Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
File: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft (raw, json)
Hash identifier: kW5yqidIqJSLtkjTzci75C1+4JWNP6YZkKn56CA26qQ=
Subject key identifier: B4:76:5F:C9:48:38:A2:0C:4A:DD:24:42:84:C4:19:FA:FA:82:4D:C1
Authority key identifier: EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
Certificate issuer: /CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Certificate serial: 019E1EA348264F0FEADCD72954057E47ABA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
Manifest number: 028F
Signing time: Wed 13 May 2026 00:01:17 +0000
Manifest this update: Wed 13 May 2026 00:01:17 +0000
Manifest next update: Thu 14 May 2026 00:01:17 +0000
Files and hashes: 1: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl (hash: z7rk1XOQ6pYgX5BlKKZ8qxBZuosfrGYsgc8arFHXx/Q=)
2: vwkWycVdom3nvYeKOf0XRuXuyg8.roa (hash: GQTFaeIhIDJqGTNfp3g118208VXOEiHmD7gFsTFKtRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:48:26:4f:0f:ea:dc:d7:29:54:05:7e:47:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Validity
Not Before: May 13 00:01:17 2026 GMT
Not After : May 14 00:01:17 2026 GMT
Subject: CN=b4765fc94838a20c4add244284c419fafa824dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:b2:2c:7b:c0:d9:25:ce:0b:9f:ad:a6:2d:
1a:39:8a:4d:30:0c:e2:f6:45:85:38:da:62:de:fe:
73:65:e5:0a:e4:2c:88:f1:b8:05:eb:e6:3e:e3:95:
e5:ee:df:7b:af:7a:1f:4b:f0:3e:74:fb:02:ec:f0:
e3:0c:8d:d0:29:14:3b:89:e4:07:79:06:32:ea:22:
32:12:4b:e1:20:50:9a:b8:bd:79:73:16:eb:89:1d:
8b:d0:a9:e5:2b:af:d1:3b:6b:fd:97:d2:12:97:6e:
68:1d:6a:dc:3c:eb:e5:c5:f9:fc:2a:c8:9c:87:e8:
16:74:7e:60:45:a9:4d:40:67:4f:d5:10:4b:6a:59:
f2:98:47:ff:5b:2d:bc:5a:29:fa:8a:64:43:ee:4f:
34:cb:73:a7:b3:95:72:f3:6d:74:0e:37:c1:0b:fe:
1d:95:13:d0:58:53:c7:27:23:d9:ea:af:73:9a:b0:
de:2a:2d:92:c2:75:6c:0a:8a:bc:9c:a8:a9:cf:86:
b4:78:63:74:f7:06:27:da:cb:bf:b3:89:23:bc:0f:
17:9c:93:27:a6:c1:29:d7:73:84:5d:15:59:10:9f:
fe:85:5b:59:84:d1:06:4a:ed:7c:63:34:71:35:dd:
37:d1:ec:a7:3e:57:56:62:b9:bc:23:6e:88:06:3b:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:5F:C9:48:38:A2:0C:4A:DD:24:42:84:C4:19:FA:FA:82:4D:C1
X509v3 Authority Key Identifier:
keyid:EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ae:28:e4:24:d0:f4:f5:91:42:da:d8:31:29:9b:e8:5b:b6:
07:e6:88:68:fd:9d:dd:76:82:62:21:85:bf:c5:3f:bb:42:aa:
73:53:53:bd:9e:d1:af:c6:7e:fb:bd:86:04:6c:96:d8:8b:bd:
86:15:1f:fd:c7:ea:e1:c5:f9:e2:83:b2:10:9b:37:03:2a:da:
3c:96:49:1e:34:f8:f9:5c:ce:11:2e:78:55:21:58:bb:69:ba:
7a:8e:ec:e7:4d:08:21:62:f7:c9:6e:63:f2:09:c1:d1:fe:35:
21:f0:6a:2b:39:1e:45:7c:d3:43:4f:ec:1f:2f:23:cc:d2:9d:
fa:d0:e4:c7:66:2f:f3:5f:b3:6b:2e:f8:46:72:f3:73:de:bb:
03:02:6e:34:22:a8:3f:42:ac:51:ca:36:15:a7:e8:2c:32:26:
fc:78:11:36:b0:bb:a9:c6:a8:6a:1b:2d:8d:e4:61:0e:ed:bd:
81:09:33:4f:80:d4:f7:22:48:92:7f:fe:a1:f4:32:f7:51:12:
36:58:38:7a:f7:ab:7f:b5:af:2a:87:c6:8d:cf:a5:f5:dd:f0:
6b:ab:b0:cf:7f:4d:44:a8:60:ea:80:58:56:9f:75:9a:5e:ce:
ec:82:e5:0e:d1:db:a0:7b:65:ee:29:e8:1f:92:0b:2e:90:e5:
42:96:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:32 2026 by rpki-client