Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: CVa3VYpGlHHfHFZ4q7Fw8sGLwlhmvwh2ZHuja9C70rs=
Subject key identifier: 0C:FD:85:98:CC:34:04:95:BD:B1:FA:FD:66:63:88:9F:2C:5B:6C:69
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 019D9961EFD8156CCC9AF79DCCBB3F3CD908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0FB7
Signing time: Fri 17 Apr 2026 03:00:25 +0000
Manifest this update: Fri 17 Apr 2026 03:00:25 +0000
Manifest next update: Sat 18 Apr 2026 03:00:25 +0000
Files and hashes: 1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: aInJzkKGdGfZ0+51ATAAdxmIQh9BtIVcTBEXaXBEBQs=)
2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ef:d8:15:6c:cc:9a:f7:9d:cc:bb:3f:3c:d9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Apr 17 03:00:25 2026 GMT
Not After : Apr 18 03:00:25 2026 GMT
Subject: CN=0cfd8598cc340495bdb1fafd6663889f2c5b6c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b6:38:13:65:ec:3c:38:b0:2a:cc:fe:b5:
a2:15:83:4c:86:a1:db:0f:53:c1:88:f4:da:9a:0d:
62:1f:6e:da:88:53:5f:5a:91:33:78:01:e6:46:45:
ec:32:7a:d2:7f:69:b2:fe:28:78:1d:d8:c0:53:61:
b3:46:89:d2:99:8e:e4:ca:b0:e1:69:03:1e:33:43:
a9:33:2c:a6:87:81:88:0c:b7:76:43:ca:7b:c4:86:
3f:39:46:ee:b6:28:b1:e0:7c:8c:a4:59:d3:ee:07:
c9:ce:fc:8b:ef:5e:fd:a5:cf:a9:21:71:2a:96:3f:
d2:0b:b0:94:80:68:17:f9:ab:5c:ca:62:37:b4:c4:
c9:a6:52:0a:c2:5c:21:cd:0b:5d:c8:d4:60:ce:8b:
c7:f5:6f:3c:a9:da:0e:53:4a:e2:59:4f:c6:64:21:
3c:ec:9e:fe:c2:25:84:80:3c:58:09:5c:b4:24:dc:
85:77:26:b1:3a:5d:43:a3:d7:2f:8d:2c:93:89:04:
ac:df:64:33:ce:28:0b:9a:1c:48:0f:33:5c:25:25:
b4:86:6d:cd:91:70:08:62:dc:a0:42:f2:0e:e0:92:
b4:21:0f:96:1d:81:48:55:92:73:9e:72:76:77:12:
6d:be:ad:03:1a:c5:46:30:99:77:d4:41:3e:13:a1:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:85:98:CC:34:04:95:BD:B1:FA:FD:66:63:88:9F:2C:5B:6C:69
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:c5:0e:39:d3:37:8b:6d:2b:5c:bd:70:98:f0:54:38:05:
43:2d:27:1b:28:7d:ad:2f:05:4a:7d:06:4b:3e:c1:4c:c8:f8:
fe:73:2b:29:52:5a:84:e5:44:24:f3:ee:88:52:d2:13:68:2f:
cc:22:93:7b:ce:9c:9f:aa:1e:a1:77:6d:85:a5:24:0d:e5:72:
97:a7:db:e1:26:ae:01:11:2e:eb:6d:16:65:5c:2d:63:f3:61:
60:53:b7:63:de:4c:99:bc:a3:06:7a:01:e2:52:e5:9c:35:21:
06:ac:28:bb:12:b0:3e:7d:61:77:3d:8d:47:36:7e:95:5e:32:
c5:94:41:0e:66:81:0e:6b:94:02:e4:ec:25:ef:74:cd:33:a9:
fb:fa:aa:40:8f:08:65:ff:e9:6d:71:1e:3f:db:be:29:42:5e:
60:9e:c2:46:af:4b:b7:ba:55:43:ca:5d:38:10:c3:36:ef:f9:
1e:95:45:72:38:07:a4:54:ae:17:2f:eb:21:25:e1:01:06:99:
e8:e9:5f:ed:34:98:2e:44:48:1a:10:8f:82:84:79:08:a1:bd:
8f:56:7d:34:f9:1b:d5:84:8e:97:3d:7a:ca:8b:fc:8b:96:1d:
2d:79:6f:8c:51:a6:3a:43:54:cd:04:47:be:a4:70:b0:d4:59:
0d:51:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:25 2026 by rpki-client