Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: ZjafHHgbKmeNh9v13drcAoIxP5A3JiYrnvoxIA9zIXY=
Subject key identifier: 1B:31:77:F6:7A:64:6C:7A:65:41:90:B7:23:A8:CD:A3:F5:3B:DC:04
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019D9BF59EC40C047D5C9DE2D61430388E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 038B
Signing time: Fri 17 Apr 2026 15:00:58 +0000
Manifest this update: Fri 17 Apr 2026 15:00:58 +0000
Manifest next update: Sat 18 Apr 2026 15:00:58 +0000
Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: 150iLUNBaR9Z4gdlCehrjUPi39tHKFOSqrSOW+NymOQ=)
2: HTsrx9Wfp4NlogQqyGFERMCHjME.roa (hash: qUCFvpFwZ+rAEW4PKzOQClC2RRU+DPcjwot7U4Nm7cE=)
3: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (hash: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:9e:c4:0c:04:7d:5c:9d:e2:d6:14:30:38:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Apr 17 15:00:58 2026 GMT
Not After : Apr 18 15:00:58 2026 GMT
Subject: CN=1b3177f67a646c7a654190b723a8cda3f53bdc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:b0:1d:2f:2d:0d:ca:02:a1:ce:b3:2c:0f:
20:07:c5:45:4b:37:5b:0e:6b:23:c5:ec:53:a6:f2:
d9:5f:2b:e9:e0:01:69:d0:14:36:d4:ac:f6:bb:8b:
87:f1:3c:56:7a:bf:87:24:2c:b5:13:fd:00:63:f2:
e7:c8:40:f4:90:df:84:49:d4:56:30:10:f8:c0:a1:
d3:e7:cf:d8:97:3e:06:41:3d:63:0d:c2:42:8d:ee:
54:98:b6:d3:cd:3b:61:68:26:73:bf:0e:4c:f4:bf:
6b:ef:ba:4c:8c:47:47:92:fb:20:f2:f2:f3:54:43:
db:b6:0d:c0:11:aa:51:d6:0e:75:4e:86:4f:9a:c4:
ce:44:c0:28:b1:1e:f4:62:c7:2c:17:48:23:4e:d7:
2d:b4:b9:95:7f:04:3d:69:83:5b:55:ea:07:ff:77:
55:31:81:bc:43:30:49:1a:22:17:cf:dd:b9:0f:f3:
2a:c6:7a:95:e9:67:0a:75:05:61:b0:b8:f9:64:c1:
06:d5:75:51:b0:17:a5:41:74:cf:a1:11:73:84:34:
fa:37:b4:d0:aa:2b:7c:5f:43:ea:69:7d:f9:1f:44:
a2:72:10:6f:0d:03:70:ab:a3:21:a7:5f:68:58:ae:
a2:bd:be:bc:4a:56:ab:de:54:e2:55:9c:1a:27:91:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:77:F6:7A:64:6C:7A:65:41:90:B7:23:A8:CD:A3:F5:3B:DC:04
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:44:bd:19:46:1d:62:75:fc:13:be:ab:e1:fb:b4:ab:1b:56:
bc:b9:a1:86:3d:eb:39:f3:17:1c:ba:a1:98:be:2d:26:ea:27:
46:56:45:63:f8:e4:92:d5:30:74:cf:4a:df:07:8e:c0:29:9f:
c4:d8:31:19:be:64:bd:2c:2f:27:f0:d2:a7:24:46:7b:07:1d:
1a:23:a2:27:a9:21:d8:8f:c5:08:94:c8:e1:a8:d4:32:1f:3b:
29:93:08:eb:f9:ec:9e:d6:25:e2:37:b8:18:f4:68:92:a5:00:
78:a7:26:64:12:9f:8a:72:89:58:17:2f:89:27:ff:74:b6:50:
de:5d:3c:da:bc:81:ba:fc:6a:dc:f7:0d:2e:78:f6:e1:7e:0f:
6f:b3:26:cd:ab:0d:5d:63:d4:ff:f4:1e:2b:6c:ec:8e:41:6f:
8d:d4:b2:ad:15:e4:ef:0a:9c:4b:de:29:8d:e2:2a:fa:bf:19:
98:f6:4a:8f:2f:0f:18:2b:59:de:c2:c2:9b:00:3c:13:de:7e:
a7:d5:7b:67:dc:f6:93:2a:47:3f:90:c0:c1:f9:15:0c:81:9c:
3e:3f:7c:a5:e1:c6:ca:ad:ea:d8:ea:d0:2f:d0:97:de:7d:50:
03:41:06:7e:b7:a6:d5:77:9f:b3:bc:fa:ea:0d:49:ed:de:f5:
bd:b8:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:59 2026 by rpki-client