Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File: 6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier: JvlLbd/iRyxUjaaT4YMusolRVyXmZUWIzzKZFXsWHj8=
Subject key identifier: 7E:19:C8:3D:F6:28:77:58:8F:95:44:F9:58:BD:60:AB:BB:14:79:69
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019D26960C885FC746700E7029262D7E13DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number: 18CA
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: 5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa (hash: 13nxKMdVKVjzMHdAUhxbH/qaDgQty47l+n7Zxmnvz20=)
2: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: 9onVe7XFx4OPrQCnUvVOtK3ba4jDv+WankptG2xsfrs=)
3: DuYZ-H2sVttInwcrjvBsEkIUdds.roa (hash: Lhr2x7vqwrufK/M/sxNyImyNWEig+QhwP0mdSLVXqow=)
4: NIU89FpzziKoMc5cbTweubNW-EY.roa (hash: lqU5gy4dvFoQO8yJfigM/v+crHcxqNMcgHf6AXZWC70=)
5: gErETpLkL1Wulh1Sd26eyD56QTQ.roa (hash: 8oSrkQlx9IB4UN1/Zqqdf0UUPBBcBw5//CQWtwVqrR8=)
6: jDvn5_X1y1Bz-nOONdD1eZ3U_ak.roa (hash: PaB75zmUCGl9d3MXwedTld8hpOLuEZM11kbRB5nCXhE=)
7: kRR25rBX48JUtOH-FpsShSIWmXY.roa (hash: 8cCQUGZZCH+0u7+J+1+9zU6qHLN1KaTdcE26nn3foFo=)
8: kVAfxl6uvYyBoV4w-5-rO18bHWU.roa (hash: aoo8UNswT6KVrLuUJujKYinMkhnjHoNIus8FSV2dfzI=)
9: tLKsS9rHMqeh-IFPdFpCYdg8ROM.roa (hash: EG0Tu5j6vFe/p0ZOO6/JOj61PT4A02/SojBmqacBkr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0c:88:5f:c7:46:70:0e:70:29:26:2d:7e:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=7e19c83df62877588f9544f958bd60abbb147969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:1d:e7:56:85:9d:70:8b:1a:39:c3:13:9d:
02:78:35:00:ff:01:3b:d6:6c:87:94:b9:c8:1d:d0:
c2:7f:a7:b2:63:a1:e3:f9:43:d4:58:86:b7:6c:7a:
cb:26:6f:00:35:69:f1:34:50:96:75:2e:7f:9e:c5:
1c:62:52:71:fc:a7:e5:de:a1:2b:45:cf:8c:bc:b3:
43:97:a5:1b:63:f8:a7:08:d2:c2:aa:69:a5:94:bf:
b4:ac:a3:30:ff:c0:c7:73:34:ad:fc:73:2d:91:9b:
d4:a5:50:e2:38:47:de:2f:20:e0:6e:d0:a7:34:35:
cc:7c:9a:86:e0:50:7f:1e:c5:a2:08:e1:fb:ec:3c:
92:20:1c:2f:2d:2a:dc:af:bf:c7:dd:b0:cb:03:b6:
42:25:75:40:2d:a3:27:60:a3:1d:61:ba:11:1d:46:
bb:9c:65:3f:88:2d:ab:62:9b:b9:04:f9:40:a8:4c:
09:73:46:6f:58:0e:e9:a8:08:30:d5:61:2e:ec:97:
2e:0f:41:ec:f4:94:8f:40:51:d9:34:2a:f0:96:cf:
23:36:77:53:e1:2e:c5:c4:ed:83:9b:dc:3e:96:8e:
ca:58:3d:73:e3:18:6e:64:56:47:49:b1:4a:a4:e7:
8b:82:cb:ff:9a:f6:b7:9f:f2:2e:48:df:8a:00:04:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:C8:3D:F6:28:77:58:8F:95:44:F9:58:BD:60:AB:BB:14:79:69
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8f:f1:32:d0:02:28:10:64:5d:33:e2:75:4e:ba:ac:25:65:
33:e0:14:02:94:0a:0b:55:7f:25:d0:24:25:e7:02:74:7c:d4:
f8:95:4b:a4:3e:1b:6c:5d:b0:f9:f6:4e:03:5f:aa:31:c4:6b:
ec:79:c5:1a:02:fe:b4:0d:fd:41:99:03:89:73:54:3d:00:5a:
a0:75:b2:6d:c4:33:e5:7e:ed:e6:b0:e7:74:d6:f1:1d:9a:bb:
0c:81:7b:32:ed:d4:5c:99:b9:e9:ed:29:83:42:0d:a1:a4:c5:
f2:c1:db:62:76:c2:86:03:04:81:57:01:df:81:2e:5a:fd:db:
97:86:f2:ad:54:13:ee:62:8a:33:30:f6:88:b9:18:07:38:a8:
b0:60:d3:3b:80:af:49:8c:cc:eb:8f:4e:43:aa:4b:bc:44:0e:
a7:91:63:12:b5:4d:02:71:b6:8f:e5:a0:56:9c:da:dc:b3:1f:
5a:93:98:1d:d2:67:b7:87:bd:cd:9d:5b:47:7a:6d:42:45:04:
9d:2a:c9:73:b9:b3:a7:b3:61:bc:c4:cb:fb:5a:72:73:7c:88:
48:db:e0:6f:69:64:7e:94:56:f7:18:f5:72:8d:bb:07:67:26:
63:e0:b8:bb:60:9d:d3:c8:98:8d:97:08:34:62:e1:05:9c:75:
6b:84:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:20 2026 by rpki-client