Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: fAuI9HEO8SAiA7bizOdgS3dHRxq1ZTJ2tT8jvbOvfAw=
Subject key identifier: F5:05:6D:32:FF:0C:A1:C7:75:4A:7E:7C:90:3A:8A:83:25:58:48:C5
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019D29CDCFCBC933A1AACD733E239A7609EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: e30qtZg+SIoSzNWWqnuhoZ4BZHzRtVCCiyMXxRnx6U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:cf:cb:c9:33:a1:aa:cd:73:3e:23:9a:76:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=f5056d32ff0ca1c7754a7e7c903a8a83255848c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:84:79:c7:ae:eb:67:e0:45:d1:a3:00:8f:
3e:39:3a:bf:06:24:80:5a:52:cc:53:f1:e1:86:63:
a6:6d:99:75:ad:bb:6c:3f:c4:94:51:27:e9:e8:56:
0d:e1:5a:e3:5b:84:c8:d1:ed:5d:1b:ce:a9:8d:cb:
81:8a:4b:e9:49:05:d6:c3:b3:56:e9:65:54:f2:f8:
46:54:f7:2d:00:e1:5a:fd:96:76:38:6d:eb:fc:29:
f6:ca:ec:41:62:fd:2f:18:4e:15:fe:e9:78:aa:0a:
f7:1a:82:fa:f9:f9:28:b6:cd:d4:60:11:2a:b2:77:
dc:cb:cc:00:b3:86:28:84:2c:96:5d:2e:f5:d3:9f:
90:ca:76:72:61:e9:89:af:11:6a:c4:d4:9b:97:d3:
4f:c1:48:7b:ab:10:fd:04:27:6b:0f:6b:c0:c0:e9:
dc:b5:34:b8:b9:c8:07:ff:ff:c3:03:8c:d9:02:21:
d9:d2:b1:fe:90:26:e9:7b:fa:05:d5:e4:dd:7f:13:
9f:13:54:b1:00:41:5f:7a:9a:18:2d:e1:83:8d:fd:
9a:a2:13:f0:e1:40:38:4d:8f:8a:d8:56:54:c0:00:
be:f5:98:12:27:ae:40:ce:78:7d:c7:14:35:a3:64:
6e:29:a7:0b:8b:18:87:e7:8f:e2:31:f7:23:82:b6:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:6D:32:FF:0C:A1:C7:75:4A:7E:7C:90:3A:8A:83:25:58:48:C5
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:4b:d0:b2:6b:04:3c:ad:e3:f9:e7:f2:f9:e9:d3:fd:66:
61:50:04:43:b2:cf:a2:5b:d3:23:35:3b:14:a8:8b:1a:d5:0d:
ea:f0:35:da:f7:6f:ad:b8:1f:a3:99:73:a7:15:84:e2:58:8d:
2c:bd:fa:7b:92:f4:fb:9f:31:93:b9:b2:5a:0c:ef:e9:51:5f:
2a:09:18:0c:17:d0:c9:aa:64:29:ce:c5:d7:42:b1:d4:0f:84:
e8:1a:5f:81:67:f6:8a:29:e9:3f:ca:f7:b6:c1:09:8e:f3:14:
ec:48:06:ae:f9:b3:94:59:70:b3:f9:f6:b4:75:08:f4:f2:f1:
72:60:64:67:09:02:ab:f6:a8:44:8b:67:ff:34:71:c5:ac:c8:
c1:34:a0:20:58:ff:e9:ec:f5:a8:d4:9d:2c:a8:62:ee:2e:07:
58:ce:be:55:e8:be:73:63:91:71:57:02:54:f7:64:61:ef:2c:
9f:ba:34:8e:70:54:3b:cb:fb:8e:c2:5f:4d:ee:75:bd:89:6e:
ac:03:17:92:f0:6d:d5:c2:30:4b:d0:12:3c:ce:e4:53:ae:45:
9d:10:21:9c:3e:86:b9:8c:12:ab:79:91:88:ba:0a:89:62:49:
b7:1c:84:5e:5a:c3:86:b0:a0:6a:ef:dc:15:f3:2c:7c:1b:87:
b5:0d:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:38 2026 by rpki-client