Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File: MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier: S5Z9yRY5j6NHdZesbfxxKhc9d0CEOgM8/sMq+KcUanI=
Subject key identifier: 24:8E:04:B5:49:08:FD:8C:C7:6B:4E:70:3D:FE:5B:24:4B:C8:52:D2
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer: /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial: 019D2961934BCEEA842A903382E55C0DC9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number: 0840
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: FfbuL1NsPqz_oOI2YFWe_jidZWQ.roa (hash: xTrWW0Q3nTMT/LdtoIpu3oN3dGDnM7py4l1pD0p9U8w=)
2: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: 9sU8X94tV4BU4JtlGd0+hNf3LVk432PU4hIbirkIg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:93:4b:ce:ea:84:2a:90:33:82:e5:5c:0d:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=248e04b54908fd8cc76b4e703dfe5b244bc852d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:d4:76:bd:3d:67:58:03:a0:b0:04:99:45:
66:fb:ae:7a:75:ed:4f:06:1b:23:a9:a7:a1:5f:69:
a0:f8:6a:c8:11:d4:f9:05:6f:b1:e7:85:0d:d8:be:
21:78:7b:e4:b2:8d:27:cb:5b:49:1f:78:92:d7:80:
ad:ad:86:8c:23:e9:7e:ea:df:62:a6:b1:27:b8:cf:
13:64:fc:99:98:1b:e8:7c:a3:42:0f:bc:14:c3:76:
3f:ca:01:f1:20:57:ed:90:5f:56:63:99:c3:9e:a0:
f6:4e:c3:b5:74:f0:d4:93:fa:4b:cb:02:e8:3b:dc:
63:a1:17:f3:7e:bc:b7:30:70:66:08:3e:72:cf:7a:
20:67:9e:1b:59:8a:ab:a6:92:b6:81:85:78:f3:de:
a2:64:71:7c:24:14:d8:5e:b8:5b:e3:54:b3:95:df:
42:5b:f8:34:fd:18:2c:46:e8:a6:34:6c:cb:7f:2a:
df:9a:5f:af:6f:fc:10:bf:6a:03:85:3f:32:b4:a9:
2a:6a:4e:62:5e:13:1a:c3:06:31:66:e3:13:b8:a4:
f3:43:43:71:fd:91:0e:c1:60:5d:b3:26:c3:a4:b4:
d4:d5:69:d3:f8:a8:d5:dc:af:7d:ca:52:46:36:7d:
90:d5:ec:b8:c2:3c:ea:97:15:74:f0:3c:d9:81:ff:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8E:04:B5:49:08:FD:8C:C7:6B:4E:70:3D:FE:5B:24:4B:C8:52:D2
X509v3 Authority Key Identifier:
keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:59:61:57:fc:dd:eb:1e:3b:00:b5:f1:74:30:50:19:b6:0c:
46:f4:07:8f:31:12:a4:39:0c:b4:d1:cc:6a:83:c5:8c:d8:df:
03:c4:2b:86:e0:de:58:8e:8d:52:f3:f7:82:8a:18:ba:9d:b8:
b4:75:cf:b3:d9:e5:6b:53:fc:ea:d7:c9:27:c4:37:62:f2:e8:
ac:7c:8c:99:d2:c8:f1:5c:ad:4b:f2:27:a4:93:1a:64:f4:38:
22:1f:f0:d7:12:b2:a0:35:4a:88:a2:a4:47:71:18:ef:58:39:
ef:c1:07:3b:9d:13:b0:8b:16:85:d8:45:bf:d7:3c:38:e9:73:
87:14:de:a0:a5:67:b9:34:dd:ed:30:57:ca:6e:8a:47:f4:50:
ee:88:ce:3b:91:2f:33:85:cb:5b:33:59:4d:08:71:dc:bd:d3:
7b:bc:5a:6d:f6:16:7b:a7:ad:bf:47:11:33:a0:73:51:c5:4d:
2d:e4:c6:e9:0b:b1:06:88:4a:4b:1c:16:35:ef:ed:2d:59:06:
de:7e:39:4a:32:d7:3d:e7:1b:46:76:a2:96:29:93:58:2c:12:
92:ca:1d:c4:e6:ad:81:ae:88:39:90:c9:7a:8a:40:c7:79:f9:
ba:58:72:12:4a:8d:6f:cc:76:a0:8f:9b:0d:c2:0c:51:7f:ce:
7e:f4:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:43 2026 by rpki-client