Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: Q2Erh2NP2reX9FoN73SBqZnvsXMbJtg/rJHqEgIVBtE=
Subject key identifier: C0:35:46:0F:21:78:E1:E4:3B:64:E3:39:E1:68:E7:6F:6C:FF:06:7D
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019E1DC701BFF5E9E2B64DE65D567620005F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:00:41 +0000
Manifest this update: Tue 12 May 2026 20:00:41 +0000
Manifest next update: Wed 13 May 2026 20:00:41 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 0QP8siRqWauaxc0jak7k2OdRbwRavfWvBaQePAt/IQA=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:01:bf:f5:e9:e2:b6:4d:e6:5d:56:76:20:00:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: May 12 20:00:41 2026 GMT
Not After : May 13 20:00:41 2026 GMT
Subject: CN=c035460f2178e1e43b64e339e168e76f6cff067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:a7:c8:b3:68:d6:09:0a:e9:3c:aa:7e:3d:
ea:97:6f:a6:86:5a:21:b3:77:ca:b3:35:6e:d3:5e:
05:61:16:be:d7:17:51:ee:d4:de:49:a6:a8:aa:fe:
f5:35:62:c1:cf:b4:da:26:a9:d0:9c:12:42:63:f5:
25:a4:8c:65:25:3c:f0:7c:9c:66:02:af:4d:db:d5:
25:20:01:b2:dd:d4:82:9a:2d:c4:9d:cb:42:f9:8e:
8c:c9:f9:cc:49:4e:cd:81:b9:8f:68:39:89:ae:1f:
2a:da:ac:ca:ce:ef:e6:ec:71:b3:5f:38:47:76:46:
6f:eb:07:f1:61:07:37:7c:82:70:37:89:4c:77:75:
7a:37:35:c7:90:25:eb:71:03:4e:09:dd:21:b6:a7:
37:5e:28:8e:4e:0a:ae:d4:cc:64:29:37:87:1c:c6:
3b:14:46:47:f2:4e:7e:ff:a9:b4:e6:48:ef:8b:d4:
a6:c8:5c:39:2e:7c:5a:09:36:06:2b:00:5a:32:47:
5f:46:ad:37:48:c0:fe:b8:7e:f1:25:9b:ac:09:26:
a6:6f:c6:01:de:87:96:af:8a:97:05:8c:6b:65:46:
8d:8e:6f:9d:2c:f9:bc:f0:d0:87:e6:1d:ec:27:9a:
52:01:d8:07:fe:73:7f:1c:79:66:8c:47:69:fc:29:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:46:0F:21:78:E1:E4:3B:64:E3:39:E1:68:E7:6F:6C:FF:06:7D
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b1:d7:53:4a:46:8c:11:da:bb:0d:fb:e9:51:70:20:d7:9d:
41:2a:88:f0:90:01:0d:4c:94:2e:66:7e:7c:94:91:d1:2e:06:
7b:ee:cc:95:78:23:1e:17:07:6c:9b:30:c8:d5:85:6d:ab:73:
e8:34:5e:04:39:04:7f:a7:12:09:bf:3e:c9:0f:90:27:00:ce:
40:66:9b:96:38:5d:4d:77:b1:e7:42:66:df:4d:84:f5:b5:fc:
2b:e5:fb:05:8e:79:5b:28:c2:52:fa:5d:fa:dd:9f:f0:79:4e:
b9:9b:8a:fb:da:99:7d:57:ad:dc:00:1e:a3:33:cb:8e:08:c7:
29:7f:72:df:38:ec:1f:59:0d:02:2e:01:df:fb:cb:aa:b1:dd:
ab:b8:cd:b0:c7:7d:28:7f:e9:c0:e7:81:86:b5:6f:f1:ab:00:
6c:fa:dd:2c:15:7c:89:b7:43:f6:33:bd:a2:06:36:95:c1:97:
c3:56:49:05:91:a4:8b:31:26:0a:cd:cb:19:47:a4:fd:9c:3d:
6c:92:6f:d0:4b:ff:40:02:6b:41:eb:c5:b4:ea:a5:8d:94:67:
a8:a0:35:4d:f6:0c:62:5c:3a:fc:3b:fd:7a:57:fe:6a:56:fa:
c5:e9:42:46:61:2e:46:6b:f1:56:58:26:0e:b8:3f:ba:38:fc:
b5:df:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:46 2026 by rpki-client