
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier: wyoROycDtGpjahVhY5ASF1I4FTJLvD52T9+QSnK7EDY=
Subject key identifier: A1:D8:29:F7:2A:D9:78:9A:DA:F4:09:22:56:D2:A5:60:0B:21:DF:71
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer: /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial: 019E1E6C15DE0D691D05D53A48BB98B2B3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number: 0500
Signing time: Tue 12 May 2026 23:01:00 +0000
Manifest this update: Tue 12 May 2026 23:01:00 +0000
Manifest next update: Wed 13 May 2026 23:01:00 +0000
Files and hashes: 1: 1-BDF7EdL9hLHZ4qCs6jAWm3n8G8.roa (hash: 3HI3L0u1gTr2C+yxlBAEamd5L6jvpyumi2g5XXRKy/k=)
2: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: rVPtjkpgC0hl0TLTMfj5RHSFO+yTQew68un4TO8UWLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:15:de:0d:69:1d:05:d5:3a:48:bb:98:b2:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
Validity
Not Before: May 12 23:01:00 2026 GMT
Not After : May 13 23:01:00 2026 GMT
Subject: CN=a1d829f72ad9789adaf4092256d2a5600b21df71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:98:ff:f9:d7:4a:16:17:d5:47:0e:39:33:
89:04:32:a6:e0:b8:df:08:7c:a9:a8:1d:33:2a:fe:
96:3d:fd:5f:5c:66:ab:98:91:12:29:5e:58:a0:87:
3b:2d:cd:1e:8e:a0:cd:68:9a:23:85:74:98:eb:b8:
88:e3:51:dd:19:d7:07:b6:2e:ce:77:a5:2a:e9:27:
05:79:48:3d:34:4c:fc:6f:e6:05:48:69:56:43:4f:
1e:79:4c:9d:7f:dc:64:80:fb:7a:c2:7f:4d:e9:05:
70:8a:29:46:6c:cd:56:d9:ac:f8:66:b3:28:45:4c:
fb:84:2e:dd:6d:10:43:13:e3:ac:5e:6e:e5:10:69:
04:8d:fb:49:31:a3:bc:5c:43:97:6a:95:75:3e:38:
32:97:6f:6f:24:da:cd:0f:4e:0f:d3:c6:e6:4e:d9:
5f:a2:d4:15:47:eb:f6:72:59:3c:f7:e7:40:55:3d:
4f:59:3f:cf:9e:04:81:f1:c1:1c:35:d1:6e:9e:4b:
19:ae:22:3d:91:6f:38:ce:ed:18:e2:90:28:3f:ba:
bb:1e:67:12:51:a8:b7:2f:b1:39:76:9d:0b:de:3b:
d9:78:b8:91:aa:83:0e:14:b8:88:76:86:a4:6f:c2:
38:b4:c1:60:97:cb:89:3b:4b:08:c7:81:23:28:6d:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:29:F7:2A:D9:78:9A:DA:F4:09:22:56:D2:A5:60:0B:21:DF:71
X509v3 Authority Key Identifier:
keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:74:75:2c:13:cf:93:36:db:ce:45:77:1a:c6:51:29:25:
ab:ad:c7:28:8c:bb:51:25:86:f5:08:47:fd:ca:1f:ee:4a:00:
de:9a:42:93:30:91:bd:48:10:a8:7c:81:80:e5:db:05:fa:65:
90:04:69:53:3b:69:41:8b:f3:4c:79:f7:35:a1:ff:d6:99:8c:
a8:90:6a:92:2f:d4:a3:de:67:dc:65:f3:c2:b4:2f:df:84:4f:
8c:b0:ed:70:dc:23:a3:57:bb:69:2a:4f:d2:19:77:a6:83:f8:
82:f5:f4:ff:c6:ee:85:13:bc:64:51:bc:f9:8f:bd:f5:a8:a7:
be:6f:7a:d0:65:e9:9c:f0:12:43:74:21:53:92:ac:0b:e4:5e:
62:5d:92:6e:06:f1:5e:4f:ac:dd:b7:ed:9c:4c:84:3e:2b:fc:
c6:08:c1:ca:07:1c:62:6d:7e:ac:b1:cf:80:10:bd:93:c5:ca:
9e:21:4c:07:91:cb:97:a5:4e:18:78:45:c5:86:50:88:11:7b:
da:e1:17:e9:5a:21:28:a7:7f:e0:d6:bc:a2:33:56:56:92:96:
b7:46:d7:8d:95:9f:09:86:84:00:08:d9:74:59:e5:c8:e4:b0:
b8:54:2c:85:90:87:53:a0:2f:2f:db:22:ff:80:1f:fa:c5:bd:
9e:17:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:02 2026 by rpki-client