Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: T++qJhUs/qpBX2Mfha6/C8B+WbOo5YGOlTGcWTrh9l0=
Subject key identifier: 30:FC:7A:76:DD:90:2F:AA:DA:4B:84:51:9B:26:CE:25:3B:D2:C6:E7
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 019CAA2199169470551589775391C84ECC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 071D
Signing time: Sun 01 Mar 2026 16:00:54 +0000
Manifest this update: Sun 01 Mar 2026 16:00:54 +0000
Manifest next update: Mon 02 Mar 2026 16:00:54 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: nbl1QPPKXswuvNoYflghJTVdqrfIzHEhX4DtunZOOLc=)
2: Bo61RTRTOhfwB50Bqs5zl4FzjGE.asa (hash: fR/GqKb8wiw/0kJKnHBnbPsaaq7HXPxVfPXam3jXJ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:99:16:94:70:55:15:89:77:53:91:c8:4e:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Mar 1 16:00:54 2026 GMT
Not After : Mar 2 16:00:54 2026 GMT
Subject: CN=30fc7a76dd902faada4b84519b26ce253bd2c6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:fc:08:a4:e6:78:8e:03:de:3a:ca:08:7e:
36:ec:db:3f:98:7f:60:56:4e:74:42:f6:5e:04:a4:
cf:ca:23:27:72:91:cc:6e:68:aa:ca:43:6b:7d:f8:
e4:6f:52:47:d6:d7:c9:f7:d6:2f:c7:8f:c8:67:b5:
a6:9e:9f:4b:16:ab:64:e0:f8:58:d0:af:82:ca:ac:
2d:e1:fb:da:a5:6c:ff:2e:38:7a:62:b1:b6:e3:e9:
94:11:09:a7:f4:c5:ca:dd:78:4c:bc:d5:bc:f9:42:
e3:2e:2c:14:09:36:75:44:b2:20:50:70:c6:9b:b8:
8d:f5:ef:16:44:5a:a8:41:be:8f:c7:c5:da:d3:c4:
fd:68:46:f4:e9:9a:8d:aa:c3:e3:c4:97:ea:8f:3c:
5a:0c:86:e8:4a:92:4d:90:15:cb:aa:54:16:c0:14:
10:7f:5e:fd:cf:12:f0:33:23:c7:70:c1:7e:00:f2:
7f:d3:3f:3a:a8:1a:0b:f2:62:91:31:04:3d:79:1a:
e8:10:30:22:6d:e4:91:60:30:50:cc:4a:0e:5f:6c:
7e:a9:92:44:5f:de:83:67:12:ba:47:85:36:f7:40:
88:b0:4a:e0:67:85:bd:48:4b:10:f1:db:ed:0e:82:
f5:09:96:ca:f4:d8:9d:92:fc:06:49:6c:2d:46:0e:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:7A:76:DD:90:2F:AA:DA:4B:84:51:9B:26:CE:25:3B:D2:C6:E7
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:2f:31:20:b9:4c:72:f0:83:09:8c:1b:e2:01:91:e3:1a:
21:1a:5f:0a:fb:ea:f1:d0:cf:4f:34:75:c1:f5:5a:dd:dc:aa:
2a:a0:03:43:92:76:68:7a:82:5d:66:48:0f:08:2e:54:cd:29:
4a:f9:9f:4a:03:bb:48:ad:f0:32:c4:58:dc:73:6e:6d:45:1c:
fe:5e:ca:7b:f5:5e:50:56:0b:c1:d1:06:88:46:ae:5e:fc:dd:
ac:a3:71:ca:07:da:8e:d8:6b:0e:02:78:b0:97:62:f6:d4:e6:
7d:6c:54:7b:12:66:91:46:2f:31:3e:15:21:a8:f8:33:cd:19:
b0:7a:08:9d:b0:cf:3b:7d:9a:03:c8:11:ac:68:74:a3:b7:8f:
95:ef:9d:e8:b5:3a:e3:85:bc:44:82:e5:82:0e:07:08:84:3a:
e4:c9:38:70:7e:d7:30:d5:1c:8e:7d:fe:4c:c1:36:3c:f2:ba:
ec:85:70:a2:90:bb:63:9f:fd:59:6d:a6:f1:6b:1e:fc:ee:a8:
7a:18:12:13:4e:5a:d3:99:4e:c5:5e:8e:9e:d0:fd:1b:57:3d:
06:11:b3:b8:3e:3b:b5:c9:8a:eb:21:52:18:5a:24:91:01:ed:
49:c8:ac:fe:58:5f:03:8a:a1:12:13:cc:68:b1:14:04:8a:05:
d7:f5:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:28 2026 by rpki-client