Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: +wHuW0vE+8b0vNF1Jpt2uSX+h11+xmAt0MADZsnIlOw=
Subject key identifier: C1:60:54:67:B0:E6:74:99:1E:29:33:69:68:CF:BE:23:BE:8C:7A:1B
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019D9A3E5511242FDB28F88C5D3D25510FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 18E0
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: 1-wPMlW3QZMEwXIavR2Z5jC4eg3k.roa (hash: NkpNm8Hi0eM4z4zMLpTQA7y21YX/UXYTQTZzRYCggcI=)
2: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: kBV0gSsym9nNXRNV3HzVnz50I5WUL75C+AMpU0QmFvk=)
3: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
4: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (hash: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M=)
5: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:55:11:24:2f:db:28:f8:8c:5d:3d:25:51:0f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=c1605467b0e674991e29336968cfbe23be8c7a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:7f:99:57:8e:f1:3c:c0:fa:cc:96:8a:a8:
ae:15:46:6a:84:c6:ec:29:63:fa:d0:5a:c4:ca:2a:
93:24:fc:b9:8a:d6:25:b9:0a:d3:37:70:c1:38:2e:
f3:c7:9d:05:37:44:d4:71:63:ba:0e:9c:11:e8:85:
f3:8b:8b:13:58:14:90:64:40:57:bf:35:af:2d:2a:
af:dd:16:c7:5d:c9:38:df:72:39:3a:dc:70:7f:a1:
6d:11:7b:15:16:e7:9c:3b:45:75:70:c1:12:8f:6b:
99:15:58:64:10:f0:d9:99:b3:b6:0f:a3:63:bb:e9:
51:4d:79:b1:77:25:de:de:58:0c:c1:73:48:c8:6e:
b9:90:ae:e7:b2:e4:c5:b6:63:a1:c3:3f:5b:95:de:
04:a8:fa:23:3c:19:94:9e:df:65:4f:24:0d:95:b5:
ae:cc:b4:8d:e4:5d:81:4b:5d:13:94:52:2a:8b:ff:
e5:f6:80:4d:9f:0f:e3:56:86:0c:4e:d0:50:ae:91:
05:6d:e7:4e:3b:60:da:6e:3e:02:f3:e5:71:c0:3f:
7a:66:ee:d4:77:89:21:46:69:be:00:94:90:29:59:
4e:ba:3a:75:78:7c:24:e9:ec:1a:51:45:f7:f7:a0:
7c:05:18:13:cb:f0:b9:0e:78:e8:f6:1d:93:44:52:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:54:67:B0:E6:74:99:1E:29:33:69:68:CF:BE:23:BE:8C:7A:1B
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3e:2d:ff:85:ab:41:21:13:00:da:73:3f:57:a8:66:b4:63:
01:3b:bf:39:0e:ba:ae:42:0b:ff:72:44:14:50:fd:01:0c:52:
ee:2e:3a:39:4d:c3:3c:05:71:1b:86:cb:a5:b3:d6:4c:e6:bc:
45:c2:65:18:b0:60:05:87:77:6b:d4:7d:a9:49:7f:b3:3f:38:
63:08:8f:60:43:fa:24:14:f2:14:12:ae:e0:5f:eb:0d:f0:73:
06:7c:c8:d3:25:2b:16:60:7c:93:3a:ad:a8:fa:12:8e:ce:a2:
27:58:33:10:ba:bd:88:ac:c1:56:90:79:36:2f:6e:1c:56:67:
4c:ab:6e:30:3a:d5:3e:fe:95:2e:2b:41:c8:c2:cb:af:9c:72:
e9:05:2e:af:83:ad:b6:dd:02:50:d0:c9:ae:7f:d1:a7:90:f3:
c2:ec:07:0c:c6:52:f7:05:77:c9:4e:0a:b9:68:a8:1d:ff:33:
6a:ac:be:c5:90:c0:65:20:5e:79:bf:75:0a:fd:05:76:f7:60:
9d:09:af:bf:52:83:c7:22:1e:58:a7:eb:eb:0a:86:1c:c1:a9:
eb:10:aa:36:75:8b:8a:69:d4:0c:12:81:d2:0a:fa:bd:03:54:
4d:29:a9:2a:a0:3b:0a:27:66:d5:c7:ad:41:09:35:b0:63:d9:
6e:b7:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:27 2026 by rpki-client