Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: G8tY2d0zY68RnTibhR4Rs/mgjYGmC/Yi4qCGe6h645o=
Subject key identifier: 1C:CB:94:7A:3A:F6:63:DE:08:1F:45:26:42:2A:9D:86:68:23:9C:84
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019D99D03C3B312B0BC1DBAD1330F83AAF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:54 +0000
Manifest this update: Fri 17 Apr 2026 05:00:54 +0000
Manifest next update: Sat 18 Apr 2026 05:00:54 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: F59LUHVtfjjNxIY5kFi8ucpTdmYsgiZfTLAV3UQtZAw=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3c:3b:31:2b:0b:c1:db:ad:13:30:f8:3a:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Apr 17 05:00:54 2026 GMT
Not After : Apr 18 05:00:54 2026 GMT
Subject: CN=1ccb947a3af663de081f4526422a9d8668239c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:6c:bf:26:87:3a:57:b0:be:4b:14:e7:62:
f4:6f:e7:c1:5f:03:77:1a:bb:e4:2b:a5:af:4c:c2:
96:c8:01:78:a2:4b:a9:c7:d0:eb:2a:c0:e8:e9:9c:
a4:d1:ff:c0:af:e2:04:76:6c:8e:fd:c8:4e:f0:3b:
a5:17:a6:4a:16:62:02:e1:9c:4c:a8:78:05:4a:a8:
5a:3e:f3:c3:c5:e1:92:b9:34:41:e4:39:8b:03:de:
95:7c:80:a1:73:35:a5:12:70:ab:97:8c:13:fb:ba:
64:0d:b3:90:fe:45:ec:8f:46:60:d3:30:91:c8:48:
9a:e5:ec:3e:fc:bd:80:27:00:c8:54:5c:0e:e6:00:
fb:f3:0c:ab:9d:f7:c3:79:29:57:8d:5c:6c:de:90:
5e:80:d7:b5:82:b1:f1:54:19:38:92:d1:cb:a5:54:
3a:1a:03:57:73:e9:06:54:27:a4:e8:ea:25:7d:ca:
40:15:52:47:73:0b:0c:41:1c:40:33:cb:2b:35:ca:
ca:74:2f:0a:3d:44:6e:4c:7c:6d:ce:ea:1a:54:72:
f9:1c:1d:2c:24:28:16:9b:4d:30:81:f6:e5:53:25:
0a:fb:fb:11:9b:fc:c1:79:c2:5a:a0:08:c0:19:b0:
3b:3c:0a:a6:c2:ad:c8:38:70:6a:c9:cf:ea:4b:2e:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:94:7A:3A:F6:63:DE:08:1F:45:26:42:2A:9D:86:68:23:9C:84
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:cd:f0:7d:3b:e6:0b:33:8c:1c:a6:33:f2:b1:e3:69:5c:
73:6d:b2:5e:94:56:e1:1f:42:19:b1:ea:bd:5d:56:70:0c:85:
36:9c:6c:8b:ca:e0:3c:47:0c:de:3d:66:62:17:df:ce:ae:3b:
2f:1e:8f:85:0c:00:47:26:e5:cf:c3:ba:8e:79:5a:fe:5b:05:
73:2c:63:1d:25:a8:b1:01:69:79:7e:92:a5:aa:de:68:3b:cb:
68:ae:ac:5b:1a:a6:ae:ec:74:1e:1b:1e:d7:5e:9c:8d:40:82:
85:bb:32:2c:e3:7c:33:be:41:6d:94:ab:6f:d3:d4:30:a1:08:
f7:a1:88:17:38:af:2b:c5:5a:1f:b2:de:22:26:0d:ba:46:d1:
bb:b1:d0:7f:5d:cf:d5:08:e3:ca:47:d6:0d:0e:b7:54:ff:14:
14:d1:9c:19:38:a5:5a:88:97:ae:cd:ec:43:65:91:14:d8:91:
d2:28:4f:41:e7:30:d4:aa:c1:af:75:1a:11:a8:89:e6:17:cf:
ad:b3:e4:90:ce:20:e5:b8:4d:25:5e:97:d6:09:b7:18:6b:f7:
7a:64:4f:4c:04:a9:49:3b:4b:89:14:c9:97:12:e7:e1:2f:dc:
4d:7f:d6:2b:74:d6:2c:61:ef:d4:a1:88:93:38:03:62:1c:20:
73:c4:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:24 2026 by rpki-client