Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
File: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json)
Hash identifier: CZqO76HjRTTr4kGqIWGhMguqC7jl3rB485Z6YDxr67Y=
Subject key identifier: FC:89:DE:46:DE:EC:8F:B9:B6:FA:0F:7E:80:1A:04:AC:1A:C4:25:EB
Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
Certificate issuer: /CN=e8a247598cc32160328417a1b10db67fdf59f10f
Certificate serial: 019DA41CEA0058765F89B21D87F2F3A36159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
Manifest number: 01A3
Signing time: Sun 19 Apr 2026 05:00:51 +0000
Manifest this update: Sun 19 Apr 2026 05:00:51 +0000
Manifest next update: Mon 20 Apr 2026 05:00:51 +0000
Files and hashes: 1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: VRhxYgSDlqbIUAFf55JH3tMxnG5FIab3PHae2gBmlU4=)
2: yGHbr2ivA9pRP9yvd8p4VSdt5fE.roa (hash: HjBy12YC1Gx1u2mMvJAV9cdmHNtVXZmrkIO3OMSXlIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:ea:00:58:76:5f:89:b2:1d:87:f2:f3:a3:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f
Validity
Not Before: Apr 19 05:00:51 2026 GMT
Not After : Apr 20 05:00:51 2026 GMT
Subject: CN=fc89de46deec8fb9b6fa0f7e801a04ac1ac425eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:b1:7c:0a:ab:23:65:63:b0:63:a2:4c:02:
aa:f3:69:4f:14:ac:53:42:45:69:21:c4:15:c2:78:
ef:cb:1e:1c:c2:89:55:47:63:34:9f:52:24:86:32:
54:12:30:10:ee:00:8c:e0:4c:4e:b4:05:49:b8:b0:
03:1a:77:31:b3:6b:39:3f:89:ca:c0:d8:ab:e9:b3:
5d:65:17:ea:aa:98:ee:35:3c:f4:fe:06:48:34:09:
64:3d:92:e1:55:36:da:e6:70:87:77:69:34:c7:a9:
50:34:34:41:66:f1:ce:b0:9e:1c:ea:7b:f2:ae:db:
7b:9c:86:53:8b:51:c0:a3:65:b2:2e:1b:7e:e0:98:
b5:5e:32:86:25:ad:4b:bb:1b:6b:06:a7:55:b7:4c:
8d:96:0a:0d:77:38:f0:28:b5:62:98:e6:85:95:73:
67:1f:8b:6a:e5:c3:52:60:30:08:e0:df:99:8d:12:
56:b5:3c:93:8e:07:1e:d1:1e:b6:c8:c1:ce:1c:eb:
26:52:9b:35:15:bd:87:4c:14:21:ab:62:bd:4e:49:
c9:04:f4:31:1a:0f:9c:9c:5f:0b:5e:36:bf:bc:55:
df:8c:c6:80:1d:33:61:02:28:fe:49:49:c9:f2:55:
c6:23:40:7b:14:c2:ad:35:06:92:d5:a9:3a:2b:0c:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:DE:46:DE:EC:8F:B9:B6:FA:0F:7E:80:1A:04:AC:1A:C4:25:EB
X509v3 Authority Key Identifier:
keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:5f:e0:4d:cc:78:98:ca:f6:a5:60:b1:f0:26:70:03:4b:
a1:b9:51:2b:03:e6:94:ba:e8:04:61:fa:f5:b3:c6:f6:5f:76:
9f:7c:de:d9:75:06:f9:ca:2c:95:e2:a3:75:8f:20:f5:9c:4a:
ce:85:81:a7:9b:8a:c4:4b:ce:4b:7e:d2:41:0c:8e:91:ea:6b:
61:52:b5:bc:7d:bc:aa:36:df:27:d9:fb:a2:83:1b:d2:85:4e:
58:0c:2b:5b:aa:58:f8:da:d0:74:60:95:ed:aa:b2:92:c7:da:
75:7b:b7:a8:0a:92:40:08:8c:50:a8:24:bd:f0:d7:f8:04:4c:
d1:d6:c2:dd:be:89:d5:f8:b2:8a:49:58:30:0e:11:a6:36:bc:
15:2d:ae:9b:92:c4:5b:f7:d0:01:93:3c:f8:a5:d0:81:40:91:
42:b5:50:2e:45:97:7b:99:cf:bb:7e:7d:2b:75:a8:e9:2a:f6:
7f:9e:7e:53:3b:75:1b:78:6e:f9:18:8a:96:97:f2:6e:8d:9d:
f4:9e:c7:4b:30:55:84:df:37:af:e0:26:ab:17:04:13:80:ea:
98:48:ca:4d:08:97:b0:08:0b:22:a9:3e:5a:4c:8c:42:c9:8a:
d3:8e:0a:cb:28:de:55:5a:01:1d:d6:cc:ea:6b:6d:f0:48:e3:
05:8e:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:09 2026 by rpki-client