Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
File: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json)
Hash identifier: sXq2QzC3NBWNJzugERAek8r2RinTLU91ODIfpQQTEAU=
Subject key identifier: E6:13:41:5E:28:D8:03:54:62:F5:D9:B7:DB:F9:78:57:45:56:62:D5
Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
Certificate issuer: /CN=e8a247598cc32160328417a1b10db67fdf59f10f
Certificate serial: 019CAAFD9094E8E8C3A5C2409B43B65B3FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
Manifest number: 0122
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: TyfpOjKC/OEmpTWKkPGltmqgRTyAdJpX7zJ3HAGwEJY=)
2: yGHbr2ivA9pRP9yvd8p4VSdt5fE.roa (hash: HjBy12YC1Gx1u2mMvJAV9cdmHNtVXZmrkIO3OMSXlIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:90:94:e8:e8:c3:a5:c2:40:9b:43:b6:5b:3f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=e613415e28d8035462f5d9b7dbf97857455662d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:07:65:a4:eb:ea:ab:9c:bc:fe:e2:42:c4:
15:b4:d2:02:00:99:5c:a9:cb:b3:f8:83:3d:fa:36:
99:56:ca:71:dd:5d:bf:65:9a:b9:9c:42:a9:fd:93:
e5:1b:54:c9:51:30:92:d3:28:a0:71:3a:ec:19:62:
d7:a7:ae:3d:fd:cd:8c:68:fd:d6:0c:6b:93:c2:e4:
32:90:63:a3:5f:30:04:88:be:4c:53:c3:fc:1c:86:
34:f7:9a:18:8f:e6:6d:52:56:60:a9:67:99:60:ba:
43:0f:ec:f9:82:9e:da:bc:0d:a5:0e:51:5f:74:b7:
87:a6:dd:66:40:bd:db:f8:a0:b7:fb:e5:f3:00:d4:
11:1e:a7:af:81:54:ac:16:cc:8a:3f:06:f2:6b:27:
fa:92:1f:a4:25:20:a0:92:f7:a1:3e:0e:08:22:13:
7d:7b:e7:79:26:6b:1d:fd:77:a1:e0:4a:15:e1:dc:
03:8c:29:b6:47:b2:94:f5:fe:ca:57:d4:80:b1:6e:
c5:28:52:43:86:76:64:6e:74:c4:c3:f3:f8:b0:fa:
25:20:5b:02:f8:e6:38:8a:24:d8:9b:01:12:b6:e2:
e0:ee:56:0f:31:7e:9b:e8:45:7b:13:21:00:3b:4f:
2f:50:7b:7f:af:b5:b7:e0:38:82:e3:ce:67:9a:0f:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:41:5E:28:D8:03:54:62:F5:D9:B7:DB:F9:78:57:45:56:62:D5
X509v3 Authority Key Identifier:
keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:73:05:f4:8e:d1:b7:81:d3:c8:79:35:cb:3c:33:8f:05:b1:
6d:e3:b8:04:1a:f4:a5:c4:20:1e:38:13:c5:66:05:ce:36:fa:
65:65:fd:53:47:5d:66:67:d7:3c:7b:34:75:55:aa:6f:f7:89:
0f:a3:ce:81:04:81:aa:b2:46:a5:dd:6d:c3:c7:79:d0:97:e5:
0d:49:58:74:7e:e5:f7:93:b9:de:68:5f:e9:cd:dd:fe:91:b0:
7a:58:ac:4f:ce:e9:7c:1b:a2:93:9e:48:45:16:5c:6b:09:c5:
9f:12:06:dc:b1:4c:29:05:77:57:18:f8:21:a8:16:82:f6:22:
77:cf:76:c0:d7:6e:66:c4:e8:83:ee:55:b9:7c:19:06:04:be:
5b:3d:ef:a7:ba:39:18:0c:44:75:58:e1:6b:30:63:86:41:02:
f1:11:13:e0:51:53:20:bd:58:e0:55:c5:c0:f5:18:8c:6d:40:
0d:1f:8f:1e:9d:a7:06:3f:a9:94:18:d2:5e:38:66:84:d2:5f:
15:ff:37:c4:f4:49:98:20:ac:6f:a0:38:a8:fb:fc:fd:53:6d:
6c:8c:fa:8c:67:84:d1:83:ae:48:1d:15:15:24:7e:1b:a5:49:
13:c0:a1:b9:71:87:62:f8:ca:88:23:ca:37:d2:79:e2:72:99:
aa:e1:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:51 2026 by rpki-client