Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: mHG6tZsLEZqz0obnPG1Yy0cePTcyKmNMcgI+c2iaHNM=
Subject key identifier: 3F:E1:00:5D:04:91:E6:4D:55:06:BB:B9:0C:C7:41:1F:84:AC:AB:0A
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019EBF233993698D695802D16721990A1B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 04:00:17 +0000
Manifest this update: Sat 13 Jun 2026 04:00:17 +0000
Manifest next update: Sun 14 Jun 2026 04:00:17 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: iB6QbhRPuw0KfV/kSV8Rt+HmeZnX3Wu6W2aBhw9n39A=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:39:93:69:8d:69:58:02:d1:67:21:99:0a:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jun 13 04:00:17 2026 GMT
Not After : Jun 14 04:00:17 2026 GMT
Subject: CN=3fe1005d0491e64d5506bbb90cc7411f84acab0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:01:69:6e:e4:f9:a3:7b:51:a4:19:48:c3:
85:57:e5:a8:06:f6:84:3e:8c:d9:c5:47:e1:6f:d2:
4f:89:53:e9:13:00:05:64:10:88:e6:f4:8e:c2:07:
44:59:a5:d7:a2:32:0d:08:0d:3c:37:06:33:1f:6e:
a9:91:78:83:dd:42:c3:ee:86:0a:cf:0a:12:31:21:
95:49:9f:5c:e6:c2:59:15:59:1f:3f:33:91:1d:f9:
74:15:2d:8c:78:bf:c5:2d:f7:30:a2:3e:56:3b:02:
23:a7:78:72:b3:6e:2c:ff:3f:16:36:9e:ea:be:f5:
39:13:57:4b:eb:9e:c2:a8:5e:63:3a:fb:dd:e7:8c:
e9:9a:c8:c7:69:f7:59:35:d1:e9:2e:86:8b:1f:03:
02:50:c1:c0:82:7f:7e:99:72:1b:76:fa:28:7a:c0:
b9:34:92:67:38:17:5c:b6:c3:0a:6a:c3:f1:15:d6:
d3:e3:d7:44:e2:51:11:50:63:23:c6:37:92:14:31:
ba:c0:7b:cb:36:d2:9f:ec:d8:e4:a7:9f:59:d4:b2:
79:84:ad:b9:78:26:87:dc:5c:78:a2:59:87:35:7f:
ca:ed:44:ba:40:41:56:4e:3a:07:54:6c:89:48:4d:
ae:d1:73:a1:13:0d:f6:cb:e9:b4:5b:61:44:82:d9:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:00:5D:04:91:E6:4D:55:06:BB:B9:0C:C7:41:1F:84:AC:AB:0A
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f8:75:f1:d0:48:b9:7b:c4:fa:ef:10:a9:d8:72:89:02:16:
b5:50:fc:99:11:95:a7:fe:80:33:40:86:c7:cc:4d:88:01:cc:
2a:4a:df:41:4b:ae:2b:81:6c:7d:35:e9:61:3a:73:a6:cf:db:
69:b5:b0:92:08:5f:2c:02:dd:98:5a:64:40:4f:a3:b2:6c:11:
7c:1d:33:9a:be:47:c0:70:83:f2:db:30:58:b7:a6:3a:74:da:
dc:cf:7c:17:a2:3c:23:11:37:3d:bc:f9:29:14:61:71:5a:6a:
8d:fe:6d:77:ef:18:f1:aa:43:ab:ea:f6:0d:7d:05:33:eb:99:
eb:b1:43:04:5a:92:39:12:01:30:88:e8:5f:dc:84:a9:b3:33:
c1:85:9a:87:ca:a3:e8:c1:75:1c:05:b0:15:d9:b8:14:5e:eb:
90:6a:df:0a:5a:d1:8b:88:21:bb:e4:88:1b:84:0a:c9:d1:aa:
0b:19:5a:9a:ba:39:52:b8:f3:a9:40:fb:73:f4:0c:ee:0c:f5:
37:5b:e9:bb:33:70:c9:40:7a:11:d8:2e:09:5d:0e:20:38:76:
4e:43:ff:24:c1:e1:61:ac:98:13:12:34:67:75:f6:d3:35:4c:
05:51:20:1e:9c:1e:4a:f4:6a:d0:47:e1:58:80:a7:86:72:ca:
91:23:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:29 2026 by rpki-client