Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: AV3/7+KXtGcrelH/QyyXnkENZWyq1jqrB/MXQyD8W5k=
Subject key identifier: B1:4B:F5:A5:E5:D3:98:0F:9D:7D:1F:FE:16:F2:A1:50:98:47:62:F8
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019CAC46CDC24E5F0B120C887FD82EBE65A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: dWplJz434T6YJEzFrIP6Tpp6hGbmwDi/Rh3wJMMBftk=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cd:c2:4e:5f:0b:12:0c:88:7f:d8:2e:be:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=b14bf5a5e5d3980f9d7d1ffe16f2a150984762f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:30:27:f2:49:3d:63:df:c8:8e:88:49:91:
fe:e6:ea:72:1f:c2:b5:c0:5c:74:ec:b6:82:b1:54:
0d:5d:9a:51:53:1c:3b:8b:82:0f:70:a2:ff:9f:97:
da:a8:f2:77:b5:bb:2e:85:7e:b7:59:ce:0d:a4:9e:
62:32:0c:e7:3d:91:e0:bd:33:4a:c5:66:3e:73:6a:
be:a3:03:29:38:0e:03:1f:35:52:fb:8a:62:50:fb:
54:1e:dd:13:12:28:1a:2b:e4:7a:80:70:53:b7:ad:
c7:00:5c:47:0e:f1:e6:09:43:fd:a7:ef:22:a6:1f:
b2:56:f4:c8:6b:d4:64:12:bc:0e:92:c7:d6:c1:57:
df:04:8f:5c:d5:c3:57:96:c7:73:55:e2:c1:b6:fa:
e3:0f:e5:35:54:46:36:14:16:90:8a:6d:87:b0:3b:
2d:79:f7:aa:74:ef:4f:63:db:06:6b:c5:9f:5a:fd:
fb:7d:12:6f:1e:dc:bc:05:d3:52:32:fb:01:18:05:
a2:55:3b:ef:26:ec:2d:42:a1:04:0b:c2:81:60:f9:
87:de:50:f1:64:c6:f1:9a:53:8e:f8:e8:3f:b2:e3:
70:a0:5c:54:67:2e:36:92:b7:ba:aa:b6:5b:d6:bb:
d9:74:6d:ec:af:9f:ac:e2:3e:88:8e:1d:df:ff:54:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:F5:A5:E5:D3:98:0F:9D:7D:1F:FE:16:F2:A1:50:98:47:62:F8
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7e:5a:84:d6:12:de:c0:fb:8c:d6:17:2a:b6:ee:d8:7e:53:
a4:6b:7b:e6:58:82:5c:b4:ef:4d:c4:7f:81:1c:c9:22:6a:79:
e3:78:94:f8:d5:5e:64:63:ad:fe:89:87:56:16:a0:3c:73:a4:
5a:fe:91:bc:69:26:83:2d:4e:53:e9:5a:d0:0d:e6:1d:4b:48:
00:f0:8f:8b:ce:c1:5e:81:5d:78:1d:b3:55:7c:12:2d:af:9f:
94:ec:12:cf:fe:b5:f4:4e:8d:45:6c:f8:5b:88:14:9e:44:8f:
94:63:0f:ec:4e:7c:ca:3a:45:ae:92:56:37:b9:2b:65:0c:7e:
ab:30:78:54:1a:7c:1b:1f:fb:08:56:95:e7:bf:01:7a:b8:9b:
6a:57:11:c2:91:56:ec:2a:13:9d:6f:fb:72:d6:e3:d9:4c:b2:
9d:7f:bf:98:1c:fc:6a:1d:80:c1:be:2a:0c:fd:d1:0b:c6:99:
cc:56:05:c5:be:bd:c1:92:24:30:5e:be:d6:7b:05:b1:a8:bc:
a8:f2:ff:a8:33:04:66:9d:16:1d:ab:de:59:ba:ab:e8:e6:3c:
95:0b:8e:c1:c2:3b:da:6d:8e:9b:7a:47:dd:37:1f:d9:13:27:
c6:fa:0e:77:7f:6f:37:9b:4c:60:94:d5:a3:6d:60:bb:a8:86:
b1:45:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:06 2026 by rpki-client