Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: fBFLLuVHOp77dF9ZJMkH52+2i06MHkQm6IuSFXucv8A=
Subject key identifier: 3B:25:CC:5A:A9:8D:75:70:4C:A2:57:34:C5:BB:24:89:03:F3:0E:36
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019D27A89269593F37481CD2AC93DF5859EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 18FA
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: maUaMAH4hR9v1xIDtLcKKCFKrvJwn2z1XC94gfqpG80=)
2: 9qw7otosSIxdL3aCqQeP90SREjU.roa (hash: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=)
3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
8: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:92:69:59:3f:37:48:1c:d2:ac:93:df:58:59:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=3b25cc5aa98d75704ca25734c5bb248903f30e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:d5:76:0c:66:0f:f0:94:81:a3:d6:59:e4:
c2:7b:29:06:81:3a:cf:c0:28:e0:b5:c2:5a:da:a1:
e6:7e:ae:db:2d:21:b4:fc:d6:1d:54:c9:c8:fd:84:
37:4c:5e:bf:3c:e4:74:5a:fa:e7:12:90:b5:44:a6:
9e:d3:a4:85:92:dc:b8:47:db:97:2e:7d:06:8d:58:
a9:57:50:af:16:0b:ac:e4:cf:5e:ed:f4:55:bb:cc:
16:53:c7:d3:69:60:e8:42:d7:eb:01:1d:85:93:c3:
af:7d:56:64:4a:e2:f3:4d:51:36:93:98:26:ac:12:
18:a0:c3:d5:e7:d5:f3:31:f5:b8:07:20:12:8f:0b:
25:e8:09:70:2c:cb:86:f6:b5:35:ca:3b:cc:05:8f:
71:f0:08:53:dd:7c:c0:c3:45:5c:df:ff:71:ec:5c:
88:82:c6:9c:df:30:fa:6d:f3:97:0e:dd:83:eb:ae:
03:e8:78:55:27:e0:03:91:6f:74:c9:d1:55:0f:58:
b9:07:47:c0:20:c7:2b:aa:4d:fc:3c:d1:00:71:8d:
38:98:6a:77:15:95:3e:46:12:2c:b9:b5:3a:3d:b7:
5c:7d:af:5a:ca:ec:7d:d1:a0:3e:ec:c9:5a:8c:89:
09:18:25:8e:4a:7c:e7:62:f9:a3:aa:e4:d2:cd:13:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:25:CC:5A:A9:8D:75:70:4C:A2:57:34:C5:BB:24:89:03:F3:0E:36
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7d:b2:5f:c1:c1:45:03:ba:7d:52:89:77:10:9e:bc:95:1d:
f0:34:0b:6d:b4:9d:a5:80:c6:df:fd:3f:f9:14:57:7c:1d:35:
6f:70:38:cf:ae:05:74:e3:f0:83:f3:28:e0:bb:ca:69:ae:a8:
f3:eb:f2:68:83:2d:36:ce:08:4d:b3:26:b8:f8:65:04:b2:30:
bc:bc:dc:e6:17:9c:6f:f2:4e:1a:3e:e0:ee:53:39:c0:50:6b:
3c:c2:94:9c:56:24:ba:3d:e0:cd:b8:f7:52:8c:15:bc:b0:93:
f2:85:4d:59:e8:b3:bb:7a:30:3e:00:4b:75:0f:ff:7e:e5:b7:
e7:dd:2e:ce:6e:6b:7b:5e:be:24:00:ef:1f:28:a6:aa:71:68:
eb:df:85:0f:f1:75:94:bb:8f:49:e7:06:8d:90:40:95:27:fe:
66:54:06:41:7c:2d:4d:a0:61:7f:16:02:94:ac:40:f1:91:80:
50:2c:94:8a:ff:de:0b:05:5e:ec:dd:80:b3:be:65:80:5f:27:
c8:7d:08:a5:be:15:c4:f3:11:99:3e:cb:13:53:fd:26:32:36:
5c:c7:d4:04:dc:0b:39:5b:76:28:c3:51:c1:a0:71:25:6c:20:
8e:c9:27:fe:a2:ea:72:96:24:49:74:dc:76:27:cb:4c:9d:bb:
8f:26:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:55 2026 by rpki-client