Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier: Tvb+wbmo4a68X0E2/W9EFtht1AsWEs6XX69y9Kg3Uno=
Subject key identifier: E8:B3:8B:8F:E3:B6:3C:9D:E5:64:EE:46:4F:A1:96:03:A9:09:AC:15
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial: 019D3865553E0979BD822CA75C9DED4F4584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number: 031D
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: DOoXYlH6uqpYugb9o8M16eaU6/CY/OuQsZolggsz1kM=)
2: e2Nx3MWYEW91glMqV5TLbQ1S5j4.roa (hash: 1d9GQqvCFQjgc9W5ZDcmpkqgj4oWJ7r7FTu64+cmQXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:55:3e:09:79:bd:82:2c:a7:5c:9d:ed:4f:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=e8b38b8fe3b63c9de564ee464fa19603a909ac15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:5b:cd:fb:04:62:3b:cc:fc:94:d5:e6:2b:
a2:5f:2b:03:d9:0b:3d:d5:ec:f0:e6:ef:bc:bd:14:
91:e6:8b:a3:78:46:04:17:27:f8:2b:53:51:cc:35:
c0:fb:01:62:01:aa:bd:7f:8d:14:ec:cc:52:ac:c9:
18:a2:46:25:b5:47:68:e2:fe:54:80:d4:96:5e:d8:
18:d4:09:d0:64:0a:3b:f8:93:63:bd:30:62:29:e3:
c1:74:3e:59:ff:1b:78:8a:41:1b:10:64:d8:83:b5:
a2:85:34:17:ee:f3:f2:dc:96:81:c5:0f:b3:ab:79:
02:36:a9:8b:71:b3:68:f9:48:99:00:99:9a:cf:2c:
01:f3:01:2a:c6:74:2a:db:26:96:81:98:51:35:91:
87:28:34:e0:8f:e4:ab:28:7f:ae:47:0e:6b:c4:a7:
68:6d:33:82:a8:85:ef:a9:2a:bd:9c:7d:ed:f8:60:
91:88:ae:4c:dc:c1:65:98:9e:1d:f2:12:6e:d3:c3:
63:6e:b8:8a:a4:17:1c:e0:a0:4b:ef:59:30:de:26:
0a:9d:40:75:55:15:4d:b1:57:77:9f:13:d5:e0:fb:
51:47:78:64:e9:ae:1a:6e:1f:a1:58:f0:47:c0:0c:
a1:85:73:b2:9d:93:5c:f5:27:38:cd:cf:db:65:cf:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:8B:8F:E3:B6:3C:9D:E5:64:EE:46:4F:A1:96:03:A9:09:AC:15
X509v3 Authority Key Identifier:
keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3d:1a:78:8e:27:c1:60:9b:28:47:a4:30:ba:32:39:4d:cc:
2b:7c:63:5c:ff:79:fb:19:d2:dc:55:eb:8a:55:3b:f8:d8:8a:
3d:fa:06:44:c5:40:fc:1c:28:04:d7:8b:63:75:84:2e:56:c9:
66:3c:21:27:f0:bd:b3:d8:a2:1a:8d:4f:52:e2:03:ea:d2:33:
3f:d0:76:0e:a1:d7:84:f8:4e:c3:3e:4e:77:e5:e1:3e:97:93:
7f:1f:ce:c3:c3:7d:51:16:bf:3d:f3:50:0e:0b:a6:ed:c5:d6:
ea:d2:cb:0a:65:4c:64:99:b9:ac:41:a6:59:df:5f:06:5f:92:
a6:82:9d:04:56:6c:a3:18:51:71:c1:00:e5:0d:d8:8f:49:d2:
46:5d:0b:91:6b:0c:3b:f5:c9:4c:09:d1:db:53:9e:3c:ba:0d:
8f:88:20:c5:73:79:53:64:4f:55:14:4a:36:ee:db:01:2d:0e:
05:2a:b5:c7:57:61:77:6b:0f:7e:86:89:61:bc:ce:06:cf:c1:
e9:27:2b:24:23:f2:f5:1b:91:5b:05:a2:8f:86:d6:69:dd:bb:
df:b2:93:5b:de:a7:c9:a9:3b:cc:89:99:ab:df:d6:5a:f0:05:
fa:78:e8:05:59:2a:de:28:e1:db:f5:8f:cd:78:39:44:86:89:
3d:b7:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:39 2026 by rpki-client