Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier: ZcQkQV7DA5A9ev0fKeMVyROVknsnV+Fw6cBb/R/WyDM=
Subject key identifier: B4:B8:11:59:87:8E:DC:7C:AB:11:E7:6A:00:C6:94:ED:66:D9:C5:65
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 019E1CEBBAA76DC5052BA87C57DFD80F4846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number: 18D3
Signing time: Tue 12 May 2026 16:01:10 +0000
Manifest this update: Tue 12 May 2026 16:01:10 +0000
Manifest next update: Wed 13 May 2026 16:01:10 +0000
Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: EQrnZPT0cM86sjGGSfqxePtPAcGU6sGaVyeMYWQERro=)
2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ba:a7:6d:c5:05:2b:a8:7c:57:df:d8:0f:48:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: May 12 16:01:10 2026 GMT
Not After : May 13 16:01:10 2026 GMT
Subject: CN=b4b81159878edc7cab11e76a00c694ed66d9c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:e9:e4:bc:02:85:f1:fa:d0:06:73:96:4d:
47:fc:d5:98:cd:b7:13:7c:3e:1d:ef:49:54:f4:dd:
be:2b:67:4d:5e:fe:b2:ce:5e:c3:4c:97:e5:83:3f:
4b:37:88:2a:13:d8:56:10:aa:18:24:82:ed:6d:f3:
a6:7b:d1:59:80:b6:e5:39:be:43:3f:a1:0e:a9:a9:
e0:e7:b0:b7:9b:c3:a5:1a:77:c9:d1:0e:66:0d:eb:
a2:66:11:d7:f8:9b:29:7e:36:d6:45:2c:05:17:4e:
a0:f7:47:f9:00:40:8d:56:fd:d9:74:dd:c1:9d:78:
a0:8e:58:6e:e2:95:4a:75:3f:9f:6a:e8:96:87:47:
2c:88:d0:7e:2b:ab:5e:21:d3:3d:92:56:4a:f9:f8:
86:59:2e:1d:6a:44:70:f0:59:2e:a7:69:25:f7:42:
99:3d:38:b7:59:5a:31:d9:9c:07:0a:0e:2a:12:ac:
64:1d:bc:48:9b:f7:f7:77:e5:96:5e:3b:a3:fd:76:
fa:70:50:f2:34:dc:de:fa:52:e1:3a:2c:d1:60:01:
78:6f:d8:c8:8f:49:45:97:57:99:b1:d7:98:1b:e8:
96:b2:0e:51:de:52:c7:86:95:8e:bd:eb:5b:cb:37:
3c:09:16:93:20:24:23:93:99:5f:5a:32:ba:17:19:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:11:59:87:8E:DC:7C:AB:11:E7:6A:00:C6:94:ED:66:D9:C5:65
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ff:7c:42:af:29:d5:4b:bd:43:c1:61:dc:a9:8a:04:52:c0:
57:b0:0e:a1:14:d8:10:e8:1e:5b:35:55:5c:b4:ac:d1:35:ca:
b1:f4:16:65:6b:8b:3d:5f:81:b5:b2:f5:47:ce:c8:b7:26:10:
a4:bb:7b:8f:c8:7c:58:fb:54:3f:51:4a:2f:1c:7d:4d:d1:b0:
66:d0:02:b5:9f:d0:89:02:8f:5c:aa:5c:42:c8:68:7a:e6:90:
1f:62:53:f8:1a:af:84:df:74:ec:60:d0:f7:fb:7f:78:a1:66:
4d:a9:c9:72:0e:ac:58:ee:03:88:0b:7b:19:69:10:38:4d:04:
cb:13:f3:63:77:e3:19:73:65:9d:1a:ec:27:fb:20:c6:8a:bc:
76:a3:89:4f:aa:3a:21:ae:d7:9e:07:40:7b:87:ce:e6:a2:b5:
09:db:35:6d:ad:29:af:b3:26:b8:c5:8b:88:b7:b4:04:12:36:
e1:4a:15:e9:ad:d6:14:ce:53:77:f2:a7:3c:61:df:96:67:21:
09:ec:c7:ca:56:d4:d7:eb:37:5a:7a:57:32:17:82:92:03:21:
b0:18:61:91:0a:83:5d:87:ad:5d:12:f3:df:43:dd:d9:ba:da:
da:ba:89:0b:4a:c7:62:23:e0:ca:f8:11:12:5b:e9:3b:01:42:
3f:51:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:45 2026 by rpki-client