Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File: 6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier: h3TGlF6GXWkRIVR2s2Q+VD2eEhocDTCwqvR2nPU9EU4=
Subject key identifier: EC:78:83:26:8E:F4:E9:60:55:DC:FA:5E:F1:CD:C5:5B:65:A3:84:71
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer: /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial: 019D2C2AA9140BB166A9E0F7F6FB259D3667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number: 0432
Signing time: Thu 26 Mar 2026 22:01:26 +0000
Manifest this update: Thu 26 Mar 2026 22:01:26 +0000
Manifest next update: Fri 27 Mar 2026 22:01:26 +0000
Files and hashes: 1: 2jS-Ar5-mvzTQqNg923VOZqFfzM.roa (hash: q9I2rePyRMxcY/rB8ipLm/a3s22Y2jRaO567Mt+E7dU=)
2: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: co7pgJFOUJz3DPdeMTUa7702ah3ExQ2oMXq8AoKzd1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:a9:14:0b:b1:66:a9:e0:f7:f6:fb:25:9d:36:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Validity
Not Before: Mar 26 22:01:26 2026 GMT
Not After : Mar 27 22:01:26 2026 GMT
Subject: CN=ec7883268ef4e96055dcfa5ef1cdc55b65a38471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:1d:fd:62:83:e7:0c:52:e8:72:76:13:db:
34:ca:53:e2:d8:4f:36:c8:b5:70:ba:0a:83:69:73:
22:9c:04:46:37:75:76:ab:4d:2c:8e:f1:92:11:1d:
52:4e:51:9b:20:08:73:29:b4:60:d3:84:fc:95:0b:
06:1b:ba:44:77:65:cc:05:73:14:dc:58:02:c8:32:
c9:18:97:1a:0f:71:fd:37:dd:b2:09:5c:9c:22:e6:
9b:4e:c8:bc:55:c5:e2:c2:e9:86:d3:d2:68:a8:c5:
e4:fd:42:68:0c:69:3b:d2:97:da:d8:7c:45:72:35:
3b:27:36:f3:47:6f:3b:67:e5:fa:f7:8e:9c:70:ad:
83:ef:e4:1d:4a:1b:29:78:e3:6b:57:ef:c3:0b:ef:
d9:40:7c:39:5e:c6:03:3e:88:77:ff:d7:af:3b:44:
f1:fb:a3:b4:e2:72:09:7f:ba:1e:33:09:6a:fb:48:
c3:76:c3:4f:cd:27:ed:84:db:6e:60:97:02:ea:bf:
d8:ff:fd:8f:d5:cd:be:f3:78:07:c6:8f:ec:ea:c1:
75:8b:8e:e8:f6:26:31:11:76:a6:8b:4c:e4:f3:51:
bd:e7:68:48:4b:bb:2b:be:6d:f4:86:64:2c:1f:da:
76:48:bc:96:e6:c4:19:e7:0a:6b:74:da:6c:8e:66:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:78:83:26:8E:F4:E9:60:55:DC:FA:5E:F1:CD:C5:5B:65:A3:84:71
X509v3 Authority Key Identifier:
keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:ef:e3:d2:13:4e:6a:13:dd:46:69:56:5d:c2:64:3b:74:
6b:17:c0:2a:d9:ac:01:c6:02:02:32:95:50:74:83:a6:a5:c6:
ef:06:21:eb:8a:22:cf:2b:a7:60:59:20:b8:e1:a7:e6:5b:20:
c7:fa:52:4b:57:4a:3f:a2:6c:bf:40:ed:ef:8a:99:d2:0d:7f:
a9:6a:10:06:e5:d1:8d:15:d0:f0:bf:16:c2:2d:3c:e2:d8:18:
57:7b:60:9f:7c:7c:18:77:8e:fd:65:3e:52:c5:2d:7e:97:fd:
81:f7:1a:43:0a:dd:85:c6:31:47:ab:d0:b2:97:10:ca:75:c0:
ee:7f:e5:9a:82:54:30:a0:69:30:72:4c:6a:b2:31:70:e9:2d:
71:7b:6b:a6:b2:07:2d:1c:86:82:40:e9:8a:63:02:77:e6:8d:
cd:8f:7a:e6:e2:ce:1b:8a:3e:94:00:a8:bb:bd:1f:ad:c1:6b:
7a:dd:4e:ce:96:54:4b:80:88:5f:8b:58:57:23:32:53:fb:06:
0e:3a:46:b5:c1:e6:ef:81:a0:d7:8c:17:cf:27:ae:df:9d:1d:
be:f5:88:39:4d:2f:cd:dc:84:2a:9d:47:16:18:d5:13:ca:63:
7d:ec:8d:49:b8:a1:4f:3a:e3:4d:4b:6c:e4:f7:ec:cd:a0:e2:
d5:93:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:42 2026 by rpki-client