Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: PCNduZDfY6WDmig+iql3SyyCFYhHXTk9oFy94CtY1TI=
Subject key identifier: 18:A0:3C:11:B6:BF:67:02:00:78:E2:C8:6D:3C:D1:BD:DD:2F:65:61
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019D333E8EF8803D3F1B4C67D4BC3A51572A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 1900
Signing time: Sat 28 Mar 2026 07:00:30 +0000
Manifest this update: Sat 28 Mar 2026 07:00:30 +0000
Manifest next update: Sun 29 Mar 2026 07:00:30 +0000
Files and hashes: 1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: X9mLu4saZ6hG3AbX8FZhu0yqfGfsOUOvNvIjL6DyTQM=)
2: 9qw7otosSIxdL3aCqQeP90SREjU.roa (hash: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=)
3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
8: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:8e:f8:80:3d:3f:1b:4c:67:d4:bc:3a:51:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Mar 28 07:00:30 2026 GMT
Not After : Mar 29 07:00:30 2026 GMT
Subject: CN=18a03c11b6bf67020078e2c86d3cd1bddd2f6561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:c7:df:43:41:3e:f1:c6:e6:9b:26:95:85:
4c:5a:74:4d:d0:b1:0c:55:7c:25:02:8c:cd:fa:ce:
6a:94:64:f3:a0:13:f2:4d:b3:31:bf:e1:77:c2:ae:
16:31:9d:b8:7f:a0:9f:5d:18:53:47:85:de:69:5e:
45:77:ef:53:14:67:d4:50:34:bc:32:1f:0a:1d:8c:
9b:d9:17:48:d3:d5:e5:74:25:fd:bc:1d:cd:87:1d:
75:43:d0:b5:d0:f9:a3:7b:87:6c:ed:f3:a9:ec:d0:
3d:ea:2b:65:39:96:39:f2:5e:76:05:c8:3d:a6:24:
af:40:6b:e9:84:7c:24:e6:c8:b6:ee:0a:c3:95:24:
01:3d:cf:dc:4f:1f:d2:ca:8d:c4:88:ba:86:00:d0:
e8:43:7a:f0:5a:9e:18:88:2c:0b:b6:68:94:6f:aa:
c9:cb:cd:0d:95:3d:25:0e:30:98:8b:cd:31:4e:76:
49:d7:55:89:7c:43:08:1f:7b:fd:de:0c:a4:1f:d8:
31:d7:37:25:ba:fc:e7:17:09:83:a3:0d:27:50:36:
9c:de:3f:27:38:45:18:2e:da:e3:84:51:6f:29:5e:
3e:02:a2:da:bb:0b:6d:80:f1:e1:31:8e:5f:5f:40:
3a:e7:d5:84:be:38:ea:74:11:66:d2:6a:2d:54:b0:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:3C:11:B6:BF:67:02:00:78:E2:C8:6D:3C:D1:BD:DD:2F:65:61
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f2:5a:d4:dc:87:92:49:eb:e2:c1:fc:89:c0:b5:bd:8c:f5:
6b:d5:ef:71:12:f7:0e:7b:d4:ac:a6:a8:cc:ed:6e:9a:ef:60:
e3:61:be:ce:a7:c3:2b:4a:9e:96:ab:91:f3:56:f4:03:ce:80:
83:b1:0b:6a:e5:9a:2f:84:34:06:e6:c7:92:92:a8:b8:5d:8c:
27:0f:ee:33:12:10:23:12:00:57:4c:89:ab:c4:ae:63:b5:8e:
ea:e9:42:2b:fd:66:52:4c:95:b2:8c:5b:d4:1c:67:e7:71:ba:
de:b4:3f:18:76:40:f2:56:fa:af:71:57:93:89:32:3c:cb:86:
58:34:d9:cf:7c:98:be:15:af:99:82:57:58:d3:a6:eb:8d:d0:
ff:9e:80:62:27:5f:4a:dc:30:3d:6d:fd:1a:57:87:b5:86:d7:
ee:55:80:9c:02:6f:78:0c:9f:df:da:6b:1d:4d:21:c7:49:af:
95:88:a6:f3:93:0c:6c:0c:bd:e1:19:84:45:7e:79:20:f8:71:
a4:d9:d9:b3:b5:ff:9a:2f:3a:07:2c:44:53:09:d0:93:6a:de:
2d:30:a1:35:b5:8b:84:cd:74:9b:36:6a:86:a1:06:2d:c1:73:
e7:bc:66:be:bf:78:0b:96:78:c6:6d:21:c1:27:c7:7d:da:d6:
92:94:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:14:35 2026 by rpki-client