Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: rk2loLp04PrJ4J7v2PXF/nRS88E/hpDogoux+WYTd/4=
Subject key identifier: 9A:2C:AD:1C:6E:5D:7A:A3:AA:A7:B8:05:82:E3:B2:2D:E6:E9:B5:CB
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019D1120D83BBB84E8B9E946EED301F89BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1899
Signing time: Sat 21 Mar 2026 16:00:58 +0000
Manifest this update: Sat 21 Mar 2026 16:00:58 +0000
Manifest next update: Sun 22 Mar 2026 16:00:58 +0000
Files and hashes: 1: 1-wPMlW3QZMEwXIavR2Z5jC4eg3k.roa (hash: NkpNm8Hi0eM4z4zMLpTQA7y21YX/UXYTQTZzRYCggcI=)
2: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: A8GloZjW17h7WZmYtw+2uOCnF4iKusQZa8o1wmAFNM4=)
3: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
4: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (hash: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M=)
5: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:20:d8:3b:bb:84:e8:b9:e9:46:ee:d3:01:f8:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Mar 21 16:00:58 2026 GMT
Not After : Mar 22 16:00:58 2026 GMT
Subject: CN=9a2cad1c6e5d7aa3aaa7b80582e3b22de6e9b5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:e5:f2:07:70:f0:41:7b:1b:94:d8:b3:0b:
d2:2f:cc:5c:e9:c6:bc:f1:65:4c:db:b6:cf:90:3f:
71:0a:d1:bc:22:72:59:da:03:68:17:74:22:d8:a3:
db:c8:6c:04:1a:57:b2:7b:3e:25:80:6c:fc:53:92:
2f:4d:5f:8b:5d:88:25:e9:ab:e9:e0:0c:ae:67:85:
3d:d2:7d:df:1c:56:92:58:6b:63:bd:18:f3:f3:1d:
36:22:56:2c:14:dd:78:50:46:53:fb:aa:dc:31:f1:
84:a0:e3:cb:01:a3:a4:3d:0c:c8:fa:cb:a4:f1:96:
ac:84:6f:40:38:27:36:43:ae:35:a7:10:6c:bd:7f:
93:0b:24:aa:b0:b2:fb:64:25:2a:2f:20:d9:dd:d9:
a8:01:f3:2b:f9:0b:44:b7:6b:ec:dc:39:d3:32:4b:
e8:5d:7e:79:de:25:42:58:0b:cc:b7:b3:70:44:fc:
ec:93:81:f9:18:d1:eb:7f:8d:c4:fc:a0:45:49:78:
7b:89:a6:d2:be:92:3e:cf:52:95:b3:82:9f:86:07:
cd:c4:d4:62:a7:d0:24:c3:4d:40:32:06:88:d9:43:
a9:c3:f1:1b:33:d2:0c:ae:6e:49:c8:91:52:c5:48:
53:5f:78:96:d8:ae:2f:ad:93:c9:a9:fd:70:66:31:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:AD:1C:6E:5D:7A:A3:AA:A7:B8:05:82:E3:B2:2D:E6:E9:B5:CB
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:2b:3a:19:ab:63:27:f4:b4:3f:4e:f3:9b:65:32:a5:b5:
93:ba:4a:c2:d0:b8:23:14:03:ab:66:e1:35:3b:b4:a4:26:c1:
8c:db:bd:0a:43:43:33:5d:25:0d:f3:02:b3:1a:6e:91:7e:28:
44:0e:77:c6:24:43:69:e2:21:04:e1:e6:49:74:27:48:c9:28:
5e:a3:95:61:42:59:cf:74:6e:49:d5:92:a0:73:69:2d:30:b5:
d4:f6:cd:c9:0b:07:63:0a:c3:ef:cd:0a:06:21:d3:e7:97:77:
c2:dc:75:b9:55:33:f6:2f:73:7d:69:a7:cb:1f:de:cf:f6:b2:
5c:89:7f:33:78:b5:a2:86:2a:53:72:2f:60:31:fe:2f:85:39:
b4:f9:4c:8c:b7:ac:28:b2:8c:ac:b2:12:bf:07:be:b3:94:b8:
2e:ac:2d:5d:f3:a1:f4:33:91:6e:08:5a:39:19:cb:f4:2e:86:
7c:ec:a6:4c:a2:bc:80:0d:18:93:d8:7e:e2:ca:55:35:0d:9e:
9e:d3:09:7c:e2:ef:44:cf:e0:80:3a:f8:8e:26:5c:80:1c:a4:
93:5b:aa:8c:26:3f:7b:f8:95:49:a0:f5:54:11:1b:45:77:5d:
4f:15:c9:11:eb:b5:2c:91:ac:55:55:8c:07:0d:2c:e2:44:39:
ca:19:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:54:18 2026 by rpki-client