Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: WY4/YGNh5DB0X7mHvflqfbXRw8rD3CGMEPL8oC3nWzQ=
Subject key identifier: CD:07:98:BF:50:55:40:FF:13:A1:D0:13:8E:7B:AF:2E:B7:54:74:E4
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019D9BBEA0D1EF10B148C7A42913B315770A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 0173
Signing time: Fri 17 Apr 2026 14:00:54 +0000
Manifest this update: Fri 17 Apr 2026 14:00:54 +0000
Manifest next update: Sat 18 Apr 2026 14:00:54 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: ytgjM6H/HNm+u2NI8nmTrKAEFljNmO8sYFNSAGuU+SI=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a0:d1:ef:10:b1:48:c7:a4:29:13:b3:15:77:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Apr 17 14:00:54 2026 GMT
Not After : Apr 18 14:00:54 2026 GMT
Subject: CN=cd0798bf505540ff13a1d0138e7baf2eb75474e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:a7:2a:e4:d9:8b:fc:08:10:fc:cb:8f:df:
51:7d:49:68:85:18:e1:15:30:02:b0:8e:04:93:a5:
c4:a8:b9:da:38:62:6a:51:04:ac:c6:2d:83:5b:e1:
31:32:76:b4:51:bc:2d:f1:70:4e:e5:95:01:f1:dc:
35:cf:d4:16:a3:5a:aa:d8:09:03:5d:aa:e0:5c:5c:
7f:13:d5:f6:4e:fa:43:d6:5d:fd:30:8f:e6:e4:00:
b4:db:c4:5b:3f:d6:be:e2:e5:93:f5:81:18:2f:a0:
a0:84:73:29:db:c1:c1:6f:7d:4e:e2:54:d2:6a:38:
dc:7f:33:c1:e5:26:04:36:4b:1b:4b:8e:cc:06:48:
c6:b6:a5:6a:c7:94:e2:2b:45:2c:49:6d:aa:ec:8c:
71:b2:55:57:f6:f5:0b:6c:26:2c:1d:03:63:78:ec:
19:01:94:50:15:e6:54:77:77:73:4d:bb:fa:9b:23:
2f:b1:3a:56:b4:00:30:8e:bb:53:bd:25:58:a0:af:
88:31:78:ca:12:18:f6:12:b4:86:a8:91:77:8a:f6:
fd:30:e5:c2:f0:55:e5:bd:ae:9c:23:11:db:a3:69:
54:d6:1e:a0:35:9c:eb:3a:1d:42:55:af:ad:3c:05:
98:11:43:62:b6:5a:87:12:8d:b8:f5:92:c9:6d:b5:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:98:BF:50:55:40:FF:13:A1:D0:13:8E:7B:AF:2E:B7:54:74:E4
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:b9:ab:64:d9:37:93:ff:54:97:5b:c1:3e:8f:77:bb:c0:
ae:dd:56:22:c7:51:dd:c5:f1:d6:11:ca:3d:bf:cb:2b:e1:e9:
8f:33:a6:21:4c:be:8d:46:54:21:93:1a:e7:e2:8d:c8:9c:b7:
7b:4d:42:4a:a0:7d:ab:ec:a2:d0:54:3c:e5:e4:ce:03:29:9e:
b4:3f:34:79:86:fe:5a:f4:9c:2a:8c:60:f9:c8:dd:ea:32:2e:
56:c2:2b:00:e8:34:53:e2:0f:97:67:c5:85:76:fa:bd:02:47:
69:89:7e:c4:96:de:ed:a3:5e:d4:6d:19:72:e9:4e:34:b9:22:
4d:e8:c3:33:73:3c:ba:6a:05:87:32:77:82:f3:26:9b:d6:da:
19:6c:62:5a:43:c7:ae:43:38:c0:00:7b:50:8d:0b:28:66:87:
b6:68:68:ed:b0:df:e8:43:0d:05:ee:30:4f:50:a6:48:ce:e6:
18:70:48:d3:1f:01:66:1d:3b:dc:b0:86:08:4b:83:04:4f:8f:
9c:49:48:b6:51:01:6e:a6:dc:f9:75:4a:14:16:6d:b4:c0:d1:
84:c1:f2:fd:0c:7d:9a:dd:6d:09:d2:fc:0e:af:cf:a0:bd:ec:
cd:45:5a:9d:e6:d7:db:d1:3f:88:22:35:90:de:84:66:b5:e4:
c9:a7:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:32:50 2026 by rpki-client