Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: 6DXmqgU0Hv7OtwPcNSxfMiFV1Yb9lXftWwDIRFxuf74=
Subject key identifier: 83:B8:50:58:17:AE:C7:56:65:2B:16:CA:7F:69:B7:55:3E:06:E4:58
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019CE8247ED0AEC71550BC6868C2A15BC9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0B6F
Signing time: Fri 13 Mar 2026 17:00:31 +0000
Manifest this update: Fri 13 Mar 2026 17:00:31 +0000
Manifest next update: Sat 14 Mar 2026 17:00:31 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: zQmzTAaYpflcP6mEnwBmgTQHAX2k3eTZcNpZlf+lmZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:24:7e:d0:ae:c7:15:50:bc:68:68:c2:a1:5b:c9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Mar 13 17:00:31 2026 GMT
Not After : Mar 14 17:00:31 2026 GMT
Subject: CN=83b8505817aec756652b16ca7f69b7553e06e458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:bc:5a:09:92:d3:ea:25:3c:45:37:b7:ef:
7a:c7:6e:e0:9d:ba:0a:f7:f4:de:a2:f2:ae:6b:bc:
c6:51:9a:49:14:e4:7f:c7:74:ce:0b:7b:8a:66:a8:
06:bb:d2:b3:76:30:93:a9:85:d6:00:ed:6a:08:6a:
62:44:a8:cb:3c:09:c8:c1:ff:a1:1e:07:20:34:d9:
af:4f:d1:8f:42:62:c5:38:a4:d7:fa:81:da:8c:a0:
fd:48:4f:90:49:ab:54:1d:f8:f3:a2:bc:48:73:6d:
48:64:0b:be:a9:df:56:07:97:ba:c3:99:a1:63:89:
eb:b0:0b:6c:af:9d:f5:52:9e:47:9b:86:c8:dd:ca:
92:71:a5:80:11:e8:3b:5c:19:5a:40:78:ac:e7:ac:
e5:00:1e:91:f6:73:a0:14:d5:ff:bb:66:93:c5:2c:
b9:af:bb:68:81:32:fa:38:9b:1b:f6:91:3d:cc:85:
f0:4e:34:21:28:50:a6:59:dc:9c:b5:c3:7a:91:e9:
e8:9b:13:9b:80:45:c8:d7:0e:06:bc:46:f6:85:28:
ae:55:b4:b9:ee:7c:bf:3f:90:7b:33:2b:02:f8:b0:
81:d6:c9:5e:5b:05:01:99:82:d8:25:af:09:4f:67:
5f:a7:35:8c:22:12:e6:af:d9:7c:8c:f4:be:33:b2:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B8:50:58:17:AE:C7:56:65:2B:16:CA:7F:69:B7:55:3E:06:E4:58
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7d:ab:4b:2e:86:89:05:8c:4d:e1:e0:f3:ab:7c:f1:42:9f:
0d:e2:1c:42:ae:0c:9d:41:38:54:2a:8b:e7:2a:ac:98:0e:91:
60:89:35:f6:42:34:5f:84:5a:e0:2d:44:74:b3:22:5c:29:06:
21:2d:47:04:e0:21:36:35:3e:9d:db:33:78:8f:0b:0a:ea:d7:
a7:00:6b:f1:b4:b8:22:75:00:d1:73:b9:60:52:cd:d5:be:47:
8c:dd:62:9e:7b:af:bf:e8:9c:48:0e:b7:db:41:39:eb:53:a2:
45:6c:32:66:a1:ee:e9:3d:f9:66:9b:78:31:34:e0:0f:58:3e:
66:b0:5d:db:fb:4b:a9:9d:e5:e0:21:bf:e3:5e:1b:39:66:d2:
0c:d6:a0:f8:96:46:01:39:ad:30:98:e9:dd:9c:e9:8d:25:f8:
c0:de:45:e8:c0:c5:46:fe:65:d3:73:77:ea:db:2e:c7:3d:23:
6a:40:ec:55:96:19:5d:08:2a:57:ce:54:41:ba:e9:29:10:05:
d0:44:ad:9e:9c:0b:3e:73:0e:d3:4e:ce:19:eb:d3:27:0d:f9:
68:0b:8a:40:7b:c4:b3:dc:dc:99:fb:8f:dc:d3:91:8f:6e:97:
ad:cb:5f:e4:9e:23:05:e1:c7:2a:10:3e:54:16:ef:db:5d:ef:
5a:55:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:58:57 2026 by rpki-client