Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: OoWT4rydNExkCV2PcO3GNGVnN4uNJ6R6fHWMZVSo7wc=
Subject key identifier: 6E:2A:01:9C:99:6B:CA:3D:B4:B9:E8:F0:A1:75:E0:0A:94:30:F7:CC
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019D999909431414B6828F3F1D838F580B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: ASyKGE8oXpPLmQfVZtgs5XVpXo1NVFUOhOXFaNyrvsY=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:09:43:14:14:b6:82:8f:3f:1d:83:8f:58:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=6e2a019c996bca3db4b9e8f0a175e00a9430f7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:ed:d1:27:68:ed:07:04:52:ee:f9:9e:c1:
8c:af:f4:ce:b6:8a:fb:2c:1b:8b:e0:54:61:1e:b5:
a2:27:6d:02:7c:39:aa:e6:5e:cb:a6:cd:92:c9:af:
0a:7f:9b:fc:fc:26:a1:4a:19:6e:83:cd:4d:38:49:
57:36:4f:48:5b:20:11:ff:f7:d9:58:3e:5d:b2:f8:
59:d1:57:ae:d7:9f:f9:bf:46:c6:f1:bf:c0:20:ca:
1f:cf:e5:7f:d5:70:15:f5:bd:1b:e1:25:51:63:1f:
84:30:cf:c8:c4:09:52:d4:d7:fd:f3:cd:e8:6f:67:
79:c9:11:37:50:02:95:7d:2f:db:73:bf:ed:b7:4b:
e6:50:aa:3e:df:1b:db:9d:66:08:46:47:70:3b:0e:
eb:08:11:16:02:46:13:9e:e8:62:89:4c:42:5a:51:
58:50:99:5f:7c:8b:fd:70:f9:9b:c6:0a:f2:46:fd:
aa:dd:c6:45:3b:8c:8f:16:5d:97:e9:95:14:ae:eb:
67:d5:4f:7c:9d:b0:da:4b:03:42:a9:34:f5:a5:ca:
80:1b:18:c1:c2:6e:48:9e:96:c5:22:c7:f9:6f:1b:
e2:1a:a7:c6:ab:12:ab:2c:24:04:8f:3b:22:5a:22:
8a:38:f6:b1:60:d3:a9:5e:26:5e:db:17:41:d2:7f:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:01:9C:99:6B:CA:3D:B4:B9:E8:F0:A1:75:E0:0A:94:30:F7:CC
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8d:de:5f:2b:0b:21:f1:9f:49:8e:19:3f:f3:a5:cc:2d:8d:
64:51:a7:bc:d2:37:0d:b6:4c:8a:f8:7e:ac:ec:be:b8:de:dc:
34:fd:f9:f0:3b:f4:2c:79:e0:ee:73:f0:6d:85:4e:60:ad:51:
51:ab:b0:66:f3:c9:a3:70:17:51:47:41:4b:a1:b4:67:38:23:
12:ca:58:60:12:b9:a3:cc:41:72:c9:fa:b0:11:50:9b:96:7e:
4e:9e:f1:80:02:f7:ca:14:d3:0b:61:47:6d:db:7d:4a:04:63:
b8:a2:ba:d1:9b:50:bb:15:3a:0b:e7:a9:31:8e:02:8e:95:8a:
84:1d:34:73:2d:c3:a8:7b:d5:1c:dc:60:7d:89:72:ae:1f:90:
51:e8:9b:60:75:7e:2d:eb:36:80:75:70:d5:97:df:ad:f5:a2:
56:a6:15:b5:14:52:b6:e6:aa:f8:74:16:14:d5:80:96:65:9d:
07:d2:1e:5c:0a:b6:22:2c:5b:3c:45:24:28:62:cd:e3:cc:ed:
02:7f:24:2d:bb:81:71:3e:2f:9c:19:ae:6b:e7:03:e5:64:c2:
97:54:d3:2c:36:a4:7b:0e:b2:44:eb:31:5a:29:b0:e4:da:8d:
66:cf:7e:53:d1:4d:db:82:ff:92:9b:6c:00:6d:77:34:6c:73:
c2:d7:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:21 2026 by rpki-client