Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier: 8i74muqH1qFM5FuTz6HGz6FDmGUB2oldAmmE6NaBn6U=
Subject key identifier: 0C:70:DC:F1:B5:26:A6:2B:3D:B8:CF:2F:FC:07:67:F0:C3:35:54:F2
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial: 019D28F2FB187AF9858944394D55C8E9FCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number: 0315
Signing time: Thu 26 Mar 2026 07:01:45 +0000
Manifest this update: Thu 26 Mar 2026 07:01:45 +0000
Manifest next update: Fri 27 Mar 2026 07:01:45 +0000
Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: uooj8mGMFWfsPiD0Smvd9Hr0Ye1tJ5U7Qe+bkyDE7Is=)
2: e2Nx3MWYEW91glMqV5TLbQ1S5j4.roa (hash: 1d9GQqvCFQjgc9W5ZDcmpkqgj4oWJ7r7FTu64+cmQXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:fb:18:7a:f9:85:89:44:39:4d:55:c8:e9:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Validity
Not Before: Mar 26 07:01:45 2026 GMT
Not After : Mar 27 07:01:45 2026 GMT
Subject: CN=0c70dcf1b526a62b3db8cf2ffc0767f0c33554f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:a4:78:52:39:a4:6e:a2:87:c1:95:b6:b2:
75:75:ba:5b:2f:87:f3:e7:af:5c:46:7d:6b:5e:86:
a8:84:b1:49:c4:05:74:b8:03:f6:b7:de:9b:96:60:
28:97:a1:c3:32:e8:cf:6b:f8:15:a9:a7:82:fe:70:
51:05:c3:67:b2:3c:4a:40:cf:84:60:b6:df:cd:3d:
74:88:49:a4:d0:a8:e6:f1:55:21:d5:6b:72:bc:f5:
3f:54:6e:03:bf:91:bb:52:df:51:de:ad:21:27:bb:
c8:de:ba:66:c9:c6:64:54:cb:75:a8:e8:da:ff:9f:
29:0d:93:0f:f3:33:4c:25:48:96:48:3f:e4:a5:7d:
13:f6:e3:c7:90:fc:f9:9c:b8:61:a1:f7:9c:7f:cf:
40:fb:60:7c:50:57:c7:15:ff:51:7d:1c:ff:a5:14:
10:f9:73:6f:b7:3e:ef:85:2a:24:3d:06:24:74:9a:
0a:29:7a:d8:e4:0a:84:53:67:2d:cf:fb:0b:db:1d:
80:d5:26:a8:12:21:8f:60:df:5f:b4:a9:39:3c:03:
55:6e:3a:f8:7b:23:7e:fc:17:94:a7:14:9c:9d:01:
8c:89:ef:f6:b3:55:eb:e8:5f:d5:90:78:9e:ff:20:
76:ca:84:72:18:b9:50:17:38:49:d0:58:11:5d:e5:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:DC:F1:B5:26:A6:2B:3D:B8:CF:2F:FC:07:67:F0:C3:35:54:F2
X509v3 Authority Key Identifier:
keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:e3:66:4b:e0:77:aa:31:a8:32:b0:37:a0:35:e9:36:0a:
5f:f8:2a:2b:4c:e7:b5:0b:a9:f1:29:85:a0:14:ad:13:dd:65:
d7:7c:fc:5c:e1:32:47:90:20:de:99:a3:8f:92:8c:57:29:93:
73:e5:1b:f0:c2:a3:86:47:8a:cf:ef:b1:9d:45:8e:cc:45:61:
9a:ef:50:e3:21:1c:7f:47:55:4f:64:68:bf:60:f7:45:b0:db:
72:53:51:24:3d:e1:9a:e6:94:18:51:de:a0:70:cf:65:d9:85:
b4:48:4c:22:0a:39:9a:13:fb:6c:00:6f:be:f8:bf:d3:db:dd:
59:6f:84:5a:06:70:6f:52:04:ba:ee:4c:2b:13:a6:18:45:16:
50:50:ea:b2:00:53:fc:8d:d3:67:56:c4:79:9a:45:72:f8:4d:
3f:a5:3c:c7:7c:51:65:a1:f0:63:68:3c:36:f3:d9:00:47:43:
d9:0a:ff:9c:6c:ad:bb:7d:68:e5:ec:75:60:c0:87:69:d7:af:
12:f4:e2:45:16:c7:cc:14:a9:c0:0c:87:0a:98:3c:c2:53:2c:
ad:c8:01:0a:d2:bc:8a:36:6c:6b:7c:ba:17:5a:ab:50:06:93:
d6:97:58:e8:11:2a:6c:36:ad:87:b1:9d:76:9f:f1:5e:38:31:
a6:f1:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:14 2026 by rpki-client