Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: QC+C8ZB5QHSMIYekFNk6Xt1k/67Bcd30nOpj/EUHrWo=
Subject key identifier: 86:0F:12:36:0F:4C:28:BB:70:70:81:37:6D:FC:30:05:56:97:F1:E0
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019CAE6C2AC0770BFF3EB7B7BADEA152D351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 0310
Signing time: Mon 02 Mar 2026 12:00:50 +0000
Manifest this update: Mon 02 Mar 2026 12:00:50 +0000
Manifest next update: Tue 03 Mar 2026 12:00:50 +0000
Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: Rj4bwM+1n+qLEGQnNLXKSgXvtQ29n11j3RqQAh35B6E=)
2: HTsrx9Wfp4NlogQqyGFERMCHjME.roa (hash: qUCFvpFwZ+rAEW4PKzOQClC2RRU+DPcjwot7U4Nm7cE=)
3: zFObHnSFRVBVKi03HHp_LdnUjHI.roa (hash: VrSh3FAklnFvAI/Em5GvNcJNNwDYjrpoqpMUk6pPMuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:2a:c0:77:0b:ff:3e:b7:b7:ba:de:a1:52:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Mar 2 12:00:50 2026 GMT
Not After : Mar 3 12:00:50 2026 GMT
Subject: CN=860f12360f4c28bb707081376dfc30055697f1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:71:7a:df:59:a7:2f:b5:84:06:1d:db:be:
30:08:46:17:45:29:ce:63:d3:59:e7:20:a2:ae:63:
9b:3b:1a:b0:a3:c8:7e:6d:a7:b7:8f:5d:8d:45:ac:
1e:b1:0b:5b:ee:86:6c:68:98:5e:69:35:21:f5:6b:
c0:20:ae:5e:09:f7:f5:dc:e2:0a:57:9f:d6:89:66:
43:a3:6b:ee:28:9a:fb:d1:16:4d:60:c0:62:b1:06:
36:6c:d0:3b:6f:0a:f1:84:6f:38:24:2b:bd:ac:e9:
64:40:7c:25:4b:77:1a:45:b0:90:55:38:cc:1b:36:
60:b2:b0:10:f7:fb:0f:c0:f8:b0:98:d3:8a:6a:15:
3c:d3:c0:d8:1c:11:b7:00:55:f2:b6:aa:2e:4e:05:
5c:e7:8e:68:e7:fd:1b:3e:67:39:27:17:80:ac:85:
65:a7:f1:1f:21:5c:bb:0d:a6:14:d4:6d:31:a2:af:
a8:32:e4:9c:95:5e:3c:7b:a5:fb:43:97:da:61:d3:
ff:63:76:fa:01:3d:1e:c0:30:26:73:bf:43:32:c4:
30:18:c4:aa:d2:3c:19:27:37:26:2a:45:b6:a0:52:
2a:3c:ea:21:f1:74:84:83:d6:00:25:84:f1:ce:10:
7c:84:a4:3e:29:a9:4e:35:0a:fc:29:fc:cf:f3:23:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:12:36:0F:4C:28:BB:70:70:81:37:6D:FC:30:05:56:97:F1:E0
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ad:e3:e2:83:71:25:81:1d:3d:5a:fb:44:a3:7f:a1:9b:54:
d7:fe:87:25:3a:59:2c:36:8e:db:56:06:cc:f3:28:43:83:e2:
56:4c:52:18:86:59:3f:04:c7:5a:68:c8:f3:bc:42:c4:00:7c:
e0:f2:14:ec:80:ae:ee:aa:37:0b:ca:00:18:37:10:92:3b:bc:
32:0b:7b:e9:13:d7:5b:db:56:43:c1:fe:ca:4b:67:94:5c:71:
c1:32:12:3a:03:06:03:d5:ed:cf:4f:00:e1:44:58:ab:6f:8c:
0e:d7:af:ec:8d:e0:1d:97:f7:51:4b:09:17:ef:6b:9b:18:cd:
66:c6:1c:0f:72:8a:a0:d5:bb:41:3e:e4:04:65:8f:20:f2:c3:
fc:e7:04:7b:c2:01:44:85:94:2e:ab:29:65:de:67:90:e5:23:
9b:2e:40:8f:dd:32:ca:28:0e:e6:d8:b5:af:13:33:a8:d7:da:
b9:4f:03:fa:79:e7:de:95:16:e6:00:ab:68:2e:4f:fb:e2:ba:
88:e0:f7:6d:a8:93:68:cb:1d:4b:b5:8d:b0:2f:e7:4a:a0:90:
3f:e2:db:0f:0c:fc:1c:75:20:d4:61:b3:f9:fd:3d:a2:2c:3e:
96:7e:77:df:2e:8b:7b:43:d9:bf:ff:98:d7:1b:e3:a2:df:ec:
7e:e5:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:45 2026 by rpki-client