Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: O7JPEkE3cuTHaE6nJ/xlKFPQ4bod7yHmrtbB+PyDiL0=
Subject key identifier: 1E:43:24:B1:E5:F0:31:10:1D:E2:42:10:DF:A0:62:1D:B5:A2:C2:ED
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 019D2771E1CB105D1052761FE8587E3E8E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: Jg93sm36v3igMerJ4tTZTu9+vzQVhPvIg3acenziCog=)
2: EQUgl00EZFitLJ6oysydLWzSpDI.roa (hash: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw=)
3: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e1:cb:10:5d:10:52:76:1f:e8:58:7e:3e:8e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=1e4324b1e5f031101de24210dfa0621db5a2c2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:d6:33:44:63:f3:e0:1c:d5:6b:ed:78:ad:
27:f9:59:d8:58:8f:38:69:74:44:d3:1b:60:51:7e:
60:d5:1e:59:ea:1d:b4:64:33:bc:51:f9:f2:c4:61:
1f:4e:95:9c:69:72:f9:67:c3:46:86:b7:a4:c5:da:
49:c2:73:64:ff:42:ab:1d:12:6f:5f:f2:dd:ee:4d:
ee:23:c3:6a:8b:96:b2:36:84:15:1a:e0:d0:9c:88:
4d:85:f2:eb:27:1a:ad:2a:7f:d5:0d:2e:d2:7c:df:
a3:5c:84:b4:58:b8:56:2e:df:5b:88:43:de:ac:d5:
cc:d0:8f:f6:a5:a4:12:fd:70:98:72:9a:e5:a7:14:
48:56:c1:51:52:f6:b7:5c:64:13:aa:90:9d:89:48:
de:ac:0a:5e:5c:65:3f:a8:d7:2c:cf:aa:ea:09:a5:
d6:6d:77:33:57:88:ed:87:3a:e3:8a:35:3a:d7:63:
57:f3:23:1e:27:5b:14:4a:c5:64:a0:5e:06:95:9e:
14:22:ac:f4:64:a5:17:ef:1f:6e:7b:ba:8e:1d:dd:
cc:f3:94:40:d4:20:e1:a9:64:d5:ac:34:11:c3:fd:
89:44:0e:e2:08:33:e2:48:60:50:77:37:4d:4f:17:
00:82:a7:d6:47:43:42:3a:72:da:37:23:9b:d6:0e:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:43:24:B1:E5:F0:31:10:1D:E2:42:10:DF:A0:62:1D:B5:A2:C2:ED
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:7c:d4:e8:10:4d:df:25:3e:0b:d9:81:df:c4:4b:a1:c5:2a:
88:24:a9:0f:44:13:5f:62:99:6b:bf:9c:0d:e6:cd:83:59:f4:
ab:2e:6c:46:3e:b4:09:15:c2:36:61:cf:88:5c:84:f5:1c:95:
1c:c1:d1:35:91:12:50:ef:20:d7:bf:4d:0d:f7:6f:c7:6d:71:
1d:68:44:a2:e1:eb:69:4c:20:da:7b:79:48:38:c0:36:2c:3b:
8d:19:2e:c8:87:81:3b:e9:43:7e:43:db:07:79:58:3c:fa:68:
06:6b:4a:f5:a9:b0:e7:76:73:56:8a:38:81:21:28:e3:c1:3a:
14:5c:32:64:51:47:0c:79:9a:fc:1c:8e:67:2a:7b:1e:f6:ce:
2e:a3:df:40:48:af:93:49:1a:1a:7a:f0:2a:41:5f:57:be:c2:
23:6e:6d:01:5b:4e:98:ea:ca:3e:ec:b0:84:ce:5b:73:06:b4:
51:0c:e3:f5:16:59:1d:19:78:9e:48:24:6e:50:12:4c:c2:ee:
5e:8e:54:f7:97:ad:14:62:4c:e7:97:83:64:6c:d3:d9:cf:b0:
71:ca:76:ee:22:05:fd:0d:67:68:30:ad:02:5e:78:e1:59:8b:
86:74:f2:13:df:59:80:e3:70:78:b8:32:0c:d5:47:65:34:42:
cd:b4:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:41 2026 by rpki-client