Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: F1npxs+UTFtnt0RBwBl5GXgLm0F0Ag4tmwMrpskSCNc=
Subject key identifier: 49:D5:A0:C8:EA:DA:27:4F:3A:88:94:A4:4D:83:65:20:46:51:1F:48
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 019D9C9A033A54E3088ECBAF25B658C88FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0CFE
Signing time: Fri 17 Apr 2026 18:00:32 +0000
Manifest this update: Fri 17 Apr 2026 18:00:32 +0000
Manifest next update: Sat 18 Apr 2026 18:00:32 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: 3/S/u2rNvs5neaor8PxJ4hbDgZ4fcPNj3eQzq1hEmB0=)
2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:03:3a:54:e3:08:8e:cb:af:25:b6:58:c8:8f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Apr 17 18:00:32 2026 GMT
Not After : Apr 18 18:00:32 2026 GMT
Subject: CN=49d5a0c8eada274f3a8894a44d83652046511f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:77:0b:41:2b:3e:d0:2f:0c:09:5c:4e:31:
3b:65:22:92:8c:df:d8:47:5c:bc:0c:bb:39:fa:12:
9a:ec:8d:7e:2c:61:60:78:90:67:4f:05:e4:a4:0c:
5b:01:de:db:f2:70:84:02:7c:55:24:ee:e0:95:8a:
52:2a:be:44:81:3d:f3:77:51:1c:15:76:d4:5b:e0:
9e:2e:63:73:50:c9:8e:4f:7e:74:bc:f8:7a:4b:81:
28:8b:78:7f:4c:d8:da:b4:28:65:59:1c:7a:2d:17:
64:c3:ff:92:a8:40:bf:d8:86:e7:b3:8c:95:54:ff:
54:96:8d:3e:c9:66:20:14:59:46:26:44:99:eb:de:
ab:fd:e0:4b:fb:35:c3:b3:ed:d6:14:f0:57:91:5c:
76:9c:7f:f6:10:85:a9:4b:c1:f2:fd:66:38:6d:bf:
65:79:e4:f5:f1:5c:0b:7f:1d:38:48:43:c8:b8:b5:
d0:8f:0b:ab:fd:09:8c:14:13:47:05:00:59:5f:1a:
2c:60:bf:30:aa:04:bb:dd:93:33:73:29:0b:37:78:
cf:9c:28:a7:83:ae:9b:f5:f6:a2:1c:03:c9:81:ea:
b6:70:45:ee:60:5f:2b:7b:34:a7:4e:49:7f:48:42:
0b:2c:36:a5:4c:d7:16:30:fe:ae:a8:77:42:d5:9f:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:A0:C8:EA:DA:27:4F:3A:88:94:A4:4D:83:65:20:46:51:1F:48
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:83:92:24:80:78:49:2a:3d:06:e7:1e:6c:ff:b3:70:da:7d:
c0:1d:9b:e8:84:b4:6c:54:8f:cf:ff:25:47:8f:af:5f:59:32:
70:18:68:0f:e9:42:9b:9e:34:91:31:eb:69:e6:b6:58:5d:d7:
0b:d4:e8:fc:3c:ed:4c:5b:8c:35:30:8d:a3:2e:43:46:60:e3:
24:0c:c5:57:ac:16:18:d8:57:f8:9b:4b:f4:97:dc:20:90:18:
f2:b2:ec:9a:c1:c2:ed:4a:5e:df:39:a5:d2:32:8a:ee:7c:68:
06:12:16:2e:17:1e:e5:15:e5:d1:68:21:95:5f:76:6c:6d:87:
87:ba:5a:dc:c7:d3:54:f7:a2:81:ce:f7:76:b7:31:df:6f:68:
31:c3:5e:3b:31:79:52:f0:72:91:fc:9e:4f:f7:69:ab:49:01:
b9:db:ff:1e:36:1d:4c:92:1c:03:58:a6:d4:21:10:86:67:81:
cd:dd:47:82:82:1b:ab:63:8d:f5:78:9a:20:8d:25:a3:cf:06:
56:fb:3d:02:1d:88:ed:72:b9:d3:4f:5f:2a:33:df:f3:4c:30:
0b:fe:4f:73:99:61:90:e4:e1:6c:9b:79:5d:79:2b:8a:41:f0:
3c:14:0a:c9:0d:79:06:34:01:3f:dc:f3:6d:19:c8:d9:93:92:
5c:5e:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:24 2026 by rpki-client