Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: rviXENwM/k+eeNuFP25OOfQiw6VWLZ9fFLgUo+w0PG4=
Subject key identifier: 0C:8E:FE:27:E1:3B:28:9E:E8:54:06:1B:7F:E1:94:1B:77:CE:A1:40
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 019D99CFDA4D375D07F71E36651D3E3FEE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 1849
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: 3HJP9J++6fgZobN1wqIJG0DnCEi9iDN8+ADt1J5bc8I=)
2: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (hash: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:da:4d:37:5d:07:f7:1e:36:65:1d:3e:3f:ee:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=0c8efe27e13b289ee854061b7fe1941b77cea140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a4:e3:bb:f5:e0:e8:65:98:4d:98:f1:a7:58:
c2:81:ca:e9:7c:38:55:19:be:0c:42:df:b7:3a:0d:
a7:ff:06:fa:bc:03:0c:c2:df:cd:03:ab:ca:47:68:
d2:9d:e1:69:2f:35:18:20:37:97:2e:b9:ef:9f:96:
f5:f9:a6:ed:25:53:8d:80:32:f6:25:36:25:56:dc:
06:f3:e5:9e:0d:15:4c:a5:21:b4:86:a3:b8:9d:a9:
a2:01:af:2a:a9:d8:89:55:7a:b4:68:61:e4:2a:86:
09:0f:b5:ef:be:70:45:98:ff:13:6e:22:39:d4:5e:
4b:6c:98:5f:9e:31:90:04:ff:65:b4:25:93:9c:fb:
25:f2:18:be:df:32:b0:52:42:ed:11:ef:03:a8:ed:
f8:66:13:67:13:a1:d4:7b:10:d2:08:36:47:da:06:
c0:d4:79:c1:2d:73:49:a5:88:32:fb:04:ce:af:2c:
40:62:d1:0c:77:c1:31:d9:4d:d0:ad:b0:5f:7c:4a:
b4:e4:28:fd:a9:cd:be:3a:62:d8:ce:88:f6:a7:1c:
58:f9:8c:39:a8:07:bc:ad:53:8d:49:92:a7:66:c6:
39:90:88:7d:c6:fe:0f:41:d2:41:55:b1:e0:07:6e:
ff:db:43:79:96:33:38:52:f5:03:5e:10:07:09:27:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:FE:27:E1:3B:28:9E:E8:54:06:1B:7F:E1:94:1B:77:CE:A1:40
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:5e:63:38:d8:6f:02:0a:84:8a:7d:3e:a7:ae:4c:2f:51:
0e:6e:bd:4e:50:63:95:f8:4c:41:0c:ca:ac:7e:ca:c3:0a:ff:
b1:80:92:78:3e:59:c3:43:70:ae:dd:7b:34:29:3a:26:10:9a:
f3:1e:bd:96:7e:da:f2:19:04:58:d6:cc:6d:f1:ba:90:d9:39:
f0:92:83:ce:7d:a3:8a:93:cb:bd:6c:74:8b:11:1f:1c:17:4c:
59:a8:18:31:3a:33:c2:37:dd:cd:65:c5:dc:e9:47:b4:95:97:
b1:0f:11:f1:c7:4a:95:48:a6:91:1a:60:3e:5e:c4:da:48:21:
1c:fa:9b:74:4e:39:d2:b1:5f:b0:2f:67:9f:95:8b:cf:c0:bd:
ec:3d:b8:62:db:a0:79:7f:fe:af:de:96:40:0b:74:f4:84:e2:
ed:e4:24:c6:6d:0e:1d:60:b3:9b:1d:26:f6:1c:a4:fb:b1:57:
01:b0:01:0a:b9:5f:9d:65:90:81:5c:4e:ab:47:74:33:5a:a3:
f3:bc:98:78:d6:ad:c9:e3:36:cd:44:80:af:e1:16:30:6a:9e:
70:7d:c8:89:33:ce:2e:59:bd:e8:4e:58:4c:04:27:0a:fe:d8:
eb:c7:a7:ab:8c:77:e1:64:17:22:68:38:44:06:cb:25:93:ea:
56:ab:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:22 2026 by rpki-client