Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: McOIXD3N6EuNU4UU18+AeaScUipvXa8JZouvEaIQ8V8=
Subject key identifier: 28:03:7B:B0:88:F9:AF:10:A8:AC:87:7F:6C:DC:65:9D:FD:AC:29:F1
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019D39418F9DE759F632AE2B52B8CD256F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: CaRt+6laAjvYJJUvIyoVcDKqXeJHodsJeIwIs/nRo+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8f:9d:e7:59:f6:32:ae:2b:52:b8:cd:25:6f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=28037bb088f9af10a8ac877f6cdc659dfdac29f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:04:05:c2:2d:51:b0:f5:e0:cc:52:33:87:
d9:75:a0:91:53:d2:ff:9d:e2:9b:10:e2:fe:90:da:
52:16:6b:27:13:e2:32:d9:98:f9:fb:0c:57:00:90:
23:4c:00:87:c0:34:0e:e7:57:c4:39:ab:fe:3e:4c:
5e:65:4f:15:ba:5d:22:70:8b:3a:6d:a2:0c:5a:a1:
b2:e3:07:b1:88:e5:2a:57:61:69:18:ca:80:c3:14:
b7:28:37:4a:57:67:46:96:8c:28:7d:9d:8f:21:d8:
a4:4c:0e:0e:8b:05:c8:d0:5d:9f:52:8d:3a:6e:07:
5a:68:14:06:e5:fd:a3:68:42:21:9a:a2:19:9b:4b:
71:2f:bd:da:78:3d:72:22:a0:7a:1a:96:4a:ef:c4:
1b:42:5f:a3:de:b1:29:18:6d:4a:63:81:58:45:94:
5b:96:db:1d:1d:f5:3d:27:85:13:8f:12:4a:45:92:
98:36:41:28:71:7c:a8:06:eb:df:63:63:c7:0f:b1:
2f:df:ea:9b:13:84:89:ec:7f:35:23:38:71:c9:43:
81:aa:19:06:72:c7:80:e2:6c:01:8f:ac:33:87:b0:
63:79:75:00:bc:df:9a:ee:84:cf:92:78:96:ca:95:
93:49:58:a5:ea:a0:21:4f:89:f3:2f:22:0f:30:ad:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:7B:B0:88:F9:AF:10:A8:AC:87:7F:6C:DC:65:9D:FD:AC:29:F1
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:69:92:97:62:dc:e4:1a:03:6c:f0:70:8a:4b:ba:1b:5a:ac:
7e:9d:ce:1b:86:c3:6c:a1:95:38:c1:bd:b8:ae:e3:da:18:55:
b6:2c:4e:aa:4a:c1:ef:58:11:cf:48:ab:1e:9b:d0:f9:4e:c3:
7b:6a:63:03:c4:94:6b:14:a9:fc:2e:d8:5f:80:b1:f1:e7:1e:
78:37:cd:49:43:d0:30:a3:84:fe:fb:0f:4a:05:bb:af:69:f1:
4f:b0:04:3b:37:51:7a:33:f4:19:3d:bf:b6:82:b4:c8:64:f4:
ce:63:d3:50:6f:63:23:9e:61:37:b9:3b:9a:da:5f:4e:ea:a4:
24:05:aa:59:30:a1:bf:33:82:55:9b:b3:b6:d5:12:1f:0c:c8:
8f:05:5c:30:44:9d:c8:19:48:3e:23:1c:75:e9:db:7e:3f:fb:
73:41:c5:d8:c9:63:a5:93:82:d2:7c:c0:78:99:c4:a7:21:dc:
00:fa:f1:bc:9f:15:85:3c:be:12:81:77:87:70:df:fe:a5:36:
27:88:cb:f7:54:70:44:75:39:9b:c7:dc:79:9f:b9:be:ea:c2:
6b:8a:aa:e0:21:6a:9a:81:e5:dd:e7:ee:75:6b:d0:12:2e:bd:
31:5f:b7:f0:8b:c8:ac:78:55:d5:e1:2c:a1:c0:b0:d4:4f:77:
58:8e:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:09 2026 by rpki-client