Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: omCupPIS/mSkkui1OU5lfY0kwOGbnrtAEt+v+AYjz8Y=
Subject key identifier: ED:05:88:14:3E:2B:9A:69:CE:16:44:51:51:8E:04:8F:D7:A1:FA:F9
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019CAD59BAFD5F80B7C9D518329F2EEC895B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 0701
Signing time: Mon 02 Mar 2026 07:01:04 +0000
Manifest this update: Mon 02 Mar 2026 07:01:04 +0000
Manifest next update: Tue 03 Mar 2026 07:01:04 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: QFlL6lloYJyDiUh+5VQQPyghrNclgEiaepHKQ8eNMx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ba:fd:5f:80:b7:c9:d5:18:32:9f:2e:ec:89:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Mar 2 07:01:04 2026 GMT
Not After : Mar 3 07:01:04 2026 GMT
Subject: CN=ed0588143e2b9a69ce164451518e048fd7a1faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:32:d2:90:e7:92:b1:c6:02:07:cc:12:e6:d5:
c1:20:20:1d:c9:69:7a:d5:a7:13:20:68:d4:00:f5:
5f:e9:b6:a7:22:0e:b9:5b:11:7d:9a:fd:70:cb:f0:
d9:db:ba:b3:3c:66:1f:4d:c0:96:d2:e9:0a:5e:3c:
b6:9c:19:b0:2d:7c:5e:2d:86:c4:00:72:25:1b:1a:
c8:7f:26:8c:d2:1b:b4:4e:81:14:fa:bc:2b:c9:19:
76:7a:da:54:0b:55:ae:d1:49:bd:48:d1:cd:e6:1a:
c7:f6:db:32:33:eb:b3:ae:c8:d5:1b:cd:13:c3:b8:
7f:9f:a7:17:85:93:4e:f3:0e:8c:33:36:7d:91:4b:
a6:49:33:25:0d:04:df:3c:80:7a:c1:0d:0a:c0:69:
19:ab:61:75:54:a3:ac:00:f9:31:aa:bd:95:bb:ff:
65:df:d4:ab:1c:87:87:2b:2e:ca:c7:56:1e:ba:09:
a6:28:30:d8:c5:83:3b:74:44:4c:6e:9f:a6:b6:6a:
96:8a:f8:b6:a4:f6:c3:c7:d3:94:7f:18:f6:dc:b7:
3d:41:d6:ae:b9:2f:67:95:a9:40:91:70:08:db:16:
8c:64:2a:6c:a2:86:18:e4:6a:2d:70:1b:39:37:13:
4e:cb:bb:5d:37:02:1f:1e:08:fb:ff:37:80:65:83:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:88:14:3E:2B:9A:69:CE:16:44:51:51:8E:04:8F:D7:A1:FA:F9
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:90:78:36:c9:44:5b:e0:23:41:e0:0e:cd:91:4c:dd:7d:e3:
61:6e:2d:38:97:9b:51:f3:e4:67:31:87:8e:8c:60:0a:e5:4d:
b5:05:9c:fa:19:1f:9c:6f:eb:21:81:c9:fc:a0:25:c1:0c:a6:
05:f3:30:f9:be:0e:ae:72:c7:59:99:98:ac:ee:0c:1d:5d:90:
73:8b:93:5c:79:95:04:6d:49:43:bb:6b:22:bb:16:9b:95:54:
71:c5:b1:62:d3:51:17:9d:f2:b9:4e:94:58:e1:b8:55:29:5f:
91:8b:f4:af:13:cf:2d:e8:3e:88:52:4c:12:cb:ac:80:38:d9:
75:45:ff:15:b1:c4:57:43:63:f2:f8:dc:04:99:aa:28:45:99:
d6:87:06:d8:60:c1:f4:b0:c9:a3:ba:6e:20:76:a3:ce:1c:8d:
a0:06:d0:6f:72:7c:e5:92:54:64:fe:a6:33:80:be:10:8c:9e:
22:01:11:97:b4:ea:ee:72:a8:99:dc:b1:b2:ad:68:24:96:2f:
df:66:21:77:81:e7:6e:11:3c:6a:49:59:37:b0:ce:2e:d1:e8:
6c:82:7f:a5:98:84:9c:c8:4c:87:f5:03:8e:f7:f2:70:5e:91:
08:bb:1f:81:95:55:dd:df:b5:85:42:4f:c8:18:b7:bb:2b:a7:
3b:40:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:28 2026 by rpki-client