Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: 4Xwy9tQMrBIV0e5UEr9Qz9V3WiZwAScKOrfTDv+ms2s=
Subject key identifier: C3:7E:9F:1E:29:D9:E8:B7:2D:6F:80:A3:91:6A:4F:E0:EA:B6:45:68
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019E1D59CF4153E55B8B6564A75B21F6B853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 03CE
Signing time: Tue 12 May 2026 18:01:25 +0000
Manifest this update: Tue 12 May 2026 18:01:25 +0000
Manifest next update: Wed 13 May 2026 18:01:25 +0000
Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: AgT5OXYySoiagtuBWI4F4/p8hUIwmwM0NzIAvw1n35U=)
2: HTsrx9Wfp4NlogQqyGFERMCHjME.roa (hash: qUCFvpFwZ+rAEW4PKzOQClC2RRU+DPcjwot7U4Nm7cE=)
3: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (hash: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:cf:41:53:e5:5b:8b:65:64:a7:5b:21:f6:b8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: May 12 18:01:25 2026 GMT
Not After : May 13 18:01:25 2026 GMT
Subject: CN=c37e9f1e29d9e8b72d6f80a3916a4fe0eab64568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:5d:c2:5b:3f:10:54:fb:ee:e4:47:ec:17:
99:38:40:01:3b:ca:f6:d0:57:6d:7a:74:c8:90:6c:
a3:0a:90:f1:06:ad:2f:58:8f:ad:bb:45:82:0a:0c:
9d:49:b4:5f:6a:1b:3c:c1:68:3f:a1:b6:c9:98:57:
5b:0f:01:fa:86:1a:19:f7:c8:3c:95:ca:c5:2b:7b:
d9:6c:9a:67:c7:a3:ab:b0:e4:38:2d:c1:4b:98:99:
26:12:6d:70:66:9f:32:e8:f1:81:e1:91:5e:b3:80:
b6:e2:d5:66:7a:9b:58:2b:24:08:fe:6e:a8:36:b5:
56:33:9a:0b:bb:36:be:81:06:0a:0d:eb:43:fe:77:
97:c7:f8:d9:31:e6:76:0b:c9:89:b2:f9:10:0c:00:
67:12:a5:81:c5:27:a9:ba:79:e7:59:67:37:56:37:
76:e5:08:e1:16:77:4c:c6:ff:21:69:33:7c:5b:d9:
46:09:98:de:78:53:d4:b9:6a:23:7b:63:a1:0e:20:
53:11:ad:d3:15:07:98:e2:a1:19:87:66:70:26:fe:
8d:d4:33:56:68:ef:d0:49:87:32:b2:46:4e:db:20:
19:7c:bc:29:ca:14:9c:a4:d7:fb:8f:a2:d4:d2:7e:
47:40:ef:07:8d:24:50:40:0a:29:20:52:2c:7a:a5:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:9F:1E:29:D9:E8:B7:2D:6F:80:A3:91:6A:4F:E0:EA:B6:45:68
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:34:ba:cc:d6:1c:71:03:a6:0d:c5:f1:86:27:a8:bc:23:42:
57:3c:16:52:af:a0:52:bd:82:16:a9:49:e9:f7:f9:8c:e1:71:
11:40:94:59:e4:fb:75:a2:df:ab:3e:b7:f4:9a:57:0c:61:1e:
f8:01:8e:92:66:15:67:90:90:47:7d:13:af:64:8e:fe:ab:54:
4d:ac:28:b4:a5:3d:75:cb:64:f0:20:af:6e:00:8f:84:13:5e:
79:b5:cc:6a:e2:40:2e:cf:55:43:79:ed:7a:f4:60:f9:0a:d4:
9f:dd:88:6e:ee:eb:93:5d:c1:69:f4:10:63:d4:c3:30:bc:04:
ec:e8:32:fe:42:5e:1a:9b:de:f8:60:ee:cd:a7:2f:12:04:fa:
c5:d8:c7:50:d8:28:3c:94:60:64:96:44:3a:4c:17:cb:49:fa:
b0:41:84:e3:32:f3:a2:a5:5c:f2:33:c7:e9:da:71:8d:1d:64:
1d:ea:6b:dd:ce:41:6a:db:f2:55:88:c5:2d:5c:14:6f:c7:7d:
08:81:74:72:4c:a3:b9:8d:ee:6f:0a:cf:99:57:72:38:0e:05:
8e:43:8d:4e:cf:fe:c9:68:16:6f:17:ef:29:83:93:87:74:d8:
f2:e6:ff:7d:79:eb:3c:9c:ed:b6:d0:96:0e:39:52:bd:f7:b6:
3a:71:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:29 2026 by rpki-client