Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File: xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier: RETw1g3koj6sh1feHfT5FBayZts1apOko8cJfWIhEAc=
Subject key identifier: F3:8F:8D:3B:88:A0:AC:1D:94:41:7A:3E:4D:BC:31:3F:BA:14:7C:FA
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial: 019DD19A2EE17C8EA0709F43C384212433B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number: 1870
Signing time: Tue 28 Apr 2026 01:00:35 +0000
Manifest this update: Tue 28 Apr 2026 01:00:35 +0000
Manifest next update: Wed 29 Apr 2026 01:00:35 +0000
Files and hashes: 1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: bsNZXkzbUzYR2FOzSl4B1jq25O6/O/g6vNw08s287YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:2e:e1:7c:8e:a0:70:9f:43:c3:84:21:24:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Validity
Not Before: Apr 28 01:00:35 2026 GMT
Not After : Apr 29 01:00:35 2026 GMT
Subject: CN=f38f8d3b88a0ac1d94417a3e4dbc313fba147cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:5f:4a:71:24:5a:77:fa:e0:1b:f0:e3:32:
3a:3e:c8:1d:00:dd:76:46:57:ea:2d:e1:88:99:24:
53:37:ba:d1:ac:2b:06:89:ed:6b:c1:35:a1:22:1e:
68:c3:73:b5:1d:60:6c:87:42:6a:40:2b:f4:c0:e7:
de:68:1d:7f:5d:4a:f4:72:1c:26:46:c1:c4:d4:10:
cf:40:ea:6f:03:57:b1:e2:2a:83:ca:54:e9:2c:8a:
56:73:35:5e:14:0e:89:d1:79:55:44:0e:4c:c6:f9:
e7:a5:34:a0:29:4e:ce:c5:37:6a:25:6e:ea:3a:0c:
47:8f:95:0a:e4:a6:77:60:e2:ff:61:3e:d7:e2:ce:
82:ba:01:f1:8e:e4:03:ab:20:4b:3c:bf:64:2a:d9:
79:30:5f:c7:c4:f3:ae:12:49:e3:65:b4:35:df:ad:
07:fa:60:84:bb:2b:e0:c9:ae:3c:f7:c0:16:62:dc:
38:94:4e:3c:d1:04:e6:15:a8:89:aa:f9:ec:aa:96:
96:a9:02:b7:1d:70:ca:fb:55:ad:db:3d:ab:1c:d1:
12:ba:50:b3:aa:34:bb:83:4c:f2:e3:31:61:99:d5:
fc:3a:5c:81:77:eb:a6:a0:ab:71:10:00:28:17:7f:
b2:c8:04:dd:2a:f1:3f:b6:14:32:bc:ee:ff:2d:bb:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:8D:3B:88:A0:AC:1D:94:41:7A:3E:4D:BC:31:3F:BA:14:7C:FA
X509v3 Authority Key Identifier:
keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3b:ef:20:98:e7:cd:39:c0:57:30:94:49:45:fc:40:c1:0f:
0e:b5:1b:af:d3:e0:e2:ff:8e:ef:43:d8:f5:5d:7b:99:a1:08:
a3:55:58:b7:7a:1a:aa:ac:4a:d4:62:a1:39:07:03:a6:66:84:
c1:04:c1:84:5c:fc:86:6c:60:90:26:7a:b0:f1:14:f5:f5:73:
17:67:03:b7:ec:0c:84:d6:d2:e7:d4:11:8a:d8:28:cd:d6:67:
2c:3e:60:e7:50:12:0f:bf:65:01:7a:84:7d:09:52:c3:60:7b:
c7:08:4e:51:ec:b5:e1:eb:8d:e6:67:6a:82:67:f0:cf:c0:d5:
66:52:40:72:dc:77:f6:53:c5:c4:42:93:3b:a1:8c:19:67:c0:
fa:96:e8:c4:ee:fc:57:b9:d1:2a:05:56:1b:2c:74:68:61:45:
2b:ef:b2:67:b3:4f:4a:df:a0:64:11:fd:92:6c:8a:48:3d:a3:
c7:26:dd:e4:7e:4c:06:cc:63:15:4a:87:57:df:be:89:ff:3a:
6c:b8:e3:01:2d:21:05:9e:8a:8d:30:56:de:eb:85:e1:43:0e:
39:cb:f1:52:05:f7:a5:74:c1:d3:72:19:27:b1:83:70:96:b4:
71:2d:38:8a:2f:7b:e8:80:39:d8:e2:c4:f1:97:91:bf:f5:37:
0f:4b:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:23:22 2026 by rpki-client