Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: 650CSEKZzoW5QDPysHWVz0uwu8ezUZHI/K6EKGoMtu0=
Subject key identifier: D7:90:BB:A0:F3:05:62:E8:7E:75:1B:A6:56:B7:70:03:5D:80:50:5C
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019CACB4C33BAF977FBEB4E380C0ECA53643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1865
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: 1-wPMlW3QZMEwXIavR2Z5jC4eg3k.roa (hash: NkpNm8Hi0eM4z4zMLpTQA7y21YX/UXYTQTZzRYCggcI=)
2: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: +HB/yYzrf4IOBB3tt8tvbvNKkOS7+/7RqxZPCBx9QH0=)
3: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
4: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (hash: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M=)
5: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c3:3b:af:97:7f:be:b4:e3:80:c0:ec:a5:36:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=d790bba0f30562e87e751ba656b770035d80505c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:09:4e:b4:98:88:57:8d:cc:22:9c:8c:58:
52:79:01:93:e4:66:26:da:31:18:fb:d9:34:a9:4e:
90:0b:e5:28:1e:49:47:bc:f8:0e:15:f7:da:eb:f1:
99:40:3d:c2:9b:a4:43:19:45:a0:7f:9e:05:63:fc:
1a:9c:a0:cc:e7:1e:0a:10:12:26:e1:ae:7f:fc:49:
bd:d3:61:e3:ea:a8:04:37:e0:16:35:ee:6e:b4:f0:
1f:3e:64:97:35:c8:ca:01:6f:64:a6:2a:b1:80:70:
9b:d8:91:9f:c7:a0:67:70:3d:94:ac:4a:63:49:49:
41:bf:b3:2f:49:1d:98:99:78:02:63:3d:8b:2b:12:
71:0d:be:da:8b:a1:fd:e3:1e:5c:8a:17:71:fe:92:
2a:da:8d:f6:2e:71:14:43:f6:96:f1:27:78:aa:83:
4a:1c:fd:22:b8:1d:46:66:d8:52:82:76:17:21:9a:
fa:fd:b3:a7:50:6b:f7:14:93:f7:11:60:8b:dc:0e:
c4:26:10:d7:b2:ad:b8:8c:7b:40:79:c5:ac:fc:9f:
26:6c:1c:2d:d0:b4:80:82:9e:66:a6:f3:52:40:6a:
23:75:16:2e:be:b5:81:36:8c:c3:9d:a9:a9:3b:e4:
87:78:99:75:5f:f2:36:96:75:11:8d:3a:7f:df:56:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:BB:A0:F3:05:62:E8:7E:75:1B:A6:56:B7:70:03:5D:80:50:5C
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:75:a5:34:4c:4c:3a:3c:ae:77:77:28:35:76:17:aa:c3:8f:
0f:8d:00:71:b4:87:9c:9b:09:25:f7:d0:cc:b7:15:11:13:49:
5a:8f:ec:3f:e4:1b:a7:8c:56:53:81:00:f7:15:b9:32:88:66:
e5:9c:c9:ca:ad:7a:5d:6c:72:be:c8:d7:4a:14:00:b1:ce:f9:
4e:ef:91:61:be:3a:1d:b3:ea:5d:cc:6a:61:f8:50:e4:85:ac:
38:05:6e:8d:18:2a:7a:b5:8c:43:64:49:4c:b2:85:dd:af:10:
34:82:98:78:06:81:c9:ef:05:e7:d1:f9:dc:f2:ea:f6:84:8f:
f6:3e:09:89:57:92:02:de:39:91:b3:61:96:14:93:f3:0f:53:
39:3b:b6:99:f9:81:cf:07:f9:73:ad:fe:bc:12:ae:5b:5e:3a:
2d:fd:53:2d:41:8c:78:95:c2:a8:a9:9a:ae:d4:60:36:43:ea:
62:3d:85:72:83:20:cf:b9:c7:a3:3d:fc:28:d6:bb:0a:6e:82:
8c:9b:db:70:4b:6c:84:59:12:3e:84:58:f0:b3:81:5c:ec:87:
5a:50:88:92:57:00:9c:11:99:1a:e9:4d:9a:89:9a:4d:8f:a1:
9e:d3:f4:c9:2d:2b:26:c2:18:0e:2a:19:d0:81:e4:0e:88:e7:
da:02:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:31 2026 by rpki-client