:09:d6:95:4c:40:be:8e:
5f:a7:64:13:6a:e9:b1:4c:0f:b4:31:c8:45:e8:e2:
3c:52:36:f5:6b:f6:9b:53:dc:81:df:f8:7e:97:f9:
5c:79:04:43:d0:ec:e3:1b:54:4a:61:f8:3f:7d:33:
85:a0:1c:1a:c5:78:d5:46:0b:9c:ee:47:56:bd:36:
09:08:74:b1:51:73:22:c2:dd:31:34:1b:b0:86:c0:
d4:8f:ea:bc:5d:59:2c:a1:62:01:e8:4f:e8:16:fb:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E9:57:FD:AF:B4:3D:BC:DD:FC:F4:67:F4:A3:0F:A8:CB:4C:B6:FE
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4d:c2:00:92:01:fc:6b:1e:df:b9:c4:43:7d:1b:0f:0a:7f:
bf:37:5b:a0:13:51:4e:b4:1a:6b:a2:91:4d:b7:b4:6c:49:2c:
ca:9d:0c:7c:c3:b1:cb:ac:03:bc:2b:f6:22:2c:14:41:4a:a4:
b4:5f:39:86:25:52:ad:3b:dc:ae:e6:0e:bb:f5:09:44:fa:fa:
0b:85:16:20:9a:7a:5b:18:7a:6f:19:32:44:52:10:5e:1f:88:
4e:da:ec:e6:4a:68:e9:ac:3d:a2:3e:2f:4f:74:4d:f6:3b:6f:
84:1f:b2:fc:78:87:ca:08:61:d6:7c:b0:f0:44:89:6e:f5:c3:
12:e6:97:b6:5a:aa:d7:3c:b9:98:69:76:00:98:fb:2d:05:28:
3e:d4:7d:0d:33:29:14:85:53:df:60:9f:15:a5:b7:be:58:2b:
e1:7e:86:d7:6d:48:b7:fa:00:b1:cb:97:a7:7d:74:7c:be:7a:
d9:ce:bd:b5:46:f6:8e:c4:5b:f2:8b:c2:9b:bc:16:72:c4:15:
b7:b2:a3:8f:ed:f3:b3:a4:f6:36:c0:45:98:54:65:56:78:85:
8d:dc:fb:1e:a8:bc:54:ff:b5:85:89:09:44:ec:51:54:e5:e2:
bf:b6:30:8f:72:55:b9:1a:90:02:bc:7a:ec:df:40:c1:c2:f1:
4d:23:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:58 2026 by rpki-client