Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: R98Hqp+85/X0Y3AU+q94KoPLMxyEGEv/MzGUxIbRBlo=
Subject key identifier: C5:08:C3:CF:28:D1:3C:58:EA:0E:54:F4:9D:6C:EA:80:08:6F:71:34
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019E31856DCE77950A2EF85F07FC99CE6ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0E70
Signing time: Sat 16 May 2026 16:01:28 +0000
Manifest this update: Sat 16 May 2026 16:01:28 +0000
Manifest next update: Sun 17 May 2026 16:01:28 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: 7AxRr88mk+36WGhvIlEnUPnUK9+VF/S5Q97xBGvuoY4=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:6d:ce:77:95:0a:2e:f8:5f:07:fc:99:ce:6e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: May 16 16:01:28 2026 GMT
Not After : May 17 16:01:28 2026 GMT
Subject: CN=c508c3cf28d13c58ea0e54f49d6cea80086f7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:6d:bf:8e:02:da:54:d7:4b:57:2c:3a:fa:
5a:15:28:88:2f:a1:b0:5a:cd:da:88:fa:6c:96:d6:
f9:9c:50:89:d2:29:4a:79:fe:12:f4:f4:aa:79:36:
69:62:fa:36:96:d5:38:fc:b2:59:91:ba:76:72:c6:
a3:b6:37:fb:66:a1:1e:8c:68:09:87:e9:b9:f0:4e:
5a:41:60:4c:61:fc:9f:4c:5d:d9:48:19:e8:1d:6f:
9c:b9:34:77:b2:9e:4c:3b:3f:e6:58:06:16:f4:97:
d6:55:c6:17:d8:6b:19:04:3b:7e:15:97:30:a9:7b:
55:31:f0:b1:57:a2:28:58:b6:d5:80:aa:a7:41:f5:
b7:03:e0:5b:42:9d:c6:5f:b3:bc:fe:44:03:5e:8e:
cf:92:7a:2e:b9:7b:c6:b1:52:0e:5c:30:5a:23:5a:
14:58:42:1b:29:11:47:62:58:b4:dc:17:41:1a:f4:
4f:98:8b:da:f2:55:26:96:af:e1:2f:0d:db:dd:5d:
8d:a7:09:d6:d6:f1:68:71:ef:73:c4:af:d4:af:7f:
36:3a:72:7d:c5:b8:15:1b:ae:87:85:0f:82:d2:d7:
c7:47:9b:1d:a6:c1:77:e7:03:e8:c0:db:06:2a:be:
10:c2:5f:76:5a:a3:e1:1e:ca:a8:20:cc:49:69:b1:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:C3:CF:28:D1:3C:58:EA:0E:54:F4:9D:6C:EA:80:08:6F:71:34
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:40:cb:e4:eb:b6:3b:7b:c2:14:4a:b0:2c:9f:dc:a3:0a:39:
ef:1d:13:38:de:53:14:40:61:2b:b0:2d:b7:2f:9b:85:92:2b:
39:80:02:25:ee:8a:49:4b:e2:62:fe:2c:81:81:6b:b4:6e:eb:
98:0b:3b:5e:c5:2e:eb:5f:c9:54:64:55:f0:a9:52:75:b7:7e:
66:af:c6:d9:43:dc:f6:7c:b6:2d:fc:f5:ee:50:ee:74:03:79:
6a:40:44:94:9e:6d:97:7c:04:1f:26:2d:fe:f4:dc:d0:07:90:
ad:c3:77:c5:ff:de:b0:f6:8d:a1:ce:04:3c:43:1f:e4:b0:c5:
da:60:91:63:62:24:82:e4:d5:c9:54:d8:e1:1f:72:c1:49:a2:
96:ed:76:4f:50:bd:d3:cf:ca:50:39:09:87:e5:8e:c2:e5:1c:
b0:47:b4:e6:0f:b7:c0:59:fa:1f:e9:7f:3c:46:e1:66:2b:87:
ff:4b:6b:1e:2c:52:8b:5d:39:58:3d:22:e2:c8:ca:a9:05:58:
2c:39:01:03:c3:9d:74:58:ea:b9:5e:18:d0:d8:17:58:ef:ca:
21:ab:b2:7d:78:b6:72:65:0a:8c:47:ed:08:7f:9f:09:1c:7c:
03:a3:9c:97:ce:eb:76:b6:f9:3d:03:7a:35:5b:a8:5f:08:67:
56:0b:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:23 2026 by rpki-client