Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier: hwcDVhM5Lo43ix6cPjOYTWQTkmgMxaG9+WDP+yeK2A4=
Subject key identifier: 04:5E:33:38:33:67:95:CB:AC:FB:50:A0:A1:7D:B9:F5:86:28:77:EC
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial: 019DCED063F34E4AC4215043531E11AC6B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 12:00:56 +0000
Manifest this update: Mon 27 Apr 2026 12:00:56 +0000
Manifest next update: Tue 28 Apr 2026 12:00:56 +0000
Files and hashes: 1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: qTAFc3K00fBLCH0Hm3LIU6zoxn4mVSc7nJDXe069ysY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:63:f3:4e:4a:c4:21:50:43:53:1e:11:ac:6b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Validity
Not Before: Apr 27 12:00:56 2026 GMT
Not After : Apr 28 12:00:56 2026 GMT
Subject: CN=045e3338336795cbacfb50a0a17db9f5862877ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:93:39:cb:4b:1d:9a:1f:26:82:59:26:31:
11:23:67:b2:65:ca:d9:01:16:15:bb:b5:72:f9:f7:
67:e7:78:d0:29:42:1a:ef:19:9c:0c:25:cf:98:0c:
ac:d4:f6:70:90:ba:61:32:2f:2c:02:d9:3d:a4:07:
45:09:b0:8c:da:36:07:b7:ac:59:2d:38:97:17:9f:
6f:c9:9a:5b:bb:6d:26:c3:c4:95:c8:f0:47:21:98:
1a:6c:a4:c8:f0:77:12:a4:ef:a5:55:b7:af:89:97:
6e:e3:63:7d:c6:4c:cb:76:ae:27:75:75:13:11:7e:
08:2a:6a:49:5f:0c:40:f8:b4:71:42:40:5c:4c:9e:
6d:62:c3:ff:95:22:c7:47:b9:d4:61:76:03:dc:8d:
2c:72:84:93:12:96:1c:da:b8:74:82:f8:52:e8:9b:
c9:37:47:27:fa:77:e4:3f:2a:9d:1b:46:95:9b:6b:
30:8e:f6:25:c8:4c:ae:6c:4e:a9:5e:39:19:70:35:
b9:dd:13:70:ab:47:1a:2a:69:85:1b:04:b6:cd:04:
11:f4:70:7e:49:ff:10:6c:e0:5e:83:6e:19:2d:ec:
fd:dd:9a:c8:08:fa:79:3e:43:c3:b5:78:10:82:55:
c2:98:ab:a3:f0:1b:79:8a:f0:c1:e7:cb:fc:29:57:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:33:38:33:67:95:CB:AC:FB:50:A0:A1:7D:B9:F5:86:28:77:EC
X509v3 Authority Key Identifier:
keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c2:6d:27:53:7d:ba:65:33:7f:54:95:65:fc:6a:08:49:eb:
e2:df:0d:89:83:99:a2:1e:7a:eb:b8:7d:0a:f1:0a:fd:c4:5c:
99:2e:8c:7a:d9:92:6a:23:ba:10:b4:50:2a:e1:66:80:6f:9d:
36:f7:83:d6:02:da:c7:7e:15:d9:54:3c:4a:fe:cf:c4:75:82:
8d:bf:71:20:b7:ec:4a:45:70:e3:52:ba:bd:41:7a:d9:55:14:
1e:4b:14:2d:eb:3c:c3:be:7e:73:e8:d3:28:f1:2e:c7:57:b1:
11:59:8c:58:0a:43:f8:bc:dc:f3:dc:16:14:7a:dd:3c:be:36:
7b:55:00:64:3e:02:22:c2:06:ee:c2:36:4e:70:a0:57:89:69:
7a:83:e2:90:7e:5d:f4:ca:12:c9:a0:09:76:b8:24:b7:6e:54:
6c:dc:ba:27:d0:55:67:bf:46:83:46:64:70:2c:76:a4:87:61:
74:29:77:28:76:c7:dc:4d:b4:70:52:52:5e:db:82:20:f7:b3:
69:5c:99:3e:da:ff:38:2e:ee:a5:12:6d:6a:1a:18:08:b9:c9:
59:a2:1f:94:93:26:ce:24:d2:4c:56:8b:19:81:d3:4e:36:75:
42:78:a1:12:08:f2:4d:99:42:6e:6d:2d:03:11:11:47:d5:4d:
ed:58:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:49:59 2026 by rpki-client