Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File: MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier: LSDf/eW5Tfw8FHbYe33Hh8PdJ/XwcyG0qoZqVJc+Bh4=
Subject key identifier: 0E:E6:6A:D1:9F:1C:A2:53:3B:23:14:06:62:00:44:24:21:9C:0D:DA
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer: /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial: 019DCF74CFBEAA06A74501924D58D2D6DD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number: 0896
Signing time: Mon 27 Apr 2026 15:00:32 +0000
Manifest this update: Mon 27 Apr 2026 15:00:32 +0000
Manifest next update: Tue 28 Apr 2026 15:00:32 +0000
Files and hashes: 1: FfbuL1NsPqz_oOI2YFWe_jidZWQ.roa (hash: xTrWW0Q3nTMT/LdtoIpu3oN3dGDnM7py4l1pD0p9U8w=)
2: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: bIRcODf7xKoaw6ZBXZHiPBRJCdwZv5no6Jy8vsa1/Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:cf:be:aa:06:a7:45:01:92:4d:58:d2:d6:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Validity
Not Before: Apr 27 15:00:32 2026 GMT
Not After : Apr 28 15:00:32 2026 GMT
Subject: CN=0ee66ad19f1ca2533b23140662004424219c0dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:c7:f6:3c:b4:96:4c:4d:fd:a7:df:dc:b8:
21:1c:64:23:c0:2e:4a:e3:3d:c2:7d:e1:a3:95:0a:
af:c6:00:ec:ec:7d:d6:01:85:7c:05:9b:41:0a:05:
70:e8:75:b5:57:19:2c:a8:c3:da:57:06:41:f5:c5:
bf:3b:58:7f:18:b1:97:83:f8:69:f4:97:02:17:51:
24:c9:80:48:ce:9a:cd:39:0a:ec:ee:49:43:8d:61:
5b:92:99:8e:72:d4:b2:52:97:31:ea:7a:9d:45:3a:
c6:8e:24:b3:c3:4e:d3:d2:64:97:d1:18:90:f2:f7:
94:f3:b8:05:a0:f6:4a:65:f8:8a:2d:c5:d2:25:c9:
3a:3a:40:5d:8b:10:5d:27:ab:3a:67:1c:1b:c8:60:
58:16:2e:dc:b5:0f:c2:a1:52:4a:40:86:00:d4:0c:
b3:9a:18:32:bc:21:2e:a2:4a:8b:7a:07:51:53:51:
24:cc:df:3c:bb:4c:ca:12:ce:94:26:f3:e8:71:48:
a2:e1:95:8a:26:88:26:1c:31:62:7f:74:ee:6d:a0:
e0:02:98:70:b5:df:8f:9f:d3:6d:98:7b:0d:e6:d7:
13:a0:dc:89:2a:a7:eb:d0:de:e4:ce:b4:ca:fd:30:
be:4f:b2:55:03:fd:a6:3a:db:f0:07:a3:4b:2e:ee:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:6A:D1:9F:1C:A2:53:3B:23:14:06:62:00:44:24:21:9C:0D:DA
X509v3 Authority Key Identifier:
keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9f:3e:1e:8e:93:3e:b6:05:f6:d0:92:d5:d0:d1:4d:02:28:
8d:c4:d5:2c:ad:17:f2:87:e2:9e:64:2e:31:05:5c:6a:82:4c:
d4:de:0c:2c:91:5a:ba:1b:40:f4:a8:e5:e3:f6:b2:93:47:8b:
01:95:9e:4f:b3:77:e4:70:13:9d:72:10:ff:93:f4:22:2e:9f:
81:7e:2f:04:00:f9:e4:f1:2f:4b:a9:52:c9:71:81:eb:62:c7:
3c:0c:70:23:ab:25:cd:c2:d2:39:d5:e3:df:35:9c:f2:2c:a6:
16:8a:59:32:78:11:5f:16:72:df:8e:b4:dd:88:fc:7e:f6:25:
30:54:1f:21:02:3a:72:3f:2d:9c:fd:3c:05:55:da:da:e1:19:
c2:6e:70:8f:bd:6f:5b:b7:b2:e0:c2:7d:fe:78:54:82:76:0b:
85:90:60:bd:e1:7b:87:a9:50:5d:23:76:68:0a:fd:d1:51:b8:
56:8a:f2:6f:38:e7:cb:f2:0a:0a:e6:bd:42:c3:d5:9e:0d:53:
f9:a1:0c:b5:9d:76:38:e5:ca:aa:d2:6b:1d:41:a2:97:6d:ff:
4b:96:ee:60:b6:b2:82:93:3f:8c:43:03:8c:e3:de:6f:e3:a0:
8d:a6:3c:53:67:03:35:50:7d:09:68:19:ad:a1:62:24:ca:d9:
d0:f7:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:07 2026 by rpki-client