Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File: 6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier: P38svfqDJA/ifjVKIt2jpA651pXvCGWR50fjK7cBcuA=
Subject key identifier: 4F:17:0E:29:89:12:25:93:29:4B:7B:C3:D3:0E:8F:B1:8E:3C:69:33
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer: /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial: 019D37C0997A28E2122FAF67B5E14EDDB1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number: 0438
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: 2jS-Ar5-mvzTQqNg923VOZqFfzM.roa (hash: q9I2rePyRMxcY/rB8ipLm/a3s22Y2jRaO567Mt+E7dU=)
2: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: G894ymjqw73NYIMX+VawdQj21kXyadqmROLH6ENWmqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:99:7a:28:e2:12:2f:af:67:b5:e1:4e:dd:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=4f170e2989122593294b7bc3d30e8fb18e3c6933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:11:17:c5:83:72:eb:53:cf:21:dc:72:2c:
c3:36:9c:03:8f:0e:61:da:f3:4a:53:71:c9:10:e6:
a2:77:09:8a:5d:ab:7e:80:9d:16:44:8f:ec:f9:6a:
48:0a:f1:fd:07:4d:11:37:e7:d5:5e:9f:ad:3d:08:
0a:6b:9a:fb:8e:2c:26:d8:7c:a8:a4:be:af:78:9e:
9d:e9:c2:b6:27:d5:8a:0d:5b:16:fd:4f:0e:3c:cb:
32:43:d1:86:4d:2d:7e:e7:62:1e:3c:54:84:a7:76:
76:7d:40:f4:11:9b:4a:84:2a:63:b7:96:18:d9:95:
25:76:56:0b:22:f5:8e:9b:83:44:a6:8c:e7:2b:7e:
ca:2c:71:d3:49:09:d9:55:b8:34:4b:3d:aa:ca:c7:
94:ac:2d:4e:b0:84:61:54:9c:04:5e:da:4e:7e:f3:
33:98:63:b2:b5:4f:00:15:32:4a:7f:cf:ed:ce:61:
26:83:aa:41:2e:98:29:48:fe:f2:95:ca:98:95:07:
e2:0c:55:9d:ed:3a:d4:4a:08:15:15:15:fb:91:20:
be:06:fa:5e:24:0f:cc:52:5b:fa:70:7b:e2:e2:90:
7f:05:84:17:3f:c1:f7:6b:9e:de:24:d2:e5:a7:51:
39:c5:d9:b0:98:cf:bf:28:e6:a4:cc:34:70:61:49:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:0E:29:89:12:25:93:29:4B:7B:C3:D3:0E:8F:B1:8E:3C:69:33
X509v3 Authority Key Identifier:
keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b3:2b:d5:d0:79:38:2d:36:7b:a8:ed:a3:4a:ef:04:4d:dc:
e5:aa:4c:8b:56:10:5f:9f:61:c9:1c:a9:be:58:5a:01:f2:c2:
67:e1:4e:78:00:81:b0:49:59:d8:02:66:7d:4f:87:1f:1b:19:
d5:a7:a3:77:b1:63:7b:88:0f:b4:bf:a7:b5:02:a8:fd:1a:21:
44:6f:d8:b8:16:65:b5:88:8a:9f:dd:76:a0:9b:fd:72:1c:0c:
96:8c:2f:b2:03:88:ae:f6:0c:fc:20:20:32:f8:42:3a:f0:29:
8c:56:fb:7c:9e:bc:a5:0f:cb:8d:4a:7e:44:88:be:d1:a1:08:
1b:a2:f0:a8:bc:13:e9:4e:f0:15:e3:b2:1a:9e:a6:e2:68:d6:
96:1c:04:0d:53:ac:f3:e6:cf:b9:a7:db:62:66:07:9f:fb:8d:
16:86:8f:a7:87:91:15:01:e5:df:fe:a1:cd:04:28:db:1f:4f:
ee:16:e0:9e:ad:42:5c:f6:91:c5:15:32:0b:53:98:55:b0:34:
e6:80:71:02:52:dd:0a:ef:7f:78:de:f3:51:a4:73:21:db:59:
e7:93:9a:e6:d7:2f:9f:c7:f8:bb:4b:4d:b9:0c:17:fa:9f:f1:
46:6f:c8:6d:d6:03:14:b7:5d:c0:4d:d4:f4:cb:ed:28:83:11:
1a:de:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:38 2026 by rpki-client