
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier: SY3+pnPlylRO86j7tLlKF2d+UGazIV91vel1IILWDMI=
Subject key identifier: 51:89:23:1A:12:57:60:70:E2:97:33:6C:4A:46:C8:02:56:62:E1:34
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 019E916FE4143137F196E2E873E6ABE82FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number: 1945
Signing time: Thu 04 Jun 2026 07:01:29 +0000
Manifest this update: Thu 04 Jun 2026 07:01:29 +0000
Manifest next update: Fri 05 Jun 2026 07:01:29 +0000
Files and hashes: 1: 4Af87rg4Bx7SgQQ5MxEN8mZ2YrY.asa (hash: Kzv9NX9qtlVE38MFIIf9pptzKBSLZ3APX1zKA5bjFE8=)
2: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: 843M5o3OwrRBJ2q3d4jVBwYxpNROT1GYz3OK+/ZuMhM=)
3: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:e4:14:31:37:f1:96:e2:e8:73:e6:ab:e8:2f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Jun 4 07:01:29 2026 GMT
Not After : Jun 5 07:01:29 2026 GMT
Subject: CN=5189231a12576070e297336c4a46c8025662e134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:db:0e:88:f0:b7:3d:eb:62:90:20:13:bb:
d4:1a:ac:cd:5c:1a:87:27:78:a6:be:e1:8a:06:13:
50:9e:35:b3:13:a5:c4:c1:2b:90:e0:b8:9e:45:37:
f9:84:66:2c:96:27:dd:1d:48:ac:8b:22:91:e2:fb:
5c:a9:5e:92:4f:28:76:56:03:b0:f9:f8:b0:bd:07:
0b:1b:5c:8d:8c:81:19:00:11:c0:53:e0:e3:bf:be:
48:19:ff:d6:78:f8:e5:98:b4:be:6f:c7:d2:05:c0:
5f:b9:e6:39:1c:7c:d4:1f:fd:7f:81:47:3c:3f:d4:
10:9d:a8:f1:d7:53:55:89:13:b0:b9:52:70:de:f9:
ae:5a:68:9e:57:3c:f5:50:09:ba:3b:2d:61:dd:d2:
45:02:5f:47:a1:20:cb:42:8b:1c:5d:8d:a4:d3:69:
fa:2c:72:d8:0c:89:bd:0e:27:c1:17:0c:c1:64:51:
59:10:23:d1:32:a7:d8:56:ed:db:60:71:fb:2d:06:
f7:e8:d4:78:8f:c6:50:db:c8:c6:13:f6:dd:ea:15:
56:5c:77:30:cd:7e:b8:3e:46:56:93:9d:8f:ac:10:
83:b9:a2:05:47:0b:ec:c2:65:81:f4:d3:0e:bb:c8:
3a:c9:0c:c9:22:67:52:22:52:1a:d7:90:ce:33:b7:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:23:1A:12:57:60:70:E2:97:33:6C:4A:46:C8:02:56:62:E1:34
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:7c:72:8c:9b:bc:a9:12:87:45:b7:20:d4:20:9b:ea:8e:
77:ce:c1:62:87:5e:32:bb:76:dc:6f:67:1c:6a:5e:92:71:4c:
08:7c:3e:76:f5:84:29:3e:36:8c:82:bf:76:d7:c1:18:d1:52:
0b:6d:90:2c:a1:e2:7e:5b:55:cd:bf:bf:cb:b4:b6:97:44:82:
7d:55:6f:67:ba:7c:79:d7:c5:40:e6:93:08:09:a4:1e:fb:d5:
d2:30:5e:52:f0:26:28:6d:0e:5d:14:6a:16:07:0a:a0:61:68:
7c:04:ec:e8:d5:b0:49:15:e4:28:c1:66:52:e6:b9:d2:a9:f9:
59:84:e2:75:30:49:09:10:74:f6:f2:a7:31:23:cf:2d:2a:3b:
27:60:d1:06:63:4b:e5:97:53:90:d5:f7:d7:45:b6:a9:cf:6a:
81:99:55:38:fb:a3:c6:41:4a:34:72:6b:bd:84:7d:94:c5:52:
d0:25:5a:a1:ca:05:2b:25:d6:48:18:66:96:44:56:56:0d:da:
59:5b:21:66:12:f5:2f:b5:5a:56:0a:23:7e:d8:a6:c4:64:ca:
0a:00:23:1b:0a:96:43:f4:70:4b:13:20:11:48:e4:18:83:69:
f4:3d:32:41:c7:aa:e2:58:2c:99:e7:63:0a:7e:7c:a6:73:a9:
68:01:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:13:58 2026 by rpki-client