Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: WjajHCpIJISbob6HQfdvZ9+S3/ZmCkiDBFtYnl1/Rh4=
Subject key identifier: 57:32:4F:61:84:D8:D9:A5:6D:B7:DC:1A:4C:ED:78:38:41:E4:69:8E
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019D27A8B17C3CB7BBC783CB07930CDE2A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: Ed4gr/d6MXcDZbgQfdA8yxc2c722lkMdBjauaUL+fLQ=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b1:7c:3c:b7:bb:c7:83:cb:07:93:0c:de:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=57324f6184d8d9a56db7dc1a4ced783841e4698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:73:9c:a6:07:82:e3:eb:ad:40:a4:2c:aa:
2e:c7:f5:c6:00:53:79:d7:df:fc:f6:02:60:43:69:
47:32:bb:92:1f:37:3d:98:77:17:ab:f1:cd:f2:95:
3b:c6:5e:b1:43:d5:7e:ba:84:0e:e0:d1:cc:75:9f:
c4:2e:12:45:82:66:8e:05:61:eb:94:db:8b:ea:15:
19:75:ae:8e:ea:cf:83:a0:5b:77:fc:86:b2:b8:b8:
0f:e5:2d:fc:3e:0e:a8:eb:85:34:8b:d8:a7:43:91:
31:92:ca:ab:44:c3:75:3c:f3:f0:4a:95:4a:22:56:
a2:ef:6a:f2:1a:5c:1c:75:19:b0:cf:b7:37:3d:a5:
4b:9d:a8:96:b7:ed:4e:bc:26:96:54:53:cc:b4:71:
c0:97:5e:f2:04:81:21:b0:5e:76:a1:34:af:90:f7:
a8:b2:b2:30:61:f6:9c:a4:b3:7f:e2:94:e0:c0:93:
15:e4:5d:1e:23:ee:95:c0:df:1a:dd:10:86:3e:eb:
ea:17:8d:58:b1:8a:77:b6:bd:dd:18:b2:da:f3:a0:
13:dc:9b:a8:75:90:d2:ed:b9:b9:fc:f6:4a:57:a6:
f0:e8:26:e9:48:0c:48:2a:a0:31:b4:38:b1:0f:fb:
44:ce:5a:36:0b:0d:b2:40:af:d3:f9:57:47:c6:b8:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:4F:61:84:D8:D9:A5:6D:B7:DC:1A:4C:ED:78:38:41:E4:69:8E
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8b:dd:ef:44:35:df:bb:65:ea:30:39:56:d9:10:db:08:54:
e6:ee:a6:b5:18:cf:70:b8:5f:1a:e5:7e:3a:ef:91:75:86:92:
4a:a2:ba:cf:70:a2:95:2e:e8:e8:15:e3:2b:67:bb:c1:c8:a4:
a6:74:95:40:9a:2c:ad:29:a5:f5:88:e0:d3:0c:0b:39:bb:71:
37:f1:31:fa:36:61:a9:65:99:ae:f2:1b:d4:b0:27:f2:4c:54:
ff:7d:eb:1c:8a:6f:d5:8e:c5:27:14:0b:b6:29:0f:a5:97:97:
a5:9e:cf:33:6a:ca:d6:20:12:fc:4f:cf:24:89:21:e9:62:27:
e4:ba:e4:a9:d4:d8:06:41:1c:d1:4f:9c:15:e7:a3:9b:f1:f6:
c0:5c:01:f1:23:3a:42:b5:2b:ba:88:af:17:67:79:2c:1b:c8:
3f:e2:aa:98:d0:3a:ab:92:f8:f5:18:bb:6b:fe:0b:9e:9e:55:
c9:4c:99:b5:45:a6:06:d8:5d:8f:36:16:4f:2a:38:a7:10:d9:
73:f3:32:57:13:9e:2a:8b:0f:89:2a:88:39:2a:68:d4:a2:93:
56:da:23:50:2d:7e:1e:ab:cf:a8:9c:c9:a3:b7:a8:88:db:bf:
b6:af:7f:36:38:32:d1:d7:b2:6e:76:48:ae:20:7e:a5:dd:bd:
e6:71:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:28 2026 by rpki-client