Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: y9cdx4myD/lx042WqDAcRJ0D4cSqCX6m/AM1Ur3YO+Q=
Subject key identifier: 24:98:AB:7C:DB:7C:E2:9B:36:74:D5:23:7D:C3:59:29:4E:8E:E4:F2
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019E1CEB410F3BE5B74901570E2ED6795B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 16:00:40 +0000
Manifest this update: Tue 12 May 2026 16:00:40 +0000
Manifest next update: Wed 13 May 2026 16:00:40 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: +CZAqwd9/P/8GCBJRm8cTZEG+rmc50xMNWTpcAdba3Y=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:41:0f:3b:e5:b7:49:01:57:0e:2e:d6:79:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: May 12 16:00:40 2026 GMT
Not After : May 13 16:00:40 2026 GMT
Subject: CN=2498ab7cdb7ce29b3674d5237dc359294e8ee4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:36:2a:91:61:27:54:ea:ba:5d:0b:dd:ad:
52:06:5d:25:8b:23:a8:c3:64:cc:c4:ce:84:c9:f2:
e5:ce:69:52:55:1a:81:87:72:a9:3e:64:ea:eb:67:
d2:21:d6:06:9d:d7:ca:57:8a:54:54:ff:00:81:55:
ac:9f:6b:67:13:e1:62:9f:ee:7d:38:89:9a:eb:9d:
9e:37:cc:3d:12:13:65:0e:45:c0:4c:58:1f:3e:16:
a5:ff:3e:25:ee:fe:cf:e6:11:21:70:c4:3f:b7:e9:
ee:6f:0a:68:45:71:83:14:b7:0f:d6:94:d3:c9:51:
67:2a:d3:94:a1:82:5f:bd:e3:de:55:8b:e9:23:ce:
ca:27:04:db:c5:72:e5:64:e6:2b:35:9d:b2:27:5b:
e5:06:7a:88:48:f0:86:2f:a4:73:59:5a:55:29:66:
26:8c:ee:3f:79:2e:da:9c:1b:e8:a7:8c:c1:a7:88:
d5:8f:9b:a3:74:41:92:2f:ab:02:12:d6:8c:a5:48:
3a:8f:e2:f6:f8:9b:0e:ec:68:d4:95:d7:ac:2c:c1:
0c:b2:7b:e5:fa:33:82:7e:0d:af:07:43:2a:69:94:
46:c4:52:7e:30:dd:2a:9c:bd:ae:e3:7b:c4:b5:7c:
2a:49:a3:99:da:62:ed:be:7a:53:0b:91:f5:e1:39:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:98:AB:7C:DB:7C:E2:9B:36:74:D5:23:7D:C3:59:29:4E:8E:E4:F2
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3a:bf:a4:49:4d:4c:38:a1:9b:17:de:e0:60:38:6a:a8:93:
d7:58:a6:da:53:7c:9f:26:2a:70:da:d5:1b:72:7b:bc:6a:4d:
eb:b2:9e:e8:be:c9:5d:b2:bb:5f:c9:d9:66:32:56:d1:94:58:
ee:26:ee:63:db:00:7a:04:bb:78:65:ab:47:6d:6e:54:ff:8f:
d7:31:2c:f2:43:42:42:13:84:d9:36:1f:8c:9c:5f:c4:71:35:
b9:0f:4b:c4:e7:98:e6:f9:fa:57:36:4c:e7:98:ec:aa:eb:fa:
08:2e:8a:d9:c1:98:08:b1:0a:b6:d9:08:36:31:d8:aa:b9:b7:
ab:4b:2c:df:c3:7a:18:83:2a:0b:d0:b7:b7:36:0b:3c:56:06:
f9:4c:fe:4b:85:46:f0:19:42:a6:d3:45:8f:0e:fd:e1:0b:f2:
7c:57:31:52:b9:b2:3b:2d:58:06:81:a1:35:5a:af:9c:37:1a:
64:d7:93:83:ba:5a:e4:86:ba:66:26:88:cb:99:29:fc:d9:67:
a8:61:5a:f5:6c:b6:20:de:e0:8b:ae:92:cf:53:0a:0a:45:dc:
b5:37:c9:a1:e1:8f:92:d1:1c:d2:fd:22:0a:08:18:1b:b3:76:
ba:0d:a2:28:3e:ed:2d:a8:52:21:4d:70:d6:32:75:78:b6:27:
97:b7:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:07:23 2026 by rpki-client