Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: CWRdx6OpLn7K7zupu3iED1MFOKvAP1wfvnq/U3jmgTQ=
Subject key identifier: 67:D8:F6:1A:4F:97:31:BD:8A:43:B8:EF:C7:CE:D1:80:2F:1E:60:7E
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019D2A04B2C58F5052865A14FE5C3DB2CC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 0350
Signing time: Thu 26 Mar 2026 12:00:44 +0000
Manifest this update: Thu 26 Mar 2026 12:00:44 +0000
Manifest next update: Fri 27 Mar 2026 12:00:44 +0000
Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: twX5ubJiM9nXmbAzb+JllllNkVIOylxeBz+/Vn2Prxk=)
2: HTsrx9Wfp4NlogQqyGFERMCHjME.roa (hash: qUCFvpFwZ+rAEW4PKzOQClC2RRU+DPcjwot7U4Nm7cE=)
3: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (hash: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:b2:c5:8f:50:52:86:5a:14:fe:5c:3d:b2:cc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Mar 26 12:00:44 2026 GMT
Not After : Mar 27 12:00:44 2026 GMT
Subject: CN=67d8f61a4f9731bd8a43b8efc7ced1802f1e607e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:54:49:75:35:d3:98:6e:5c:67:77:11:83:
47:af:b9:e7:c9:bf:b3:26:53:3a:91:0c:af:20:2e:
83:7e:c3:9e:4e:d4:19:fa:00:5c:df:c9:59:ea:9e:
66:54:e3:b6:2a:e0:db:f7:c9:0d:5d:69:16:e4:33:
2e:16:e2:c2:ff:b5:c2:34:4d:0c:61:ab:6f:5b:d2:
cf:fd:8f:67:5f:51:4f:bb:e5:01:c7:95:81:a1:4f:
b9:c8:60:37:d7:50:06:d7:d9:a5:bb:4d:57:a5:64:
26:d5:c6:5f:01:73:aa:74:86:60:0d:6a:6b:02:05:
9c:e1:48:08:e6:b1:0b:20:7a:56:ed:78:73:04:be:
bc:ed:ed:c3:84:bf:d3:24:b9:b1:f8:59:bc:0b:a0:
bb:e0:b0:33:6b:9b:9b:f0:98:7c:8b:65:8f:bf:3c:
27:a5:f7:47:74:1f:5a:07:f8:3d:79:11:f0:c8:12:
5b:75:5b:ce:0e:c3:9b:db:f6:33:85:9e:94:ad:72:
eb:d3:0c:c7:aa:a4:07:e8:54:e7:e9:c9:d4:8e:75:
53:55:a2:9d:66:47:29:78:d2:41:00:3b:f4:2d:4d:
35:15:ef:55:9f:a9:9a:81:5d:7c:cc:8e:7a:1a:53:
1b:61:44:10:a9:19:ec:80:4c:24:6b:8f:ba:12:90:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:F6:1A:4F:97:31:BD:8A:43:B8:EF:C7:CE:D1:80:2F:1E:60:7E
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b4:9d:4f:c5:10:a8:79:8f:b5:49:40:15:6a:0b:64:de:48:
9d:73:97:fa:05:65:dd:ec:76:de:e8:2d:dd:8a:a0:76:f5:df:
a4:32:48:8f:7f:5e:af:f6:5a:74:f7:bf:12:9a:42:95:7c:99:
17:f6:d4:bf:b1:2a:4b:34:92:fe:9d:32:1a:35:10:0d:68:91:
32:52:ed:e5:a9:d0:9c:40:cf:c4:43:6b:c9:da:3c:ae:51:d3:
ce:1e:d3:92:3b:08:18:cb:cf:5a:6c:5a:aa:2b:e5:2b:21:95:
83:49:4f:e4:73:04:9b:9f:f9:f5:19:3f:a6:c4:50:de:48:06:
74:e3:dc:8f:99:de:1f:48:c4:53:6d:6e:7e:6c:70:56:fc:62:
f1:58:8a:59:66:bf:59:96:7c:f1:e0:0c:b8:42:8d:0a:10:cf:
9a:78:93:9c:4a:14:e3:73:22:d0:76:5a:03:a9:a4:f5:89:bd:
75:e3:54:3c:a0:72:7a:09:48:49:16:49:5a:cf:f7:2b:7d:b2:
af:74:36:b6:33:c2:32:fd:f8:61:34:7f:8f:bf:bf:33:8a:3a:
23:45:75:1d:21:bb:7c:ed:bd:c7:db:87:cf:51:c1:c0:98:88:
86:27:12:da:86:ec:6f:79:18:d0:6c:24:db:83:38:d2:19:d1:
49:89:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:58 2026 by rpki-client