Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: trJkRGX8yUiqn/uctAiOiuYtzwLDWfrHJkB9R/thR5Q=
Subject key identifier: AF:0F:DE:46:A7:C0:D8:6D:E8:A6:FD:52:C3:04:C3:8D:E0:F4:8D:DE
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019E1F10A3A0DF660887012A239D91B81014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0C10
Signing time: Wed 13 May 2026 02:00:44 +0000
Manifest this update: Wed 13 May 2026 02:00:44 +0000
Manifest next update: Thu 14 May 2026 02:00:44 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: 2XpWykDNdnaOnap7Pg/cq7vYhxXpwGTYl49CQuFvksA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a3:a0:df:66:08:87:01:2a:23:9d:91:b8:10:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: May 13 02:00:44 2026 GMT
Not After : May 14 02:00:44 2026 GMT
Subject: CN=af0fde46a7c0d86de8a6fd52c304c38de0f48dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:33:6a:6b:7d:f1:f4:e4:06:d8:7f:64:c1:
c1:cb:03:3f:45:1a:86:53:66:22:c5:69:16:4c:4b:
70:a1:c3:8c:ce:0d:09:94:9b:dd:02:a0:06:ca:02:
c5:e6:8b:2c:b0:9d:7b:71:1b:d8:05:8b:7f:24:db:
fc:30:1d:01:f0:31:f2:5d:2f:30:6e:cd:dd:1d:39:
14:60:79:42:d3:cd:f7:b7:0c:cd:02:78:7d:0b:64:
9d:09:bd:76:f5:68:09:08:c4:a7:b5:74:19:92:d2:
7d:b5:ee:93:02:04:b6:d1:1e:83:61:8a:d8:66:a2:
db:df:18:59:65:75:30:7f:26:8e:8a:a2:e4:8f:90:
8d:53:96:d3:64:fa:97:87:f8:4a:97:ac:7a:3c:b5:
fd:70:c1:84:f2:12:38:8c:eb:54:48:0b:06:99:33:
f5:15:32:90:3c:7f:3e:f0:c0:96:78:d9:36:95:f5:
2b:43:49:e6:66:c1:09:4f:f0:22:4d:45:6f:03:c7:
c8:e7:f2:61:7d:e2:07:b1:a6:2c:af:0a:c0:f9:26:
10:a4:12:3e:bd:3f:50:14:f2:83:92:98:28:fb:8c:
a3:c4:9c:03:83:09:1a:54:17:cd:71:28:6f:df:be:
92:05:dd:c3:8b:9c:f9:99:b9:0a:2d:de:d2:66:f0:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:DE:46:A7:C0:D8:6D:E8:A6:FD:52:C3:04:C3:8D:E0:F4:8D:DE
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:72:4b:f5:2f:bc:d2:4a:a6:a2:c6:65:53:98:a6:2d:fc:93:
66:42:91:22:d9:80:92:b9:e5:5c:95:ab:c1:e4:71:74:89:b1:
42:9b:5d:42:11:70:4b:1b:11:65:ed:c7:00:41:52:81:15:32:
f6:c0:37:33:c8:6b:da:0f:90:6b:a5:0e:54:6a:a9:32:5f:a0:
a6:0f:74:03:b8:65:ec:88:b6:3a:af:db:2b:70:58:4b:7d:a3:
c5:0f:03:6b:67:95:05:75:c7:eb:e5:5a:1d:0a:0f:19:0f:86:
ab:40:75:07:3d:d6:6d:9e:ee:3c:bd:61:75:d9:60:2e:58:8e:
cc:72:2b:43:52:b4:ac:2e:6b:65:54:90:b9:fa:46:32:0e:5c:
4f:78:89:51:30:f4:a4:95:d8:5a:d1:a9:7b:ca:e2:1b:c0:c6:
9e:81:41:4b:1a:07:b2:cc:d9:31:c0:d7:b9:f6:c1:55:4f:fd:
df:bc:75:51:53:b8:f0:cb:9d:e1:60:38:57:4a:02:26:07:b3:
06:5e:2a:d5:4d:ed:c8:29:97:13:bb:d0:27:fc:ae:fd:b9:3e:
b6:bd:1a:2a:bd:69:20:7b:e6:b1:59:97:05:4b:0d:3f:cb:69:
35:99:cd:06:3c:06:a0:bc:d9:cf:19:95:d1:0f:44:07:9b:ab:
5d:96:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:35 2026 by rpki-client