Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: HxNdFFMydReLG/ITxXExCEW1pASk4gZCqLdyrON2CHU=
Subject key identifier: 1C:CB:4C:2F:58:13:16:C4:A1:80:18:69:2A:0F:10:26:EB:F3:CD:3D
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 019D26285898E001D328BDA6FCF7C864F464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: Vv923nGEh7imSNw5CiDywxBiyMPgim7veXfvvmF4ml8=)
2: MoM66qQuhJcSL5w9TkLPi9sdoKs.roa (hash: /dt2y7/UKbT5EuF45pcmtQs53CRnIBBB6Rg/I22HBZM=)
3: rwInDctVSqf9bY5au3SgxXMR30k.roa (hash: HNhqme3U8E9COjNTzz0hBRfGIPWCZDCViGGXUd7ReyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:58:98:e0:01:d3:28:bd:a6:fc:f7:c8:64:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=1ccb4c2f581316c4a18018692a0f1026ebf3cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:4d:59:9a:f0:1c:e2:16:e6:90:a9:78:c4:
e0:88:4f:a3:ad:b0:f6:b2:b9:f8:b0:a3:e5:0c:f7:
61:29:bb:84:b2:ce:2f:0d:79:1f:09:c0:40:b3:ff:
df:02:94:23:e3:f7:f5:aa:50:c2:0d:49:fd:fe:c7:
a5:5a:9a:47:85:b6:8a:ee:4a:ad:ce:63:75:95:d3:
c0:39:09:04:aa:9e:24:c8:e6:8f:c8:0a:e2:d1:2f:
aa:f4:3d:2c:e2:1f:37:ba:2b:2a:6d:57:a3:ae:99:
01:78:ea:48:85:24:38:a8:06:57:1a:b9:e0:b1:7a:
9f:16:8e:da:60:9a:36:63:be:52:aa:56:6f:1d:73:
78:fc:a8:c0:f0:f5:30:c3:53:7a:d4:a1:5d:a2:dc:
e3:e0:c7:8f:a1:e3:b1:79:52:35:a4:80:4a:6e:a6:
cd:82:a3:15:06:4a:7e:31:06:04:51:eb:d1:38:27:
3f:21:fb:90:e0:d9:86:af:d8:e0:7f:a2:c9:13:e9:
65:05:34:fa:04:e6:be:8f:f9:98:28:c0:7a:c6:bd:
25:dd:e3:e7:5c:bf:63:ca:d5:dd:43:1d:8f:b8:c3:
62:34:ae:74:d4:24:e3:8e:64:4f:6c:39:93:43:5d:
13:12:69:51:29:8e:3b:fa:c2:54:3a:e2:ce:dd:3c:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:4C:2F:58:13:16:C4:A1:80:18:69:2A:0F:10:26:EB:F3:CD:3D
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:39:51:58:d0:ee:45:ae:2a:63:40:9c:0d:6c:e5:36:21:
5d:c6:38:da:28:79:7c:67:6c:92:fb:4d:97:d1:43:25:b7:3f:
52:5a:23:9b:05:2f:ce:5b:36:bd:db:ba:c9:0f:a8:ad:58:05:
09:8d:7e:b2:ef:df:0e:ec:a4:cf:3c:d5:1b:1c:f4:38:ac:d9:
43:26:96:8c:f0:3c:1c:9d:af:88:35:f8:89:dc:2d:af:e1:92:
f9:62:7d:85:5d:ac:72:2c:4f:92:28:eb:97:03:08:da:71:74:
c0:6f:82:c5:d4:b6:39:db:43:ac:1c:f3:39:a1:16:b9:4e:d3:
d2:f6:48:a1:82:e3:7e:63:ed:84:0e:09:c3:94:92:80:69:3c:
52:6f:98:17:67:15:25:12:7b:3d:b5:a6:9c:f9:a2:58:5e:3b:
73:dd:5b:28:b7:fe:c3:40:46:a5:80:1f:65:f4:85:a7:2e:7d:
ee:c7:8f:0b:e6:75:fb:cd:19:72:27:99:71:08:8d:8d:78:fd:
f4:6a:51:2f:d9:13:c3:91:1d:83:e8:ed:2e:60:b7:2a:d8:9b:
3f:5d:f6:da:25:f4:80:f4:60:30:ed:3e:3f:70:ae:14:76:14:
04:c1:76:77:3e:0c:a3:18:61:7a:94:d2:cf:af:cc:eb:ed:28:
65:92:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:16 2026 by rpki-client