Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: lcU6U6R97fAvM9TD0ugXEkGQYgVKY8mQBDhPrBcPOaY=
Subject key identifier: 38:C9:82:6B:3A:28:09:98:81:13:18:66:20:D9:D6:2D:88:70:29:D6
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 019E3073119AE80EE9E1EA2CEC6F9EE535AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 1897
Signing time: Sat 16 May 2026 11:01:47 +0000
Manifest this update: Sat 16 May 2026 11:01:47 +0000
Manifest next update: Sun 17 May 2026 11:01:47 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: nCyS1Jq4snLRgXaFnGiG92wupTyrH6Z1eorHFSWYkSw=)
2: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (hash: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:11:9a:e8:0e:e9:e1:ea:2c:ec:6f:9e:e5:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: May 16 11:01:47 2026 GMT
Not After : May 17 11:01:47 2026 GMT
Subject: CN=38c9826b3a2809988113186620d9d62d887029d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:85:05:0e:e8:d4:e9:98:46:c0:5f:9e:d4:
ef:42:60:08:71:8c:8c:08:8d:e4:bc:32:b8:40:48:
a6:fc:97:41:ce:9c:e8:50:ad:7e:69:12:e1:53:3d:
79:2b:f5:96:f5:0e:36:20:22:22:3b:66:dc:04:43:
9b:05:cc:3a:51:50:64:1c:cc:01:cb:89:cb:a9:cd:
16:e7:47:3b:2c:2e:1d:e6:05:8c:a1:53:6d:59:45:
22:3b:d2:68:7f:6b:1a:0a:f8:4a:c0:d0:05:8c:f6:
d9:30:ae:aa:c0:d2:93:4d:27:37:bf:0d:49:96:1d:
7a:fc:95:5b:67:73:e7:62:34:57:57:20:5f:b5:39:
48:ce:ba:a6:2f:c4:f4:b0:0a:83:e6:f8:1e:b5:2a:
ef:45:d0:bc:1b:b9:4a:5d:3b:90:29:49:93:c0:41:
fc:97:37:49:36:c6:90:21:e5:a3:9d:4e:a7:09:fc:
b8:71:a9:e5:21:dd:8e:ac:14:6f:b6:0e:76:a3:31:
a6:f8:cb:0d:d7:77:1d:0a:34:c3:27:79:b6:9a:ae:
4c:51:5f:1a:fb:38:45:d9:c1:e4:08:f0:6a:08:75:
33:95:81:e3:cf:9b:ca:27:fb:c7:f3:8c:96:5d:7e:
da:5f:c2:6d:de:25:20:08:54:61:63:47:4e:9a:f7:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:82:6B:3A:28:09:98:81:13:18:66:20:D9:D6:2D:88:70:29:D6
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9f:07:0b:33:76:ab:0d:9b:74:ae:e2:60:3f:7a:ea:d7:e4:
b0:ab:94:54:ce:ee:92:09:a6:a1:b7:15:19:3d:04:5b:17:1f:
bf:eb:7d:f4:55:24:2d:e3:59:91:c6:16:c7:7f:5c:af:c3:1c:
f0:4e:40:6f:ec:c2:71:17:30:11:7f:c3:5c:cb:db:19:2d:5a:
95:61:d1:c7:2f:67:c4:7a:24:d3:96:1d:82:b7:f5:85:3a:9b:
d6:74:3e:14:f9:38:46:49:32:74:8a:da:1b:40:1b:b4:d0:41:
07:4e:9b:5b:ad:3e:9a:f4:82:5c:1a:05:56:19:18:53:bb:26:
7c:1f:fd:38:a2:06:45:25:07:b6:d8:08:17:3b:8f:ec:e2:a7:
d4:2b:fe:ca:f2:4b:5d:4a:7c:16:23:b2:31:a2:b4:69:9b:c0:
10:9f:f6:cb:67:0d:81:ea:6c:b7:fb:00:fa:a7:c8:37:bc:6f:
73:c8:e3:75:a8:6f:3f:b8:52:6e:ed:2d:6a:89:3f:92:d8:b4:
bf:b9:5c:27:fe:4d:ab:91:7c:73:9e:e2:b5:67:68:40:f7:54:
ff:9b:a5:b2:56:d6:bf:c7:bd:36:82:ea:7e:8b:bb:90:dd:27:
64:03:07:3d:f8:04:aa:f7:be:ed:b3:6e:e2:f2:f3:60:3a:51:
1e:fa:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:39 2026 by rpki-client