Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: KrFZC576rHHFDQ+uZzaor+G5yBan2qS19Rp4FyB221E=
Subject key identifier: 59:6C:90:2D:8E:62:DE:99:E1:C9:A7:C5:E1:54:3C:17:75:24:80:06
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019DCDBD4D41E28A5C2D7F63A217380AA10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 0347
Signing time: Mon 27 Apr 2026 07:00:28 +0000
Manifest this update: Mon 27 Apr 2026 07:00:28 +0000
Manifest next update: Tue 28 Apr 2026 07:00:28 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: fqMmFNTa6TITk1TZCSVfhFuLp3XFGl6E72SxF1/0NLc=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:4d:41:e2:8a:5c:2d:7f:63:a2:17:38:0a:a1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Apr 27 07:00:28 2026 GMT
Not After : Apr 28 07:00:28 2026 GMT
Subject: CN=596c902d8e62de99e1c9a7c5e1543c1775248006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:90:b3:4c:b4:90:a2:99:b4:06:c2:c7:82:
e8:4c:8c:55:8c:ad:a6:56:7c:1f:56:3c:b9:5f:3d:
f6:4c:f4:0d:c4:2f:db:51:ac:5b:2e:5c:24:97:ad:
59:ae:cb:b7:bf:a7:b8:4b:c7:a4:51:fd:d3:74:ea:
46:05:3d:02:b5:d7:ed:fb:8e:d1:78:29:fb:bb:c8:
05:32:4f:72:a2:18:f6:82:a9:d9:a3:32:fb:41:40:
04:fe:fc:90:29:0e:d8:39:84:3b:1d:ca:b5:10:a9:
db:22:08:dc:51:b4:0f:d2:ff:b8:67:eb:cd:41:39:
10:89:be:be:34:d3:e2:11:7f:ef:a5:e4:89:0e:1f:
a0:73:94:b2:88:e4:55:f6:0c:9c:80:fb:52:57:dc:
2b:5f:43:c8:30:45:0d:b7:e1:c5:6b:03:30:aa:7a:
dd:60:e1:8a:65:10:85:d3:ee:55:e2:55:a6:ba:5a:
06:24:98:ac:6e:d4:cb:31:25:e7:95:b5:09:ef:05:
f7:f6:48:87:12:5b:0e:ea:ed:48:73:41:62:38:eb:
58:15:9b:f7:7e:63:9c:92:25:30:42:55:63:79:69:
09:0b:ad:2b:14:bc:35:89:24:62:66:68:77:09:9a:
76:6a:3c:1d:a8:ef:86:e8:6d:8f:95:ce:86:6e:5e:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:90:2D:8E:62:DE:99:E1:C9:A7:C5:E1:54:3C:17:75:24:80:06
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ce:da:32:7c:fd:ad:c4:b0:76:38:34:f5:ac:4f:f1:f2:c4:
4c:6b:86:86:f8:85:0b:0d:8d:9d:d6:ab:2e:3e:91:8d:94:a2:
84:cf:b9:95:bb:c9:2f:57:e4:8f:09:1d:0d:dc:f8:9f:10:28:
ff:35:e5:a4:87:4d:3f:0f:7a:2c:64:39:6f:18:3e:eb:92:0d:
92:9a:28:34:ff:60:11:b5:70:c4:ea:7a:31:59:fa:2f:ce:b0:
50:f1:02:d1:14:54:37:05:99:86:53:d4:9f:9e:d9:f4:44:9c:
09:90:b9:ef:54:a3:26:e1:46:94:9d:05:57:42:99:7f:bf:61:
4a:61:fd:2d:48:12:c2:1c:91:25:d1:a3:7a:9c:ab:f3:27:98:
f6:35:8e:41:ef:f8:28:05:e1:13:68:4e:ef:b5:d5:da:15:02:
07:dd:3f:bd:17:8f:53:42:4a:37:1a:ed:8b:f5:e3:d1:bf:02:
c7:c4:60:19:06:0c:dd:ab:7d:a4:75:cb:d7:08:cc:89:af:97:
53:11:91:f4:ab:a9:dc:33:aa:06:9a:b0:55:66:59:25:85:6c:
aa:4c:a6:2f:14:cf:cf:b8:83:d8:96:ab:f2:37:c4:2b:c6:ac:
69:64:2d:9d:6a:01:37:e3:bf:e4:9c:db:95:ed:34:cf:75:de:
df:29:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:50 2026 by rpki-client