Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: hxjW/M1bLLYC69YaWOXmv/CIE2tPkMpy9ZxHxwBvJUQ=
Subject key identifier: D6:78:19:20:43:26:52:3A:8A:84:92:70:21:5E:BB:60:AD:CF:EA:C3
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019D9A3F0EE9F329D91E5FDB9271E957AD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 11C5
Signing time: Fri 17 Apr 2026 07:01:56 +0000
Manifest this update: Fri 17 Apr 2026 07:01:56 +0000
Manifest next update: Sat 18 Apr 2026 07:01:56 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: Yk78889J1VXb3tjbPtEEmDhTUE0r83LPKvidcOKsJos=)
2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0e:e9:f3:29:d9:1e:5f:db:92:71:e9:57:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Apr 17 07:01:56 2026 GMT
Not After : Apr 18 07:01:56 2026 GMT
Subject: CN=d67819204326523a8a849270215ebb60adcfeac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:b7:43:5e:b9:26:08:27:4d:8b:21:16:99:
43:62:2e:99:87:57:f5:6e:6e:ac:2a:f0:3f:2d:a8:
c4:26:c8:e1:15:be:0d:2e:76:b8:bd:7c:16:e8:54:
93:73:e3:14:6a:06:c8:10:db:ff:b3:2f:32:70:2f:
58:77:eb:98:56:39:26:61:9b:82:00:73:47:0e:cd:
e3:c3:13:34:3f:b7:c0:5f:2f:7e:85:ac:30:c0:8a:
db:78:c7:46:b5:11:94:2b:3e:3b:e3:4d:46:f4:a9:
b1:1d:4c:02:45:73:26:8d:a9:06:4f:ce:c5:63:f8:
34:11:2c:03:67:8f:58:0f:cd:8c:ed:fe:55:2f:58:
64:f3:1a:ce:e4:a6:e9:04:1f:15:4e:86:88:c8:cc:
c4:49:64:ee:10:30:b5:e5:c0:c4:b6:6f:01:fe:04:
80:a9:b7:65:3c:3b:6e:ba:d5:6f:c1:d4:fc:19:87:
5c:ad:98:74:d2:0c:7c:6f:29:03:c6:b0:a1:d6:ad:
4f:95:d2:02:55:4d:11:eb:34:09:d5:11:a6:93:e1:
e3:7a:be:59:ac:4f:b1:33:bb:50:81:83:01:f1:7b:
6c:2e:03:b4:1a:e4:79:c2:7b:2e:65:03:4c:1a:18:
65:2c:3f:a3:89:e2:1b:d0:65:d6:dd:c5:a0:00:87:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:19:20:43:26:52:3A:8A:84:92:70:21:5E:BB:60:AD:CF:EA:C3
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:e8:1a:59:bd:cc:7f:7c:73:c8:a8:d2:c3:41:ea:da:33:
8e:17:4e:05:59:58:29:4f:2e:5d:9f:38:6b:ae:ea:8b:6a:31:
97:b2:5b:69:0e:77:6b:59:df:3a:6c:1c:44:2c:bf:2c:5b:2a:
14:a2:e7:1d:99:d2:aa:55:87:b2:02:59:2a:28:68:f8:00:9a:
11:88:75:71:8b:7b:1d:dd:6f:40:77:c4:59:e5:ee:1b:22:a9:
11:78:f3:44:51:bc:70:b3:c1:5d:ff:61:c1:c0:db:9a:52:4e:
52:5b:1f:48:52:e4:f7:d6:7f:f5:91:03:2d:89:ba:72:f1:ae:
41:58:e3:c6:ad:55:08:f6:0f:8f:5e:cf:68:e6:52:1c:7e:69:
33:fe:3d:be:d5:77:5c:7c:f9:90:1f:16:10:04:83:ee:64:21:
3f:87:62:ed:f4:53:89:c5:1c:1f:1b:27:34:0a:3f:dd:37:96:
5a:80:6b:7b:1a:06:57:83:0c:cd:4d:cf:fb:21:3c:4b:0d:ad:
25:ee:68:01:51:db:e6:e6:dd:fd:55:57:f7:fd:c8:ae:30:b1:
a4:45:6f:06:eb:50:23:0c:50:c9:38:cb:c4:37:7d:f5:5a:3e:
5a:dd:a2:63:b9:bc:a6:13:c9:0e:06:8b:2d:6c:26:b0:0b:03:
0c:4b:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:15 2026 by rpki-client