Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: Lnahb3Sr27c8cl94lQSOy46TW5XKN1wWtNrlj7I9ykk=
Subject key identifier: BA:A4:30:0C:19:DB:92:9D:84:7A:0F:4A:74:78:76:D3:28:FE:E3:11
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019D9A74B5A741CBF86C1D75BB5297561EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: VXVb78i/krI3KYDrb/vF7Kpna8Qw2T/GpeKazyy66Dc=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b5:a7:41:cb:f8:6c:1d:75:bb:52:97:56:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=baa4300c19db929d847a0f4a747876d328fee311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:b1:43:ec:32:fb:d0:a0:c6:7f:54:00:95:
fa:4c:a3:26:db:18:d2:80:44:34:dd:0a:90:8a:1c:
ab:cc:2e:e2:5e:a0:26:fe:06:3c:eb:ab:29:b6:65:
df:13:bc:75:77:5f:1f:45:41:2b:f3:98:76:9d:48:
9a:75:17:9c:90:d7:64:81:a3:33:77:0b:a9:02:85:
aa:d1:f8:72:c6:8d:1d:ae:2b:bf:50:97:8f:ec:47:
bd:30:04:a1:a0:cb:ac:62:c7:70:b0:b5:69:a4:cc:
0b:32:94:6e:e4:05:52:27:04:dc:f0:d2:ff:b3:e9:
fc:94:ea:6a:80:ff:13:3d:f3:32:36:cb:00:c1:58:
b0:16:77:4b:76:e1:97:12:a9:24:be:b1:c7:69:f9:
7e:fa:65:fb:e9:39:93:2d:32:ce:9a:0e:0e:3f:83:
c9:89:41:d9:3c:a4:43:2f:02:97:e8:37:82:a1:9f:
5e:c2:9f:50:2a:85:d2:fa:99:35:04:74:62:b7:77:
f1:9c:c7:9d:3f:6c:65:13:43:06:49:21:9a:f4:5a:
ff:b6:92:47:38:00:46:45:2a:6e:c3:7a:df:36:d5:
36:6b:88:1a:4e:1b:79:e9:ab:ca:43:37:4f:e8:a8:
7f:99:c8:06:8e:47:45:f8:84:48:43:db:d6:43:d5:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A4:30:0C:19:DB:92:9D:84:7A:0F:4A:74:78:76:D3:28:FE:E3:11
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:eb:f4:7b:c5:cb:07:1c:3d:ec:47:4a:96:18:7b:4a:c6:50:
ea:18:8d:74:b0:0b:9c:95:8e:de:b9:64:f4:d9:5b:97:88:31:
07:bb:ca:06:d8:fd:e2:56:9d:37:f6:bd:59:6a:98:1f:a0:df:
32:b1:9e:fe:a8:ac:9f:44:a7:11:38:50:92:48:13:d3:20:40:
6b:97:e9:1f:bd:c6:ab:78:e7:84:76:04:f7:9c:a9:34:ed:fd:
6d:39:77:39:f7:59:8b:18:02:41:43:37:89:30:1a:c9:69:f2:
82:83:b5:5b:58:52:6e:14:2d:3b:1a:5b:e3:c2:af:34:b1:20:
6c:d5:44:60:e6:95:00:3f:01:a8:bf:d3:a2:3a:0e:37:f0:df:
8b:db:10:34:82:2b:f1:fc:ff:93:be:38:87:3c:92:1f:aa:35:
a5:d5:7f:a1:0c:86:2c:58:92:1d:cf:62:a2:2c:43:c0:b7:a5:
82:69:7a:48:4a:bd:35:31:cc:db:86:f1:58:d8:8f:75:b6:e1:
1d:c4:0d:1c:99:98:f6:f3:21:36:35:d6:6c:f1:3b:bd:9a:9b:
ca:f4:f6:d4:20:d9:28:79:8f:d1:83:62:43:78:95:c2:23:b4:
15:53:ec:73:0c:7e:88:db:36:a3:16:6a:73:5e:42:13:0a:fd:
69:d7:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:54 2026 by rpki-client