Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: Y1oDrA3Oce9k8q3UAVl7gCArC/cj2cN9rE3dnHd90Uo=
Subject key identifier: 9A:A0:01:EC:7F:EB:03:4C:45:E6:C3:66:AF:EC:3F:52:37:68:2B:A4
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019D9A06E240705C6767DBBF8E40EDCBB0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0C19
Signing time: Fri 17 Apr 2026 06:00:35 +0000
Manifest this update: Fri 17 Apr 2026 06:00:35 +0000
Manifest next update: Sat 18 Apr 2026 06:00:35 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: f3Bd31hToWhctik6FqbfkO1wlgLujsVNAvIeZ0oGBO4=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e2:40:70:5c:67:67:db:bf:8e:40:ed:cb:b0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Apr 17 06:00:35 2026 GMT
Not After : Apr 18 06:00:35 2026 GMT
Subject: CN=9aa001ec7feb034c45e6c366afec3f5237682ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:01:01:05:9f:37:9c:68:ab:86:f6:4e:7a:
e1:1c:b6:d5:ad:10:f5:54:68:8a:28:99:a3:a1:e0:
5e:a4:4c:f0:77:2c:7c:bd:68:98:57:2b:1b:10:aa:
89:30:dd:03:b4:d6:62:01:3c:40:f0:cc:3b:61:69:
18:1b:a3:ce:8e:1c:0b:a0:30:b1:7c:f4:42:69:6e:
90:5d:ce:cb:b1:e4:ff:09:18:90:ec:25:82:ee:79:
14:63:97:14:28:61:11:e8:a5:d7:d3:70:e8:66:5a:
58:37:ba:03:72:f3:af:ae:61:a9:54:b4:36:e6:1f:
9f:0e:63:7c:4a:fb:1b:b1:3f:98:c2:cb:c4:ac:9c:
65:45:ca:ed:68:25:10:a4:66:1f:7c:39:66:5a:22:
d3:5c:5f:a7:e0:dc:25:9f:f4:97:91:aa:9e:91:bc:
4e:13:00:45:e6:0d:1f:cf:0a:3c:c9:8f:f4:5c:23:
ca:c0:2d:c7:87:3d:e6:55:59:c2:e6:f6:f1:50:2b:
00:56:39:cc:6a:46:90:d8:2d:ed:41:17:dd:83:84:
27:1b:cd:7b:8b:d6:c2:4d:3c:d5:21:fe:88:6d:d9:
bb:23:a2:eb:fc:fd:dd:54:58:5d:9c:ee:3d:d6:b9:
68:13:f1:8a:d3:0a:c2:1a:31:2c:a7:c0:59:e7:40:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A0:01:EC:7F:EB:03:4C:45:E6:C3:66:AF:EC:3F:52:37:68:2B:A4
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:54:4d:8b:29:69:6f:fd:55:d2:64:6e:45:04:2a:37:d0:ae:
96:b9:05:c4:5f:8f:bd:21:ac:da:c5:32:d2:53:5b:41:ec:a6:
5c:68:dd:a1:c6:59:a5:bd:ad:18:20:fa:fe:13:56:20:ab:05:
5f:a0:bf:b3:cc:0c:fe:7d:ec:3b:d0:b2:c9:5b:dd:f9:bb:a5:
10:ff:44:94:22:c5:79:84:1b:3d:80:ce:29:80:12:df:4f:b6:
79:42:4c:d2:95:1d:00:7f:b3:8d:6b:8d:82:63:20:17:64:60:
c3:77:ce:29:7a:78:96:72:c6:5d:fe:ab:57:5b:8b:4a:c9:de:
ee:ee:11:7e:63:e1:5b:01:71:71:6d:b7:b5:e8:eb:e4:e2:eb:
e6:b8:dc:09:cc:06:d6:ef:5c:1c:ce:a1:3f:4b:d6:2a:e8:db:
9d:74:fc:8c:ef:4f:11:15:1a:8e:8e:f2:36:d5:b9:15:38:1d:
c4:da:96:c8:98:fb:44:0a:72:c2:72:12:04:ed:40:83:6f:c9:
ff:de:a7:19:3b:b7:82:07:36:59:0f:ac:ec:e4:58:e5:51:ee:
16:4b:a0:28:9a:51:34:68:8d:51:91:93:53:a8:a5:f1:4d:39:
3b:30:d5:d7:f5:66:9a:88:a6:4c:71:1b:93:d1:ce:87:a7:c7:
74:92:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:19 2026 by rpki-client