Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: y0kbowZ+SEXimIAw1nws4H+LzhLGZMvaCpjbTHZEmHs=
Subject key identifier: 40:BA:FC:E2:67:0E:D2:6E:01:CD:E9:E5:34:D8:5D:33:4E:31:7A:FA
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019D99998B7CE192856C7456F5236376FF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 032C
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: jvwlnD+NjB5cRbKuiJcPNkIWjruFqBuUiFb3vw8v82k=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8b:7c:e1:92:85:6c:74:56:f5:23:63:76:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=40bafce2670ed26e01cde9e534d85d334e317afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:42:01:a9:8f:d7:c9:93:69:af:04:21:2c:
93:b1:48:26:3a:3f:17:09:90:60:5c:b3:21:3f:b4:
14:e5:42:4e:97:39:fe:16:35:0a:f2:81:07:8d:6a:
62:72:98:81:c1:fa:c0:c8:73:dd:ae:e3:9a:af:43:
dc:cf:b6:92:2c:b5:9f:bf:a6:fe:ae:4e:7e:5c:ac:
31:5b:e0:9e:22:7d:54:c0:41:f7:0b:68:fb:2c:bb:
59:17:7f:38:52:a9:73:49:91:1d:a6:4e:c0:79:3d:
6f:44:0f:59:3a:3a:5b:a2:cd:3f:e4:8c:6e:1f:73:
b9:66:15:37:fb:5c:17:3f:7f:4f:3a:07:4e:2a:81:
80:ab:83:be:5a:5d:fe:67:59:60:eb:1f:df:be:c9:
53:0a:3e:46:f2:ef:58:91:ed:e2:52:5d:c2:95:52:
9a:db:ec:98:9c:6c:e1:ae:0b:44:de:b7:3d:17:20:
df:f7:0b:8e:20:49:48:ee:49:89:3b:a2:d0:20:98:
58:85:d7:c7:c2:d6:d1:22:d5:b8:53:e8:89:4d:4b:
cb:87:d4:53:e0:82:94:31:03:42:0f:7d:d3:f8:04:
75:cb:2f:64:37:d9:04:14:69:56:23:ff:aa:23:66:
5e:1d:49:67:8e:5c:cf:05:1b:48:b3:47:25:f5:ec:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BA:FC:E2:67:0E:D2:6E:01:CD:E9:E5:34:D8:5D:33:4E:31:7A:FA
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:40:8c:b8:71:0e:f8:ec:28:00:87:c4:a7:37:a6:c9:2f:
e8:78:32:e6:b0:82:68:80:23:72:fe:24:15:37:65:2a:aa:87:
ad:8f:cc:0a:d9:03:7f:ea:3f:01:48:a9:74:2b:85:46:02:76:
ee:76:d6:4f:b6:68:62:fa:4a:20:b2:92:57:94:a0:6f:81:0a:
1f:cb:a6:76:94:be:fe:e1:46:db:06:8e:b1:26:8e:bd:b3:ce:
95:cf:85:a0:3d:69:2d:07:d4:d7:d1:43:a7:11:81:10:8e:a3:
af:84:41:d2:40:29:12:08:d6:19:ef:52:a3:c4:8d:0e:39:e6:
96:00:f3:84:0c:7c:59:19:d9:20:49:d7:4c:8c:75:41:e3:c2:
3c:86:8f:8a:68:e6:a7:7f:3d:c6:b7:62:b3:04:ce:2d:48:f9:
45:a6:6a:93:01:3d:cf:c9:e7:18:a9:f2:89:6f:0a:02:97:16:
1d:6f:98:d5:e7:86:90:49:d0:06:bf:12:f4:bc:10:f2:75:fd:
fa:da:dc:77:0d:46:50:6b:04:b0:2e:99:57:57:cf:fe:45:d4:
59:76:1a:2d:92:21:8c:19:8a:e0:b8:47:f9:72:b3:d6:e1:a4:
05:e6:7b:bb:12:09:61:44:43:a1:e8:1b:db:7c:b4:7b:4c:04:
d6:33:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:49 2026 by rpki-client