Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: Jr3PECzlr95v1gUv4cJ2uOLL2khgwxQ9CGcl80wZpm0=
Subject key identifier: DA:5C:17:1A:2F:73:13:E8:74:CB:2F:B8:49:6A:E4:2D:46:9B:7F:02
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 019D9A07115368D622100E47D8FBC754A2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0D7A
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: JZACx3OzLQgfYStmRxbRKHnFIKJM1dOKdqUYuDSAVE4=)
2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:11:53:68:d6:22:10:0e:47:d8:fb:c7:54:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=da5c171a2f7313e874cb2fb8496ae42d469b7f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:eb:d0:3a:3a:ef:ae:c6:95:ac:fb:53:a3:
59:4f:de:2b:4a:81:2f:c6:79:79:9a:56:ee:41:22:
48:33:c5:b3:21:17:d7:da:52:03:55:10:6d:06:73:
7a:bc:c0:4e:c3:d7:e9:df:bc:41:3d:43:a8:fa:01:
9c:b6:2d:44:f0:d8:9a:d6:31:e3:38:f5:80:d5:2d:
07:3b:c8:5e:d4:79:72:9c:ef:d4:2a:f8:b4:29:cb:
19:8e:27:12:ac:f4:44:93:c5:50:fe:08:58:c8:73:
c2:f2:8e:c3:a5:11:f9:96:ad:05:33:19:65:5e:7d:
d8:e1:ae:97:e8:2c:31:ff:16:0e:6b:6c:55:0a:6f:
f1:1b:21:5e:81:06:73:15:bf:76:54:48:86:59:78:
42:d2:56:28:10:8a:dc:d1:94:f2:65:60:00:5b:11:
9c:f7:36:aa:c1:83:45:ec:54:ce:7e:50:c0:fe:a9:
1f:e1:3c:fe:62:44:1f:92:d3:e0:d5:c9:f5:eb:ba:
c2:1d:61:ee:85:21:da:41:5a:55:1a:74:1e:98:94:
09:87:86:44:3b:63:5f:dd:fa:e0:88:6c:97:47:50:
4d:18:ce:9d:91:b4:32:a2:46:a7:ae:af:6d:74:d7:
fd:79:44:7b:a3:4b:f6:c2:ec:42:53:01:25:21:77:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:17:1A:2F:73:13:E8:74:CB:2F:B8:49:6A:E4:2D:46:9B:7F:02
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:66:f1:fa:92:81:e2:76:ca:f9:30:d1:1e:3c:da:fe:9e:37:
66:af:09:24:72:db:7e:1d:f4:c0:ef:a9:43:c7:29:4b:f6:3c:
75:35:18:c2:32:76:1d:13:ed:ba:29:16:7b:50:f8:ef:c7:03:
7b:4b:ae:6b:e8:52:1b:47:02:fb:75:a3:2f:60:fa:4b:37:dc:
25:66:56:77:70:a3:33:e7:bc:bb:c7:3e:fd:67:49:fd:61:8e:
81:f1:eb:9d:82:35:47:8e:5f:74:57:5a:c0:f9:a4:37:a6:ed:
73:0a:d0:5d:7a:c9:f0:09:04:60:1b:cf:0c:97:b3:33:b8:ac:
b7:40:4f:b0:b5:d1:53:b7:96:b9:83:5b:29:f0:05:43:2e:2b:
fe:87:71:f3:ae:ee:9e:0a:16:ef:07:7b:4a:3d:a1:2c:3c:fd:
f9:f2:76:39:8c:ba:36:99:55:cf:c2:10:05:81:d3:da:41:a4:
cb:46:18:01:c0:62:99:5e:98:9a:ad:74:81:eb:ad:35:fa:41:
1a:60:ff:21:ce:d0:4d:7f:ed:36:e4:2b:72:f0:8c:c8:09:a9:
32:fb:c8:46:49:52:22:13:a2:29:3d:5d:17:65:93:1d:85:c0:
b5:15:6a:79:05:96:9b:59:fb:52:85:60:40:94:d1:15:17:ac:
b0:ef:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:40 2026 by rpki-client