Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: //R7CgCxjWEakvh+XrM1O622ZhFg2NDUnxCc7B/7Ssc=
Subject key identifier: FA:F8:50:48:E7:9B:A2:1D:EB:59:FB:06:51:2A:B7:6D:2C:82:9E:B6
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019CF7610AE09AECE058BA0A2526983DD377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 186D
Signing time: Mon 16 Mar 2026 16:00:57 +0000
Manifest this update: Mon 16 Mar 2026 16:00:57 +0000
Manifest next update: Tue 17 Mar 2026 16:00:57 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: 34NMSUW0f8eaBkt7FSh+dJOco074FirDmv4uNrg3Sfw=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 15:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:61:0a:e0:9a:ec:e0:58:ba:0a:25:26:98:3d:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Mar 16 16:00:57 2026 GMT
Not After : Mar 17 16:00:57 2026 GMT
Subject: CN=faf85048e79ba21deb59fb06512ab76d2c829eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:ff:00:e5:30:c1:03:5a:67:b5:3d:50:6a:
3c:38:b1:13:a3:93:1f:cb:ce:23:d4:32:cc:d9:e0:
85:5f:a3:f5:71:c0:9c:91:db:23:d8:d2:66:45:81:
dc:49:e1:94:2c:81:0a:8f:a4:f1:68:07:67:0e:d7:
c2:60:d7:cd:68:ff:d4:96:d4:53:b7:80:00:a3:4d:
d5:97:5b:59:dc:5a:15:af:fc:58:2f:53:a3:ea:e4:
1d:94:18:5d:b2:2e:35:38:dd:de:a5:2b:85:f8:72:
61:8b:a8:56:f2:d6:76:21:07:e9:8b:24:92:38:ba:
de:c3:e0:70:92:e1:94:64:af:6d:1f:4e:73:06:92:
6a:29:20:bd:07:77:6e:bd:82:32:4c:32:fd:61:6f:
35:c8:2e:fa:c8:3a:22:04:18:8e:5f:4f:76:d9:86:
68:82:76:77:ec:bf:21:8d:fc:18:1b:16:bc:20:88:
79:62:a3:56:ac:f6:7a:76:e8:6a:b2:b0:55:9b:7c:
c5:d7:09:28:cc:d6:88:f1:3b:4d:3d:20:1a:96:95:
c1:2c:c6:fb:14:54:4f:90:c8:5d:cd:c9:bf:c8:1e:
e0:e1:dc:a0:e0:3d:47:41:31:1d:07:f8:a9:21:3c:
0d:67:ae:3b:63:4e:b7:1a:62:d0:3d:6b:95:aa:97:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:50:48:E7:9B:A2:1D:EB:59:FB:06:51:2A:B7:6D:2C:82:9E:B6
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:31:2d:3e:10:29:4a:a7:9f:64:84:a1:b4:47:ac:f3:68:
b6:bf:3c:b9:2f:d1:0a:c7:1a:4b:93:b6:5e:8c:43:6a:c5:83:
0e:90:be:19:b2:32:d9:f0:d8:55:e2:8c:1f:50:b9:93:2f:8a:
fe:fe:bd:e9:8c:74:5b:00:20:bc:04:77:f3:b8:1f:63:b2:b1:
78:6d:e0:4a:2b:07:98:1e:9f:41:b5:9e:dd:4d:39:3b:15:5b:
d7:35:f9:a4:d8:f2:e1:65:2b:8d:e9:81:6d:c9:d4:c2:9a:94:
a3:52:f0:8f:21:d2:15:eb:28:e4:b3:72:db:b7:80:2d:d3:a6:
8c:ea:30:ba:6f:ad:94:16:e5:ae:8b:1e:79:96:62:e8:8f:2d:
0b:10:b0:93:ac:d1:cd:b8:a3:4b:59:d6:3e:7d:27:cd:e0:94:
1e:44:41:b9:ab:e7:b0:62:97:12:bd:77:01:25:c9:98:6e:9b:
a9:eb:af:7d:64:5c:a8:a8:fd:54:db:fa:d7:ca:e0:87:9d:86:
c3:72:7e:1c:d9:9f:87:ce:a0:87:80:44:eb:fe:67:57:a5:c3:
54:bb:77:32:ce:2d:d2:61:af:0a:7c:e8:dd:74:55:23:c1:21:
a4:56:49:d8:91:c2:02:e7:62:02:55:09:b6:a7:3f:e5:9d:6b:
09:39:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:29:44 2026 by rpki-client