Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier: yHDRrOzoY7imNl1IFkvSauD45uTYBQ2g9Ib7uyFxgX0=
Subject key identifier: B2:E7:AD:1A:FA:E6:96:65:0F:1E:DC:CB:AC:E7:4E:78:25:4E:F7:C8
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer: /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial: 019D394196DBC1961CF6C706385A880BBE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:01:32 +0000
Manifest this update: Sun 29 Mar 2026 11:01:32 +0000
Manifest next update: Mon 30 Mar 2026 11:01:32 +0000
Files and hashes: 1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: B5GR6fQ9QNWsFf+o3F6xw/uYA3kFMRf73TTBodG6tMc=)
2: L1cSbjjQGctZbYceguMaYMQAPvU.roa (hash: peUd7meGLOIIhj/OSy9KzfxP7xwU4LdriyeCXz9sbec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:96:db:c1:96:1c:f6:c7:06:38:5a:88:0b:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Validity
Not Before: Mar 29 11:01:32 2026 GMT
Not After : Mar 30 11:01:32 2026 GMT
Subject: CN=b2e7ad1afae696650f1edccbace74e78254ef7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:05:af:cc:87:43:d3:bc:1e:94:4f:c4:db:
76:3e:b6:0b:09:10:89:3e:43:2f:85:c4:8e:cb:a1:
40:fb:85:60:07:04:e4:48:d7:74:46:48:bc:8c:2d:
fb:fb:cb:45:7f:ec:cf:ab:6e:83:57:58:5d:11:26:
e1:3d:74:7e:2f:a2:1f:dc:08:01:cf:a1:46:c5:2f:
2f:ca:ef:26:be:b0:be:c4:56:4a:7d:91:fc:3f:c7:
ca:9d:f5:4a:06:2a:99:ef:fb:b9:cc:c8:b6:68:6f:
28:0c:39:e5:45:10:17:5d:30:1e:79:98:4e:bb:88:
31:d9:0b:98:17:87:c0:96:70:f8:7d:d1:51:37:1e:
15:80:4b:8f:2f:53:9b:5f:7f:7a:68:42:82:35:d6:
e9:e2:a0:16:d4:f6:0b:32:e3:3f:ba:b1:53:26:75:
59:1a:c6:1e:f0:49:18:a3:b1:29:e5:96:52:e5:75:
6d:4b:ea:6a:2e:83:b6:be:46:65:84:53:fe:72:98:
31:70:b7:bf:05:33:a6:c5:3a:7e:d5:dd:8f:a3:b3:
35:c0:c7:ad:43:78:ed:5c:09:af:41:e6:b3:68:55:
3d:30:d7:4a:9c:8c:6d:02:74:7f:d9:89:6c:58:4a:
07:cf:0e:8e:aa:3a:ce:3e:8b:95:9c:03:60:a1:3e:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:AD:1A:FA:E6:96:65:0F:1E:DC:CB:AC:E7:4E:78:25:4E:F7:C8
X509v3 Authority Key Identifier:
keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:67:24:5e:09:c9:a0:c9:3d:f9:62:2e:9e:5a:f4:d5:76:1a:
c2:b3:13:65:09:84:5c:7e:b9:dc:d0:94:1c:36:63:76:88:89:
b1:ff:76:0c:81:7d:d0:fb:59:e1:2a:98:50:81:71:5b:89:ed:
b4:6a:fb:00:d0:69:34:b1:3c:cf:00:53:38:f3:d4:22:bd:ff:
c4:33:19:dd:e8:ac:54:ab:d1:9c:c4:72:31:76:fb:c0:0f:c8:
d9:6c:bd:33:b9:5e:9d:19:47:3d:f3:ee:19:c3:a5:bf:33:72:
bf:a4:de:18:76:ce:5d:4f:9f:45:aa:12:77:bf:41:49:d7:df:
7a:7e:ae:54:98:e4:74:ec:e9:41:07:0f:30:f5:3c:78:68:4c:
f8:80:23:6b:2b:c6:cf:b8:4b:1f:a0:55:02:b4:e8:d0:92:1d:
08:af:77:4b:d9:d0:08:c7:3b:9f:16:e4:46:32:0a:7d:c8:48:
1c:ae:d7:83:ce:0f:32:a8:92:82:fd:50:5d:31:e3:4e:86:ad:
9e:f2:09:14:cc:72:a3:79:75:76:68:5c:13:02:07:bb:b7:67:
bb:56:41:ae:45:dd:54:ae:6f:c1:ce:80:e6:c7:58:4e:28:52:
cc:c4:89:e0:64:35:fa:ca:fe:00:f1:eb:44:76:a4:4e:f9:16:
e5:dc:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:59 2026 by rpki-client