Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File: 6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier: F/tW3T7KEh4xTbKA8y7gb3chQledDZ+yMX4h2X0DVSQ=
Subject key identifier: 7C:89:69:4E:5A:87:3E:C5:F8:37:91:E4:27:F1:0B:36:5D:A1:FE:1A
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer: /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial: 019D2884C1EFC3EC10507142D8EFFB5BDB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number: 0DE2
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (hash: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=)
2: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: 2bnOlJyj6k2MhBRLM/QAEpyR+vKUO0G26bpavg+zuFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c1:ef:c3:ec:10:50:71:42:d8:ef:fb:5b:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=7c89694e5a873ec5f83791e427f10b365da1fe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:f0:9c:90:b9:45:cc:0f:5f:c6:a9:d6:98:
52:c6:d9:16:c5:c0:33:3b:ad:eb:d2:73:d8:81:0d:
a6:c5:33:b6:1d:52:97:f1:c7:98:52:63:02:98:f5:
88:8d:96:e4:d6:7b:43:67:52:81:9b:7d:49:66:e6:
b2:ce:35:93:ba:73:1a:81:11:d3:df:9f:2e:8c:a2:
67:4e:60:2e:78:8e:c7:43:48:ae:15:94:9d:89:ea:
45:25:96:f8:78:26:f5:ed:75:ba:9d:c3:ae:03:2b:
92:a7:92:fe:43:da:97:04:78:8d:fb:6e:2e:b6:c8:
21:8b:91:c9:6a:7d:16:16:1e:36:9b:8b:fc:f1:17:
8a:b3:ea:06:81:3a:3e:06:e5:34:13:ed:fe:71:4d:
a3:26:9b:e8:1a:02:83:07:1a:ce:f6:b8:7c:d0:42:
ff:2f:cf:d3:18:bb:9c:0d:7a:f7:ca:21:00:d5:0a:
16:20:f1:85:bd:48:01:01:18:cf:02:45:19:38:5d:
8f:75:4a:c3:2a:a2:30:6d:cd:ae:0b:60:6d:ae:df:
97:c3:16:0d:12:93:e6:51:d2:55:86:cb:1f:83:8a:
4b:21:cc:7f:fb:94:5c:5b:f5:22:7a:f0:e2:6f:bf:
1c:8a:fe:a5:b9:da:11:88:ad:c8:75:79:b9:e7:74:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:69:4E:5A:87:3E:C5:F8:37:91:E4:27:F1:0B:36:5D:A1:FE:1A
X509v3 Authority Key Identifier:
keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:a7:8a:1b:07:94:ce:89:2c:40:d3:37:c6:96:72:e1:8d:
6d:f2:2c:0d:b5:6f:24:72:36:80:c0:71:99:88:55:8a:aa:6f:
88:fd:19:cf:35:fa:aa:24:50:63:2c:e1:39:35:1e:99:dc:45:
17:74:ae:b5:de:58:3a:b1:2e:6f:de:71:32:eb:f2:56:91:15:
78:9d:db:b0:63:1d:45:f6:52:ea:87:62:0d:45:b5:d7:a8:d9:
f4:87:51:1a:4a:d3:a8:84:9a:b8:4b:93:d8:c7:c2:b1:14:86:
02:94:58:40:61:3c:1a:8f:31:c7:59:85:c3:47:a7:12:0a:ef:
99:fd:e6:69:87:50:e9:02:1f:3f:85:e1:0a:27:e5:e7:d9:ca:
c8:c0:0b:93:13:13:09:13:a9:cb:09:aa:e6:77:07:54:c6:88:
be:87:57:a6:07:e9:b4:1b:d7:1e:5e:3f:4c:3f:b4:be:ce:6b:
4e:df:a2:d0:59:01:54:70:3e:a2:47:bf:85:70:6c:04:17:82:
8a:83:94:31:9b:f1:0f:40:e2:17:ba:23:e7:44:5f:a8:33:34:
db:fa:00:f6:2b:b6:d9:5d:d6:c1:9e:bd:2a:16:04:85:2d:9e:
74:40:c8:96:a2:f2:4f:6e:05:05:19:7a:0d:2c:36:d1:f1:05:
2b:0c:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:51 2026 by rpki-client