Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier: lwYaEFFuulQrFpMi4NoB2M16Ly+fRQpQJKmyt9+yP+g=
Subject key identifier: DF:54:C4:38:CE:AB:08:78:8D:B7:B3:9B:6E:76:DD:73:28:E1:3B:2E
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial: 019DCDF56ED10013CDD81FA544098FBE8FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 08:01:47 +0000
Manifest this update: Mon 27 Apr 2026 08:01:47 +0000
Manifest next update: Tue 28 Apr 2026 08:01:47 +0000
Files and hashes: 1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: tp5eMvvoYIrdxMBO4cPNX/ZTnr+GosYTXducw/WWW6s=)
2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:6e:d1:00:13:cd:d8:1f:a5:44:09:8f:be:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Validity
Not Before: Apr 27 08:01:47 2026 GMT
Not After : Apr 28 08:01:47 2026 GMT
Subject: CN=df54c438ceab08788db7b39b6e76dd7328e13b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:5b:17:31:ff:0f:6a:69:10:a3:5b:1c:fa:
e2:fd:ce:16:4e:43:f1:ed:4b:d7:2c:3e:14:78:03:
b2:35:61:6b:a6:dc:26:d3:db:2a:e6:17:45:92:8b:
6c:42:ae:40:cf:e1:f4:e5:ee:fa:0d:7b:e0:93:de:
2b:27:66:47:16:90:65:ec:b6:d6:dd:be:46:0f:21:
05:03:7b:0f:76:cb:6f:6c:de:a2:af:cc:58:b4:e3:
50:ff:ac:d0:43:5a:da:29:60:80:42:b3:0e:6d:15:
52:39:27:3d:dd:b7:ba:69:89:97:c6:a0:ca:12:36:
cb:6a:02:33:a3:38:86:01:30:b4:ee:fc:6f:63:78:
6d:01:cc:84:a9:b4:91:aa:78:25:a6:ef:74:95:35:
eb:e8:16:20:04:ac:0b:46:1f:60:8a:8c:40:8c:37:
6c:ea:2e:29:b8:2e:9c:18:52:75:71:76:d1:10:f7:
f6:04:59:2d:fc:14:54:61:81:b7:4f:6d:ff:b1:75:
07:4f:52:4b:9d:38:d2:a3:83:cf:fe:f6:cf:ef:60:
b5:fa:70:ee:2a:a5:fe:28:b9:7c:d1:7e:48:4b:53:
13:1e:45:0f:f7:d7:7c:4d:01:91:79:f8:ec:ac:a3:
b6:85:c2:6d:23:5b:8a:6f:79:40:52:15:af:11:12:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:C4:38:CE:AB:08:78:8D:B7:B3:9B:6E:76:DD:73:28:E1:3B:2E
X509v3 Authority Key Identifier:
keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4c:70:86:20:c7:e1:66:02:06:27:47:49:75:e0:31:64:cf:
f1:b2:4e:12:1c:bf:0d:62:89:26:91:82:c2:f7:87:4c:5c:81:
51:d6:03:cc:e0:ac:1b:9e:de:ed:f6:5e:9b:de:e9:b1:4c:83:
c1:da:e3:54:e8:ab:b8:57:35:8b:9a:33:3f:26:59:f6:f1:a9:
cd:64:7c:3b:cd:d4:15:bc:e8:49:a8:63:b6:b6:60:5c:85:6a:
2d:b2:7a:2f:bc:11:02:e9:30:e2:af:63:94:81:30:4c:4b:af:
e1:32:03:21:55:c6:13:7b:36:31:53:75:62:99:55:f6:ae:f5:
80:ff:d2:d2:59:e0:7f:30:47:ab:ec:94:8d:11:0e:73:76:bf:
21:6b:08:8e:6b:5f:1e:5b:59:49:62:e2:6d:5c:9f:3f:23:ce:
e4:a0:d0:5f:06:d8:93:57:d4:81:cf:5a:1f:b2:d3:e5:db:6b:
6f:f9:a2:9f:4c:33:d5:ae:04:7b:e3:4b:1d:7a:d9:9b:6d:9c:
bd:78:10:19:d2:9b:bd:11:0a:21:0e:67:02:b3:50:d0:a0:51:
da:31:a2:a9:eb:82:fc:eb:fc:cc:bc:cb:23:3e:4a:b3:c1:23:
a4:ae:1f:d7:ab:a8:08:98:2f:65:e0:d6:d5:ab:63:79:30:7a:
1a:cb:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:41 2026 by rpki-client