Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
File: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json)
Hash identifier: AL78gSWan5x6CKVJzhhPak70fDTN0mwaxv+K53zllWk=
Subject key identifier: C5:7B:EB:24:38:FE:2D:F5:5C:A6:12:FB:9D:D3:39:AA:87:C6:40:BD
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial: 019D378968001485DFE45DB97C55E8DEECE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
Manifest number: 1152
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: UPSshnnkU777KyH+TKNOqpFB1Iw7KunAMN5gqPQFVrM=)
2: zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa (hash: IrlQd0d+Fguubk4wbis1+hKRc8zFTkF2CICSp+JnthA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:68:00:14:85:df:e4:5d:b9:7c:55:e8:de:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=c57beb2438fe2df55ca612fb9dd339aa87c640bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:99:0e:94:ad:92:39:77:68:99:1b:75:f9:
c7:46:6f:63:f3:3d:0d:63:99:e3:41:56:1c:92:46:
33:89:a4:e3:57:b6:6d:d5:60:5c:f3:ce:12:c0:09:
0c:f9:d1:6e:0d:8e:85:96:0d:eb:33:6c:14:98:ad:
9f:21:14:5c:97:32:e5:39:55:74:d9:d2:1f:61:71:
d7:e1:e2:9d:f5:54:e9:34:29:c7:e6:e0:69:0a:46:
dd:93:0b:e0:82:46:d6:1b:58:ae:29:9c:b4:aa:28:
7e:cc:45:d6:78:be:76:f3:21:17:97:dc:9a:50:70:
16:86:32:ac:76:12:0c:d4:e4:0a:df:de:bd:ce:6f:
e8:17:7e:c0:bf:16:d6:78:e9:94:81:ba:0f:57:f3:
c2:75:7c:6c:75:19:0d:3e:47:de:bd:94:6e:5e:1f:
14:6b:6c:34:8d:0b:b1:76:b8:ad:95:3a:3f:d5:11:
34:67:02:7a:a0:30:4d:cf:21:f8:09:01:22:75:50:
68:01:d9:1b:ac:d3:98:46:e7:5c:7c:ac:49:49:0d:
48:c9:58:bd:98:32:54:1d:0a:e1:3d:60:0d:96:a8:
62:83:b1:85:e9:9f:2b:e1:88:3d:d8:99:ef:76:be:
56:b7:43:97:90:6e:7a:37:45:ef:ea:10:8a:11:d1:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7B:EB:24:38:FE:2D:F5:5C:A6:12:FB:9D:D3:39:AA:87:C6:40:BD
X509v3 Authority Key Identifier:
keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9b:58:07:6d:2d:ce:71:9d:9a:83:1f:af:fe:c0:b6:8f:a7:
09:73:7d:9f:82:c6:ec:bc:ff:2c:aa:e1:23:51:ea:b5:c9:98:
95:32:85:fd:2f:11:f6:c1:5b:b1:2b:27:02:d4:cc:3e:2f:1d:
d5:66:4c:ea:4b:70:07:7a:96:8f:85:eb:86:e3:9f:7c:71:52:
0e:c0:b7:eb:95:23:d2:70:a2:35:6d:a5:cd:a0:d3:9f:94:eb:
69:43:b5:26:2e:a2:cc:11:6e:ae:ba:f9:bd:78:d2:17:54:f7:
40:f0:3d:66:f2:5a:87:b2:6e:58:5f:40:02:d0:94:84:73:ff:
72:44:03:dc:a6:5d:78:f4:8c:42:c5:cf:60:2c:84:94:a4:b4:
f7:08:23:50:a9:16:6a:e0:13:21:25:2a:0c:ee:dd:35:c0:f5:
82:23:3b:ef:19:cb:6a:05:27:0f:27:ae:1f:e5:1e:fb:58:93:
db:01:7b:07:ce:f4:a1:db:61:b3:b3:27:bc:e2:66:27:d8:56:
78:d4:f9:a1:21:86:e0:a9:9d:8f:e1:e2:20:48:34:07:15:46:
10:2f:b5:8c:f4:14:40:14:d9:59:2a:68:72:78:e6:72:0f:7d:
62:6a:ff:95:88:1d:70:64:67:ff:9d:74:df:d4:3b:71:3e:13:
1e:e3:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:43 2026 by rpki-client