
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier: +EMmw0Qr65XRc7BrXoXhdelcwU4ZPm1nLXZPtkDhKiE=
Subject key identifier: 37:D7:C2:7F:79:39:8E:B9:09:ED:C0:3C:F0:CB:D0:B0:A2:F2:C1:61
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial: 019CE71299756FE83976A12896705A0A2E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 12:01:21 +0000
Manifest this update: Fri 13 Mar 2026 12:01:21 +0000
Manifest next update: Sat 14 Mar 2026 12:01:21 +0000
Files and hashes: 1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: FlgLZGgCzH0f3TUDDo5Pd0VIYThm0dI2sbxHqnKCaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:99:75:6f:e8:39:76:a1:28:96:70:5a:0a:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Validity
Not Before: Mar 13 12:01:21 2026 GMT
Not After : Mar 14 12:01:21 2026 GMT
Subject: CN=37d7c27f79398eb909edc03cf0cbd0b0a2f2c161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:8a:e9:24:8a:86:48:33:a7:b9:c5:74:4c:
a6:9d:57:fe:58:d1:f9:67:d2:a6:3d:62:ff:b1:52:
01:02:ed:0d:72:ef:9f:c4:be:f2:f5:6b:7c:de:b9:
b7:d9:01:1a:d6:60:97:6a:3f:b2:cd:80:cd:1d:42:
3f:ab:3b:a0:68:16:1a:7b:44:35:89:bf:f6:40:65:
b3:00:c1:a4:39:de:66:d4:87:db:35:93:42:0e:0e:
1b:ec:1b:9c:f0:3b:fe:02:f5:5b:59:06:5f:b8:9f:
06:ee:8f:70:af:4d:a1:db:e3:8c:4a:23:60:23:74:
35:c5:ae:e4:a2:80:14:ce:23:77:61:8e:35:7f:a9:
b2:50:72:f7:35:c7:2e:65:8e:fd:53:2d:cc:48:39:
33:1b:e1:f6:58:37:f6:ef:35:db:7d:a5:d0:90:fd:
b0:a9:94:6e:03:95:82:8c:37:a8:97:96:5b:cd:80:
d6:8e:35:62:b7:d3:89:34:b3:1e:59:0b:64:2f:9c:
91:bd:a3:09:69:62:b7:87:8b:b0:a7:82:e2:53:cb:
af:0b:22:62:18:18:1a:0f:1f:3d:e1:70:19:96:f6:
00:d0:3b:87:57:99:98:fe:75:6a:ce:5d:45:8d:5b:
51:be:bc:49:74:56:ab:59:d3:c6:2a:c5:34:55:22:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:C2:7F:79:39:8E:B9:09:ED:C0:3C:F0:CB:D0:B0:A2:F2:C1:61
X509v3 Authority Key Identifier:
keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:12:46:10:3f:a8:06:d2:f9:5d:f9:7b:fc:dd:0b:91:d3:29:
d5:7a:cf:96:dc:b3:4e:ab:6a:0a:a2:fc:a9:65:bd:e1:27:04:
9e:5b:d8:48:b8:38:7b:6b:24:52:bd:e4:0a:3a:fb:b2:03:98:
c7:f4:ce:55:6d:d2:46:54:08:65:06:83:44:42:48:15:48:73:
c7:05:dc:5f:15:bc:e2:b3:2a:46:17:39:f4:34:2f:b7:72:ef:
3e:8a:a6:59:69:70:09:cc:ce:52:0c:20:6f:99:bf:ac:5c:df:
1d:f7:72:9d:06:95:73:4d:03:cd:0e:4d:ce:3b:b4:63:07:4f:
af:02:8e:43:5b:b5:8a:8d:53:1f:83:8a:b9:08:52:b2:60:6d:
37:02:b0:e6:26:cb:dc:c6:b1:e6:fb:56:c8:ee:31:04:cf:7c:
52:59:7f:6c:9c:08:a3:f3:5b:76:9c:0d:fd:1e:3c:aa:68:0b:
9c:eb:27:b5:70:11:8f:a8:fc:8f:de:ff:d3:48:92:52:4e:75:
74:6d:09:3d:8a:e4:61:a2:cd:84:5a:79:fd:55:fb:6b:a3:e5:
c3:c7:90:b9:9c:7a:97:1a:c4:9f:dc:2d:43:e2:3c:bb:23:70:
87:7e:da:63:e2:71:84:27:07:dd:b7:e6:5a:10:d2:f9:00:bf:
f9:3c:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:26:41 2026 by rpki-client