Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: 60rlXqy7TuONHHfl2QeHc23eLmc9Wb2wn+EEh27Am2Q=
Subject key identifier: 2C:75:2B:24:C2:99:6D:F4:63:20:A3:15:2C:8F:DB:8F:7A:C0:61:0F
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019DA7C38E3C2114FF23CC44FB97060A64DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 22:01:44 +0000
Manifest this update: Sun 19 Apr 2026 22:01:44 +0000
Manifest next update: Mon 20 Apr 2026 22:01:44 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: ytSzC6MRMHK2jZue3LVb/yR+BnKELslpCXEgnWWuYY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:c3:8e:3c:21:14:ff:23:cc:44:fb:97:06:0a:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Apr 19 22:01:44 2026 GMT
Not After : Apr 20 22:01:44 2026 GMT
Subject: CN=2c752b24c2996df46320a3152c8fdb8f7ac0610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:3e:0c:3e:b6:b2:27:d3:c7:5b:7a:60:cd:
9c:81:fd:55:87:a5:9b:79:bd:02:e6:e3:33:4f:b1:
d4:b9:39:ed:93:56:84:d7:da:2b:fe:cd:1e:c2:e6:
c0:a3:db:b7:53:bf:74:e2:e7:f3:32:27:2a:4e:7b:
30:3d:4a:57:fe:7c:e1:bf:87:ec:86:4b:da:66:90:
54:4c:e4:2c:2f:0e:25:c0:c1:49:e3:8c:5b:73:a1:
a3:83:16:a9:70:dd:15:f0:36:0e:4d:39:6d:d5:3f:
98:0f:44:3b:2c:c0:73:d7:41:ea:65:ac:52:f5:98:
39:68:b7:a7:ab:c6:bd:f5:42:2c:9a:73:2b:3e:8f:
7c:e7:39:29:a4:c8:60:ba:31:bd:b2:52:d4:e9:2b:
6c:5b:52:7a:98:66:ff:e1:7f:04:7b:61:95:77:c8:
92:e9:d1:aa:54:ed:a0:de:97:13:9a:1b:f3:74:46:
eb:e5:94:80:34:a4:f2:df:14:38:60:cc:47:67:a6:
ad:ba:f6:27:8d:42:4e:f5:e5:c8:a4:bb:17:89:99:
1d:8f:90:6d:d6:75:db:dd:81:28:06:71:c3:38:87:
7d:81:62:8d:ec:23:b9:a0:53:6d:a4:b8:9a:7a:b3:
95:d4:1c:8c:6a:6b:4d:5d:a7:c4:59:ac:f4:21:fc:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:2B:24:C2:99:6D:F4:63:20:A3:15:2C:8F:DB:8F:7A:C0:61:0F
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:c4:c5:42:33:0e:fc:e8:10:d0:b3:28:78:02:2e:c9:bc:
9f:e7:2b:ce:e5:eb:f2:d8:ab:ce:37:fa:53:8a:e6:bf:06:39:
24:6b:9e:30:5d:c6:40:b3:1d:20:b0:8d:14:1b:f8:9b:23:ae:
4a:d6:ff:db:eb:d5:ae:96:6b:66:6c:6f:25:dd:88:ab:09:b7:
06:1f:9c:b2:39:35:e9:de:31:b0:89:93:3c:90:83:cf:5d:da:
03:8d:06:ef:79:2b:b6:2c:59:ae:fa:ae:82:83:42:45:c9:6c:
a0:ad:80:59:d0:3c:5f:21:cd:30:c5:dd:3b:14:5f:bd:e4:f1:
61:1d:94:6c:98:e5:0e:ff:49:b4:20:85:8a:10:64:5e:ff:42:
8d:8f:eb:32:84:05:26:c5:76:7d:2d:51:5d:34:3c:9d:73:f3:
87:e3:65:99:4d:e4:2a:03:82:57:a7:a6:d6:7d:ab:9c:93:00:
ef:bd:c3:05:1c:3d:59:34:45:46:85:aa:2a:25:8c:45:32:b7:
0e:dd:e3:22:a3:a7:9c:35:5a:79:11:cb:25:52:02:16:57:3b:
24:b2:a3:87:61:31:77:0f:78:45:d1:46:0f:32:27:67:7c:4b:
ea:a9:4c:3f:45:b2:bd:5e:c2:e9:0a:e7:65:b6:59:40:71:22:
6c:17:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:50:30 2026 by rpki-client