Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: 91gOWreS70ZRFzOA4OThSaQ+7fBCbYzTBBiFMVVWLFY=
Subject key identifier: A8:CD:32:09:37:A9:1F:88:E1:B0:C1:E7:77:09:DB:5E:AA:B7:D9:3B
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019DA453FE85A051ED7F97FC0E5036F69BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 06:01:01 +0000
Manifest this update: Sun 19 Apr 2026 06:01:01 +0000
Manifest next update: Mon 20 Apr 2026 06:01:01 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: yC7vI0tCKVMZD2QGqIntxcT71i58krpo1LAHns0kqZM=)
3: xc0me2KbQgULMNxKZvuhScRUfCs.roa (hash: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:fe:85:a0:51:ed:7f:97:fc:0e:50:36:f6:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Apr 19 06:01:01 2026 GMT
Not After : Apr 20 06:01:01 2026 GMT
Subject: CN=a8cd320937a91f88e1b0c1e77709db5eaab7d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:59:ae:b1:77:3a:c7:b7:59:70:a8:c5:31:
eb:3f:55:78:d1:21:da:cd:85:69:cd:43:a3:28:38:
2b:c0:90:60:01:87:4a:15:cd:01:ba:29:55:ae:08:
6f:2f:fa:31:2d:11:b8:a8:18:04:58:94:83:5f:07:
4e:7b:de:1a:5a:f9:fb:2f:22:ed:44:4d:31:42:3e:
93:fa:0c:48:66:14:9e:1e:ad:ba:39:fa:5b:93:85:
99:39:28:8c:b7:c4:d0:a8:9f:91:20:ef:dc:a9:23:
87:cf:a5:5d:2a:98:5f:05:1d:b9:0e:8d:31:95:25:
c8:53:be:d8:59:75:58:b9:03:2c:a6:0c:38:22:62:
36:01:ad:48:68:7c:61:c4:e4:74:12:cf:f9:2f:a2:
cf:5d:20:ac:d3:99:61:9a:3c:90:26:9c:58:e3:c3:
d8:a6:21:cf:f7:01:dc:d2:82:e9:d7:0c:83:c0:59:
55:a8:9b:cf:16:1d:e6:29:11:21:25:50:0a:d4:d2:
46:ef:9e:e7:4b:a1:30:40:4a:b5:0e:9d:1d:f7:c4:
3c:2e:c9:14:1b:99:29:da:46:c3:48:27:25:7c:8c:
83:1e:39:30:79:a8:3c:f0:7d:5a:73:8f:eb:43:93:
e2:6a:99:df:ac:84:d8:5d:f3:4c:85:7f:cd:86:02:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:32:09:37:A9:1F:88:E1:B0:C1:E7:77:09:DB:5E:AA:B7:D9:3B
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5d:02:40:80:35:c0:ce:8a:a0:c5:ee:66:9d:19:f0:38:b5:
ea:4f:9f:2b:ba:fa:4f:b1:85:bb:18:fa:32:2c:79:03:c8:3c:
e4:c8:77:c3:d3:c9:ba:ac:28:23:6d:88:8d:6c:05:90:36:95:
d9:72:e7:4b:75:44:26:f4:64:84:21:fb:e9:68:dc:43:4f:fa:
95:99:65:f1:7a:aa:33:88:98:28:41:71:66:c0:42:fb:7b:dd:
b1:fc:32:f6:ff:0a:26:14:6f:5a:7e:4e:75:55:db:14:25:f5:
5d:aa:00:53:4f:eb:53:ce:ee:7c:c8:3e:37:6c:a0:e2:ba:34:
cc:65:88:1e:2e:21:c8:cb:9e:45:f4:28:d9:4c:0f:32:22:cb:
80:19:10:8e:4e:0c:26:75:8e:f1:3d:66:b7:64:5a:85:87:f0:
8e:2a:88:16:ea:50:8e:61:d4:80:29:18:73:d5:1c:62:ed:eb:
42:01:d8:36:a2:54:8d:0c:5a:28:07:4b:d8:29:3b:c4:78:65:
61:e5:6d:dc:fe:d2:59:0d:46:69:55:8c:5a:91:e3:7e:ae:0e:
ac:de:fc:77:a5:b7:66:5b:89:8c:d5:84:68:2b:4f:7c:bc:34:
99:b3:25:66:be:8a:48:6f:d0:a9:f0:45:ea:2f:d6:56:f2:71:
66:f5:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:47 2026 by rpki-client