Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier: tEa3MUmyRndX1CQDhs0gnJZSy8FFNeRvQ3We+is54ks=
Subject key identifier: 5C:73:DD:22:B5:FD:56:DD:2F:98:62:5A:A7:EE:6F:2E:28:F3:DC:47
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial: 01A0DB71CF4035BD2952AA0F48B8D9A8C838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 02:01:03 +0000
Manifest this update: Sat 26 Sep 2026 02:01:03 +0000
Manifest next update: Sun 27 Sep 2026 02:01:03 +0000
Files and hashes: 1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: ElQ+qgzjnQa3Vs09OThFLPqN2E1NkWbxt3GckAwJrvk=)
2: t2c4lmTqC9uGYzleHqLG4klFeZ8.roa (hash: fRL26pE0Lx95YEnYyPGswoxFOLVpoZdxz9ASbz1R9mA=)
3: wIbv7UWO_ALdEP04czwT0aWwxxI.roa (hash: 4JPtr6Gu7VDu44z7LHmoMEvhe+/5/6vfyE3Ntj5O0Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:cf:40:35:bd:29:52:aa:0f:48:b8:d9:a8:c8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Validity
Not Before: Sep 26 02:01:03 2026 GMT
Not After : Sep 27 02:01:03 2026 GMT
Subject: CN=5c73dd22b5fd56dd2f98625aa7ee6f2e28f3dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:ff:8f:d5:42:1c:75:bb:55:e7:ce:0c:7c:
69:88:00:68:c4:67:4c:21:95:6f:17:64:39:fe:24:
7f:7f:b5:ee:34:6d:09:d1:79:1a:f1:63:ad:b3:4e:
b6:fd:ad:90:bf:91:56:96:26:00:be:a7:28:40:24:
15:07:66:26:af:ab:6f:44:d6:65:02:96:3c:ee:63:
20:b9:9c:a3:83:6b:c3:0f:d1:2f:f9:71:68:6c:ee:
ae:d2:fd:ff:5d:0d:85:fe:a0:e7:c4:86:c1:2d:e1:
1b:59:0a:4c:9b:aa:92:18:65:89:37:ad:8b:d2:31:
d5:03:8e:4b:6f:c1:60:fe:95:76:9c:6a:ca:21:a0:
01:7a:f0:d8:76:a4:9c:48:5a:fe:13:66:ef:1d:48:
3c:58:c1:18:38:cb:95:f3:79:64:9d:d2:71:0e:48:
19:f2:eb:a8:af:dc:6d:92:c5:18:4b:5a:ff:15:92:
49:25:cf:3d:41:6f:34:fc:8f:20:c6:67:af:25:76:
04:e6:cb:61:19:3d:dc:ee:8b:17:f5:05:72:19:ed:
b9:19:3a:70:17:72:fe:13:29:b3:30:7b:d7:ee:9c:
40:3d:fa:99:04:7b:fa:68:40:fc:f8:89:68:fd:49:
05:a6:fd:52:29:92:2e:b5:c0:e5:3f:77:7a:ea:fc:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:DD:22:B5:FD:56:DD:2F:98:62:5A:A7:EE:6F:2E:28:F3:DC:47
X509v3 Authority Key Identifier:
keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:87:e9:5f:a1:3f:ff:31:eb:1b:b4:4c:58:6c:93:db:70:f9:
5e:44:19:02:7a:78:40:e2:d5:57:73:74:8f:f1:68:a7:41:f9:
8f:b9:92:e1:ef:24:2e:44:24:8c:df:e8:b5:48:9b:dd:c8:c2:
97:23:ed:2d:ca:f6:0f:00:45:fa:15:94:e8:c5:16:3f:67:fb:
fc:c2:01:6b:91:53:34:84:f8:16:b9:7b:d6:c9:a2:6f:fe:f1:
c5:fb:f4:30:6e:12:fa:4e:0e:48:47:9c:c6:96:e5:5d:ae:d6:
7a:fd:ca:6c:ae:b4:e5:47:c4:49:fa:6e:7c:0a:51:97:be:a9:
d7:52:86:ef:6f:e8:6a:e3:6c:15:1e:87:8b:5d:f3:84:73:18:
0b:ae:7f:d1:bc:8d:12:c9:04:f3:87:44:04:0a:5f:49:0b:7d:
7a:f8:77:e1:80:4e:03:e7:54:e6:8a:55:7c:5d:3c:95:6b:4d:
5e:81:cd:93:d3:37:d5:95:49:3a:ba:d9:30:c1:08:c1:68:29:
89:b7:0c:fb:c9:85:7a:63:35:a3:31:96:22:b1:06:c4:9e:51:
4f:f4:03:36:5f:66:1a:32:ef:37:73:3c:9e:1f:f7:04:b1:41:
76:75:2b:16:3f:d7:62:aa:6c:e5:6f:26:15:3d:00:d5:13:55:
e4:d0:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:48:51 2026 by rpki-client