Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: xc9J9UXCeExlhFmSMqMZY3N7jnfL5kBWPnaAkB0C5Ww=
Subject key identifier: F1:1F:7C:D3:6E:96:50:70:42:67:BD:45:4B:54:A9:06:78:83:3F:B9
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 019DB358CB46CF6347E6906A7F5840ED2E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 17D5
Signing time: Wed 22 Apr 2026 04:00:33 +0000
Manifest this update: Wed 22 Apr 2026 04:00:33 +0000
Manifest next update: Thu 23 Apr 2026 04:00:33 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: oP1eM7wvSP1D5IuQUBTDXKostKVXspxSuPoKVPOkZ8I=)
2: 6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa (hash: qGVajF5H+47Haw7fSlS2S4yS6iBrCwjpFhlgTElC1Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:58:cb:46:cf:63:47:e6:90:6a:7f:58:40:ed:2e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Apr 22 04:00:33 2026 GMT
Not After : Apr 23 04:00:33 2026 GMT
Subject: CN=f11f7cd36e9650704267bd454b54a90678833fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:b0:65:e5:1d:dd:fe:77:0e:ee:50:b6:5f:
71:6b:c0:28:fc:23:ad:8d:77:75:48:fd:b0:28:42:
be:ae:a2:d3:c1:6e:02:be:16:31:6e:2c:8d:31:e5:
9f:4a:84:31:55:b2:97:43:d3:a9:29:ad:3e:b5:19:
7c:01:61:ea:e2:7c:d0:8a:73:7c:75:bd:ed:de:7d:
7e:ea:23:8e:44:9e:78:6e:c7:25:85:29:b4:b5:7a:
37:24:59:5b:3c:30:6a:f6:5f:12:64:a1:5a:8f:0f:
6f:f4:0d:6d:ef:7e:37:63:5d:e6:d7:a3:c4:86:4f:
ee:ab:42:73:31:f3:8a:20:f3:6a:b6:b8:37:9b:7c:
e1:8a:8d:3e:1a:68:03:1e:06:84:09:89:23:3e:99:
24:03:83:44:bc:52:9a:ba:fd:6e:c6:c4:31:d6:00:
40:a4:4a:60:84:b0:1e:c5:00:9b:0a:42:57:bd:b7:
53:72:33:6c:0c:81:da:03:d3:ea:9c:10:89:5f:5e:
95:ba:3b:a5:a5:31:29:96:47:ad:73:8f:d1:7f:a8:
6d:b8:1c:0f:88:41:5b:de:6e:5c:13:c0:51:f3:25:
27:70:55:0d:10:b1:41:cb:e3:f8:c7:a5:7a:2c:2a:
89:21:05:40:db:d4:f9:fe:bb:4c:aa:5b:25:1f:dd:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:7C:D3:6E:96:50:70:42:67:BD:45:4B:54:A9:06:78:83:3F:B9
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:13:28:c1:c0:02:66:94:84:51:e2:f9:36:e5:61:c7:50:61:
1e:12:03:c4:72:d4:4c:bc:f0:f6:57:d8:61:92:f9:0f:97:3b:
d0:7d:d9:48:ba:61:9b:a1:ad:31:3e:59:58:9e:7a:ec:03:54:
ba:38:8f:62:66:bc:c6:98:4d:07:12:cc:00:a4:b3:e8:cc:59:
7a:74:dc:a3:d5:fc:69:fa:f6:1c:b8:55:2f:f3:72:ca:0c:dc:
16:61:29:e2:1c:ba:aa:b7:13:5a:0f:4e:55:77:84:29:f5:11:
fc:ff:f2:9a:de:af:1b:f6:f5:42:c8:cb:bc:9e:68:72:c0:17:
6f:41:9c:2a:1a:16:d1:4e:ec:69:9e:84:4f:45:2e:13:a5:35:
c8:d7:97:79:c3:6f:3c:60:70:44:db:8c:ba:a9:43:f2:d3:1d:
58:8f:b6:3c:f1:d2:19:c4:79:50:15:be:f9:eb:5b:71:49:2c:
9f:c5:d9:ea:1d:0c:70:c0:91:58:37:b7:10:47:b9:d2:f8:14:
5e:68:86:a6:aa:19:ab:f0:de:42:71:59:d1:b4:c2:b9:39:a0:
78:40:7e:ae:71:e3:c9:56:71:aa:00:e3:16:36:3d:45:7f:0a:
d9:f0:da:99:42:20:3e:47:86:7c:2f:49:06:15:f0:1c:cf:af:
bb:02:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:10:50 2026 by rpki-client