Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: DFvjcF2DXSrgYy5+4LvAMiwA1Em7mQskmGVfEhwVxes=
Subject key identifier: 8B:C7:B2:49:99:96:6A:1A:5B:56:99:26:12:48:12:46:35:28:BA:3C
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019DA89E601387EC2BD307883A814F5AC191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 06BC
Signing time: Mon 20 Apr 2026 02:00:44 +0000
Manifest this update: Mon 20 Apr 2026 02:00:44 +0000
Manifest next update: Tue 21 Apr 2026 02:00:44 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: 2gTRbJd04lIVM0gf+fTydOKtQLwGlpC7P1zQoobyTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:60:13:87:ec:2b:d3:07:88:3a:81:4f:5a:c1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Apr 20 02:00:44 2026 GMT
Not After : Apr 21 02:00:44 2026 GMT
Subject: CN=8bc7b24999966a1a5b569926124812463528ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:4b:06:ac:11:7f:e8:22:9d:fa:b8:0e:12:
fe:8d:2e:b9:74:a2:16:e6:cc:6b:68:cc:9b:62:3f:
5c:07:a7:0a:29:32:69:de:0a:e7:b2:5c:0d:c3:26:
ec:ee:14:20:f6:e9:04:f4:4e:15:e7:3d:4c:bd:24:
10:37:8d:f2:b5:4b:9c:32:db:45:96:bb:a3:44:e5:
04:24:ae:58:43:a4:5c:b2:57:6a:5c:e0:01:ff:27:
f1:9a:ff:7b:22:3b:7a:ff:42:73:14:8b:00:e5:33:
44:27:a0:e8:5d:d4:8d:9a:cc:91:ae:ab:3e:8a:bf:
21:47:b8:22:cc:13:62:13:7c:06:b1:27:0d:38:28:
18:62:52:7d:ec:35:35:99:a0:17:02:86:b6:77:f0:
e2:80:c8:ec:03:b3:96:99:c6:15:0d:58:57:3a:a2:
39:bb:cb:e6:e9:da:04:c3:df:a8:52:29:87:99:29:
13:d1:1c:16:6b:e6:73:7c:3f:5d:10:95:5a:1c:06:
36:25:a6:83:d4:b1:c3:d0:7f:fa:42:34:1c:f3:43:
bc:32:cb:3f:28:d4:b2:a2:eb:e7:0d:ab:39:6b:70:
32:0a:72:ed:67:33:e5:2e:83:e2:a1:20:3d:2d:6c:
2e:ae:1c:bf:81:c9:0b:48:f7:aa:02:d7:bc:61:f3:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:B2:49:99:96:6A:1A:5B:56:99:26:12:48:12:46:35:28:BA:3C
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:d6:ac:7e:ff:aa:c4:4c:33:c0:5f:6a:1c:45:90:bd:31:
fd:8c:44:ee:22:86:09:8d:0d:9e:fe:73:30:b1:e6:53:07:20:
aa:92:8d:88:1b:99:e8:79:67:c6:a3:b0:fb:e1:af:3b:db:67:
b4:54:aa:80:8d:e9:d2:30:30:d4:a3:80:7f:7d:23:16:e0:3b:
c8:2f:20:98:08:f5:10:13:4f:d7:59:57:d5:03:7a:48:b5:2b:
69:25:59:97:6d:dd:be:fd:85:08:48:b5:e8:7f:58:a7:80:c4:
5d:a0:a6:d5:1d:f6:3e:ef:01:0e:d4:f9:0c:f9:29:d9:02:67:
40:c5:24:7d:b4:36:5d:13:6b:eb:8d:27:45:26:be:a2:ed:24:
6b:98:52:e0:81:8f:05:7d:74:ca:32:6e:45:ec:9b:cc:ee:7d:
26:c1:d1:3b:b9:6a:07:15:f7:46:29:87:53:fa:d3:e6:6a:79:
72:9c:a7:82:cd:d4:0f:58:15:d8:74:ca:ff:2d:33:00:c2:40:
78:25:62:b2:de:1b:fa:b9:46:0a:f9:2f:c4:80:5e:1a:24:1e:
de:7c:26:5f:e4:11:dc:85:5a:18:32:a2:cd:a9:52:19:5e:c7:
8f:db:c0:9c:3e:61:86:ef:63:b0:7c:b7:f5:56:1e:84:7f:fa:
84:98:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:35:23 2026 by rpki-client