
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
File: 6qALChNMw-WcO-1fBukOl6zGkiY.mft (raw, json)
Hash identifier: 2Mw3he85NiwayPn/psgirGBj1jN254isoeMinapRDQs=
Subject key identifier: B4:81:81:80:06:21:67:FC:DE:12:4F:85:7D:32:C9:5D:FF:C2:C0:F1
Authority key identifier: EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
Certificate issuer: /CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Certificate serial: 019E1BD93C7B2A68C341A28DB26A11E74B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
Manifest number: 28
Signing time: Tue 12 May 2026 11:01:21 +0000
Manifest this update: Tue 12 May 2026 11:01:21 +0000
Manifest next update: Wed 13 May 2026 11:01:21 +0000
Files and hashes: 1: 6qALChNMw-WcO-1fBukOl6zGkiY.crl (hash: hrdi0ufMyusDmL/z8UkX6J/cxY9M37GICncoKUrBQqY=)
2: auhpAsK9BelasEARcaUL1Mcirio.roa (hash: EBpa+BNSqRLOw7bnVUHpyS0fxWBhefs5K0f7xdHUXKg=)
3: gSrm3lz-AyRv5CUqMgLfnP5GahM.asa (hash: Z2emz0ys4IlG0lsnZ0ljkY9OEfTrXSEXHSq6mSWxJdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:3c:7b:2a:68:c3:41:a2:8d:b2:6a:11:e7:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Validity
Not Before: May 12 11:01:21 2026 GMT
Not After : May 13 11:01:21 2026 GMT
Subject: CN=b4818180062167fcde124f857d32c95dffc2c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:e8:77:f8:74:08:ea:0e:bc:b1:5d:cf:ba:
a8:b7:fe:f0:2c:87:cf:b3:e9:a0:bf:0a:85:a0:74:
d2:36:76:84:62:23:9f:db:aa:21:2d:90:3f:99:da:
62:1a:49:78:64:67:a2:20:ac:5c:ea:e1:01:fa:6a:
e4:81:50:0d:40:0f:c5:ba:e0:ba:8d:8b:13:a7:2f:
81:bf:50:fd:40:1f:73:e7:da:83:42:f5:84:3c:3d:
15:55:4f:22:7d:f0:17:0d:98:f4:1d:e7:75:aa:2c:
6a:c2:48:33:70:38:81:19:e7:99:c2:72:14:1e:c5:
58:5e:aa:d9:2a:dc:f7:f2:16:3f:5b:0e:44:b5:94:
fe:cc:78:55:07:1f:43:0b:5f:80:db:f9:09:5b:65:
26:94:63:0a:76:20:35:f8:ba:5c:e6:cd:bd:8f:06:
d6:a2:de:39:95:ff:38:90:87:ea:c4:71:d2:c3:3b:
38:f5:19:10:d1:47:cf:72:a0:e7:06:89:2a:6f:b0:
64:70:b1:ec:17:d5:2d:84:36:5b:da:84:9f:07:f3:
82:1c:e0:78:f5:b7:d6:ee:7d:d3:4a:44:ed:4e:b0:
63:a4:fe:6c:17:ff:64:37:d7:07:f5:3b:f8:93:63:
88:b2:47:a2:9f:6d:25:b0:03:62:98:ad:46:81:8e:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:81:81:80:06:21:67:FC:DE:12:4F:85:7D:32:C9:5D:FF:C2:C0:F1
X509v3 Authority Key Identifier:
keyid:EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:51:ba:91:44:fc:aa:35:5f:83:c5:86:e2:84:66:77:b1:94:
9f:bc:38:00:82:69:ca:62:54:27:9b:7d:bb:73:71:45:ed:94:
0a:93:e4:a8:7b:b8:d6:7a:e1:54:63:cd:df:55:19:13:4a:36:
0d:02:08:8b:1d:cc:bf:7f:6f:ab:39:20:a2:41:57:35:a4:41:
12:cf:bc:3c:7a:10:7c:c5:80:07:6f:f8:71:5d:5b:cc:98:41:
3d:93:97:73:cf:42:a3:4c:6c:24:f3:f3:03:5e:c4:6a:03:46:
54:a6:17:01:0d:d6:d5:cb:5d:da:87:d3:61:51:85:a7:db:b7:
2c:0a:ce:9c:8c:36:0f:c8:64:9b:1c:f7:7f:46:d4:81:4f:74:
b1:a8:69:26:14:a9:cd:2d:69:ec:44:92:ce:7b:57:bd:ac:17:
93:3e:25:32:f1:82:0e:2d:5f:ea:ec:f7:a2:a0:49:fb:d3:dd:
74:e8:e4:07:75:11:67:fd:74:61:c7:4d:42:38:e5:c4:00:55:
3d:69:50:1e:63:29:21:bd:ba:1f:2a:8c:16:19:e4:c7:d6:5a:
74:51:1a:64:a7:5c:2c:5c:6c:b4:0f:a0:ac:d3:a6:4a:92:a7:
02:a0:f7:17:ca:ca:dc:f2:3f:8d:a8:2f:59:94:27:cd:ec:5c:
93:b3:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:12 2026 by rpki-client