Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: 2hAvsogvoS7eJJAY1/hgyI7mAf0ejjOfIhMUGgL1OJc=
Subject key identifier: E2:88:F1:8B:92:B0:0C:F6:99:71:92:F1:FF:A6:0C:E4:C4:E4:83:7D
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 019D9A3DF3DBCA5270B196EA131D39685B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 0E6F
Signing time: Fri 17 Apr 2026 07:00:44 +0000
Manifest this update: Fri 17 Apr 2026 07:00:44 +0000
Manifest next update: Sat 18 Apr 2026 07:00:44 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: GshdpnqgBiZcQt9YLuTRvIqBipdnESEVtRfX327rjt8=)
2: BKV_fu3YFOoxYmo6YqQLV_km-4E.roa (hash: ifeOZt3xfJQ0veX8MeURu5Xl/bcGWTOWIc6ZubLu+6U=)
3: mUi0nnAum7kZ4MV9jKDfBhFb4JY.asa (hash: bojd8Moh0D6d4DIF/avFXQDI+7GBVfVdL/RyMurONoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f3:db:ca:52:70:b1:96:ea:13:1d:39:68:5b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Apr 17 07:00:44 2026 GMT
Not After : Apr 18 07:00:44 2026 GMT
Subject: CN=e288f18b92b00cf6997192f1ffa60ce4c4e4837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:33:8c:9c:52:d6:fd:79:57:ff:a7:13:e3:
19:70:ae:2d:12:9b:58:3a:21:30:26:6d:9a:e0:65:
4a:99:c5:00:94:8c:4c:85:ed:60:a0:65:bf:c9:2d:
ed:05:e8:5a:52:af:a4:13:65:4f:05:29:17:69:3e:
00:87:49:ac:3c:b7:76:f7:cf:42:29:45:c2:83:d0:
1c:bd:b6:46:1d:77:8e:5f:c1:fc:03:26:61:60:d8:
77:04:dd:26:b6:13:a5:37:00:8d:19:74:d4:49:6e:
31:4d:fd:e3:f2:78:59:eb:1c:1c:a4:0b:be:fa:43:
b5:15:f4:fa:06:98:10:cc:91:b9:71:58:97:60:22:
b9:4f:e5:ea:bf:3e:36:7e:44:b5:3c:37:52:07:18:
7a:3a:64:14:be:35:5c:27:65:0a:b9:01:9d:e9:3b:
39:d9:79:97:3f:49:33:f6:84:e8:c3:a5:8f:5a:94:
21:7c:40:6b:e3:53:ec:a7:1d:ea:f9:87:25:ff:a0:
f6:d9:a7:be:f9:b5:90:47:10:47:b4:c4:0c:1e:5a:
24:d4:b7:24:d8:32:87:f0:67:d4:b5:18:80:da:a8:
e0:89:ab:f5:0e:ff:e1:51:2f:b5:38:95:c1:ae:a3:
39:42:de:d6:5d:0f:eb:d1:2f:7e:a5:85:37:03:52:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:F1:8B:92:B0:0C:F6:99:71:92:F1:FF:A6:0C:E4:C4:E4:83:7D
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:db:d6:eb:a8:19:0d:c5:d7:42:95:14:cc:be:52:34:46:7a:
f5:61:f9:04:36:7e:09:a5:ec:96:0e:e0:e1:b5:cb:c9:f9:ba:
30:6f:4d:6b:2b:17:99:56:b0:ab:17:2f:85:49:8e:ec:09:22:
a3:cf:7f:76:8f:b4:02:aa:66:a9:07:08:68:3c:ca:65:66:b4:
e1:85:b7:d9:d6:6e:7b:0e:4c:7e:17:47:c4:73:7a:16:81:8c:
39:92:c1:66:83:57:c9:b1:2d:cb:6b:3f:e9:62:de:6e:1b:0b:
83:c7:c7:7f:8a:f6:4a:aa:1e:c8:c4:a7:fd:a0:83:4b:0c:5a:
a4:dc:6e:d6:d2:43:d7:bc:35:65:14:2c:1c:b2:ed:7c:ea:a2:
7b:e3:9b:bb:50:2d:0b:ac:35:53:3f:5a:4c:b8:01:e1:9d:28:
c2:ae:59:f9:e8:af:77:ed:15:98:9c:1e:38:29:d6:1d:06:1c:
87:1f:a5:ee:ad:e8:a1:d9:c8:42:c7:16:fb:89:5e:36:6a:84:
a6:87:dc:2d:2b:1c:46:e3:db:ae:60:d4:86:81:a3:92:b6:a5:
27:3e:97:a2:ee:8a:68:89:6e:a7:3e:bc:4b:cd:88:85:17:b9:
ea:a9:22:a4:64:b6:1d:9d:8d:d9:6b:e4:71:77:9b:35:6a:e6:
3f:13:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:56 2026 by rpki-client