Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: 6kx5v3o1GU3r+k0mSrlTz2omeZOKSG682WiNlfuMFNo=
Subject key identifier: AF:A9:42:60:3C:B6:88:0E:6F:DC:DA:D8:AB:95:8D:1C:10:02:11:5F
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019CADC7E3E5D9D37E0086A854D018B68587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 05C6
Signing time: Mon 02 Mar 2026 09:01:24 +0000
Manifest this update: Mon 02 Mar 2026 09:01:24 +0000
Manifest next update: Tue 03 Mar 2026 09:01:24 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: GSbu/bnUEmzVtXz2DO0d/SVmKJk66WY89TMXHVrX0Rk=)
2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e3:e5:d9:d3:7e:00:86:a8:54:d0:18:b6:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Mar 2 09:01:24 2026 GMT
Not After : Mar 3 09:01:24 2026 GMT
Subject: CN=afa942603cb6880e6fdcdad8ab958d1c1002115f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:a6:2b:a9:77:e1:8d:78:10:99:b9:ea:0d:
14:0d:32:44:21:4a:48:64:ce:80:e0:3e:55:21:d2:
06:69:0d:8c:56:57:87:09:58:ab:6d:a9:9e:33:3e:
99:17:68:df:83:a2:65:cb:2d:d0:cf:8b:3f:de:4e:
d0:c5:e5:0a:64:ae:18:52:c5:a2:60:9a:3e:e5:bc:
f0:47:10:08:3c:01:ed:42:c6:f9:91:12:64:cc:3e:
09:92:ce:62:88:50:7f:df:8b:74:6b:d6:9d:2d:db:
1e:31:4f:d6:e4:b9:3c:d3:d7:d5:5d:bc:59:eb:3d:
1e:90:77:3a:f0:30:37:09:21:9f:6b:a2:99:6e:64:
3a:f1:48:7a:15:07:de:89:87:9d:1f:7f:a2:65:08:
45:7f:09:1b:eb:6f:1c:7b:46:52:4f:8a:73:08:98:
4d:2c:74:05:4b:b3:76:55:86:4a:d5:ed:c8:f2:9c:
24:94:8f:69:10:27:60:f4:34:59:3c:ae:cd:6e:ad:
81:25:da:e8:27:b2:dd:65:9d:87:5c:92:22:94:77:
3e:0e:45:67:ca:d9:cf:9e:b4:cf:2e:e0:97:6d:83:
4d:10:a7:89:16:69:31:5d:d4:67:72:ae:ca:f0:1e:
56:da:8f:3c:52:76:14:1f:ee:67:19:09:3a:17:35:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:42:60:3C:B6:88:0E:6F:DC:DA:D8:AB:95:8D:1C:10:02:11:5F
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:21:6e:75:bb:3d:48:47:8b:da:67:c4:7d:08:e5:25:13:d2:
f9:55:4e:ee:31:8d:07:ab:45:9d:6b:7c:92:8a:d6:ac:a3:ed:
1e:2b:84:d1:fc:2e:d2:f8:6e:56:16:52:f9:29:77:3d:e8:6d:
e4:1f:86:ec:3a:56:99:4f:68:a1:2a:5f:d3:4c:9d:b3:c2:6c:
64:17:a2:fa:42:4f:15:46:50:92:4d:cc:17:94:0e:41:58:39:
ad:03:09:90:f8:73:36:1b:c0:12:33:ba:ab:53:ed:09:db:d5:
b6:9f:c1:de:17:1e:f5:2e:a0:34:3e:0e:4c:81:ef:e9:67:36:
2d:96:b9:9d:b1:05:f1:59:de:df:65:5c:8c:98:eb:8e:06:31:
4d:9c:84:6e:e7:64:e1:a3:f9:d3:f5:69:ca:ac:48:7d:4e:ff:
c2:1b:98:14:8c:33:4f:96:a6:eb:b6:98:ef:1d:6a:15:a9:69:
b0:e5:89:57:d9:55:f5:d1:84:d8:8c:91:1e:f4:6b:21:1e:69:
64:ed:65:10:47:fc:b5:7f:a3:dd:b5:18:07:8c:0d:80:d6:35:
c6:88:03:a5:80:7b:2a:a5:6c:28:c1:3a:36:2e:47:88:12:a2:
4c:89:a2:66:84:d4:97:02:0e:54:55:1d:21:77:8f:3a:a5:3c:
e1:b0:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:30 2026 by rpki-client