Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File: 6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier: H2I9rUL0syMdPuT3aOJFQIpvbCH1oTejMGNrQS1+MXQ=
Subject key identifier: 7E:22:3B:92:F3:E5:0A:6F:77:F6:78:2E:D0:EC:72:E2:5B:35:EF:E4
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial: 019D37C0E3CDE2122FA41134F9E8161BB733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: mOHj13vVpOAWdQE5x58BfggLzCQq3vPJF+cgYhw2TVk=)
2: m2Z0wBEzN8fscwTDloF7hDYFp-U.roa (hash: RR+TM2qfe7c3hOxq3hLFeEmbYbML3r9sN4F/EITsexg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e3:cd:e2:12:2f:a4:11:34:f9:e8:16:1b:b7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=7e223b92f3e50a6f77f6782ed0ec72e25b35efe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:ee:b3:35:5b:cc:cc:22:29:8b:5e:15:e1:
17:ab:89:10:76:77:cf:84:00:5d:42:36:67:df:09:
80:00:7a:cc:dd:2a:96:78:cf:ce:8c:79:19:cb:b9:
b2:fd:22:cb:9a:30:e8:bd:62:8d:16:81:f2:cc:fb:
36:99:8b:3c:3c:0b:63:9a:52:86:9d:bd:ad:64:db:
01:09:14:56:0b:ee:ac:1e:a6:14:78:23:7d:a2:69:
89:bd:42:6b:48:16:df:51:61:af:0c:d2:81:8b:29:
dc:a9:2e:bc:68:24:ac:cc:56:6d:7f:0e:f8:04:55:
14:e7:db:3c:ff:91:47:29:b7:7b:7c:4e:7f:23:fc:
f6:67:0b:b0:8e:b3:e9:6a:ab:dd:dd:37:eb:54:a0:
ec:5c:52:4d:8f:57:a3:0a:f3:2c:3d:1e:25:56:21:
10:38:a2:ee:e5:10:4c:4c:70:ab:b1:37:33:5d:5c:
db:79:5b:b3:11:0e:ee:a2:04:50:dc:82:fa:58:66:
e8:60:85:24:65:42:9f:8d:49:a6:40:cb:74:96:e3:
65:2d:28:ce:f1:64:b0:79:b2:a4:60:83:d1:4f:51:
06:f1:1e:7f:23:fc:ec:83:83:83:42:ad:e7:df:fe:
08:7a:09:a7:ea:6a:a3:44:d9:41:a8:c3:06:5e:cd:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:22:3B:92:F3:E5:0A:6F:77:F6:78:2E:D0:EC:72:E2:5B:35:EF:E4
X509v3 Authority Key Identifier:
keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:d3:2c:77:fb:cc:3d:4a:03:fe:09:7b:7f:59:29:36:48:
19:d3:69:0b:54:0c:7f:06:b9:19:df:ad:2f:58:74:2b:f0:21:
55:7b:cd:4a:4e:20:8e:04:47:a4:32:5a:39:d1:0d:00:16:2f:
18:33:66:ae:41:a4:02:bc:3e:2a:c1:b6:26:58:9d:40:43:97:
ba:03:ce:94:e0:3a:6a:7c:d3:37:c2:11:2b:ee:89:e9:c9:6d:
09:f8:2d:f0:f3:30:92:81:29:19:81:48:0f:44:ab:68:28:5d:
c6:ed:49:7b:c1:55:86:b0:fe:27:7a:d8:64:92:ad:df:28:07:
72:94:91:be:45:50:a1:71:56:dc:27:f3:bb:51:32:c5:f4:70:
b9:f3:55:90:72:d7:26:fe:31:4f:82:9d:da:f1:df:7d:82:dd:
4f:5d:42:5a:95:2b:9e:84:95:2c:7b:32:f4:87:a3:d6:79:ac:
47:2d:8b:ff:f4:94:59:95:24:64:62:18:b8:c2:ff:33:9f:63:
97:b1:f5:dc:9d:59:e2:57:a7:95:d9:e6:9e:46:80:71:32:9f:
e9:31:7d:43:59:d7:af:a0:54:9d:90:ed:85:4b:6d:99:47:58:
67:c5:f3:06:de:8d:22:8f:12:e8:ff:aa:0f:f4:3d:08:d7:b5:
e5:35:bc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:42 2026 by rpki-client