Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: J/E4Bq1g0u+MUitg+lHhebRU3gFNVxhzwr4xulprwV8=
Subject key identifier: C7:F3:F6:CC:31:7A:DB:12:73:B5:73:A0:03:0F:63:F9:74:BF:B6:B5
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019D9BF54BB376B38550CBD9C1DF5F43193C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0C1A
Signing time: Fri 17 Apr 2026 15:00:37 +0000
Manifest this update: Fri 17 Apr 2026 15:00:37 +0000
Manifest next update: Sat 18 Apr 2026 15:00:37 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: F5DfmwL/Bnj4Vo8ik0zAHAvAP+gDKAKPardD+LH55eY=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:4b:b3:76:b3:85:50:cb:d9:c1:df:5f:43:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Apr 17 15:00:37 2026 GMT
Not After : Apr 18 15:00:37 2026 GMT
Subject: CN=c7f3f6cc317adb1273b573a0030f63f974bfb6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:2f:94:fe:54:53:a9:1d:c9:65:f6:7a:84:
e5:60:66:a1:a3:df:ff:7a:c1:63:08:c7:3f:43:08:
4a:47:68:41:84:85:5a:30:4f:b0:56:09:88:61:31:
58:c2:0f:27:d3:41:f5:9b:43:4b:bd:7a:76:fe:92:
c3:c8:8f:ba:02:a9:25:58:1a:0c:27:df:4b:0e:bd:
bb:53:e1:3a:a3:fb:d7:15:af:59:6c:39:6f:66:56:
f7:6f:55:8e:fe:93:56:57:40:3d:67:17:f1:12:fe:
18:6c:39:05:c3:20:bb:94:36:28:54:ea:d7:20:43:
00:ba:18:38:10:12:ec:11:5c:bf:ab:89:03:5c:8b:
c7:03:5d:04:63:33:2f:45:7a:c7:bf:e3:ea:7e:45:
39:e4:55:dc:e2:69:aa:09:31:f8:9e:cf:05:48:07:
f3:73:7b:b9:ed:ee:02:59:1a:74:90:79:72:3f:ab:
d2:23:84:d9:e7:87:3a:d7:26:2c:c0:f3:05:fc:3e:
c9:78:69:43:22:f8:54:1d:7f:c9:f0:a3:0c:66:ce:
a1:c0:08:bd:de:d3:8c:20:d7:01:7f:80:17:9c:9d:
c6:9e:69:57:97:13:b6:ec:b7:bb:24:58:91:bc:e9:
f4:d6:81:07:4e:f2:9e:23:b9:3d:5e:5a:53:e4:e8:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:F6:CC:31:7A:DB:12:73:B5:73:A0:03:0F:63:F9:74:BF:B6:B5
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:a9:67:9d:c7:29:d8:e7:a6:1f:67:41:9a:5e:e4:a2:4d:
74:40:c8:a5:fd:fe:4f:b8:f6:9b:cc:5e:b9:c9:39:ef:7a:5a:
c3:2e:e9:67:0d:60:6e:db:0d:1a:9f:c9:21:7d:ac:04:f5:c0:
ef:a1:7f:c6:2c:3d:6d:5e:41:76:38:67:92:ce:f0:97:fa:75:
5d:65:29:3f:06:f3:5c:2c:a1:c6:f8:4e:7f:99:21:e5:5a:e1:
03:7b:cc:60:31:d6:75:d8:6c:4e:29:cc:2e:4a:ac:f0:07:af:
46:4e:a8:f3:4b:70:9f:4b:29:15:29:00:55:64:a3:aa:32:7d:
67:b3:65:bc:e1:13:ea:82:00:da:2b:91:ab:94:4f:90:2a:a4:
10:ea:58:81:2d:df:2e:83:19:66:e8:f3:ef:44:ab:25:90:30:
a5:ff:a7:71:11:18:a5:10:d3:34:01:0c:bb:3d:a2:29:05:ba:
4f:f9:57:ac:d5:fc:9a:8f:de:86:c3:da:48:df:ed:32:71:6b:
9b:4e:d2:05:3d:1e:52:fa:d7:b1:02:bf:3d:4e:d9:c8:f6:da:
a6:79:f6:a2:96:12:cb:f4:c1:7a:31:3f:97:54:7a:38:fc:02:
5f:8c:dd:dd:16:d3:68:f4:d1:58:dd:de:6b:6a:fc:6b:43:2e:
5e:98:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:42 2026 by rpki-client