Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: KHYf5xHLQ1UsU06E3GhEqQ6KqeayjZ5UE43HydkzkjM=
Subject key identifier: 13:D7:76:6D:29:1A:87:2F:5C:EE:70:98:4B:49:EC:94:D9:2B:71:F9
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019D9BBED7B35355BA43DFB4DB6E7554EF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0BCC
Signing time: Fri 17 Apr 2026 14:01:08 +0000
Manifest this update: Fri 17 Apr 2026 14:01:08 +0000
Manifest next update: Sat 18 Apr 2026 14:01:08 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: 8Q8Dv89XhweX4VxnG/qlcyTw7DL5389yct0BlB/w8c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:d7:b3:53:55:ba:43:df:b4:db:6e:75:54:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Apr 17 14:01:08 2026 GMT
Not After : Apr 18 14:01:08 2026 GMT
Subject: CN=13d7766d291a872f5cee70984b49ec94d92b71f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:ca:f8:89:5f:c5:e2:3e:1b:8f:5d:d0:36:
41:79:d4:d3:e5:8e:5a:06:57:81:38:a4:d1:88:f1:
03:68:b5:27:bb:29:8b:9f:aa:93:b3:78:bc:53:4e:
5f:72:e1:5f:ec:91:31:66:2b:c8:2e:c6:21:f1:24:
a8:52:c7:1b:30:12:81:01:d9:fc:24:24:0b:5c:58:
e9:c1:9d:90:62:0f:3e:f7:b5:df:37:2f:9c:cf:ce:
eb:96:02:29:68:50:07:89:a0:fc:0b:7e:e4:28:4f:
59:3f:40:0e:c7:e0:6d:9b:74:6a:aa:8d:60:03:6c:
4d:b4:92:37:2d:23:51:5e:50:d0:bc:d1:44:7e:0f:
f0:1b:7b:5d:85:77:08:09:b4:82:ed:c1:17:0c:47:
12:bb:e3:38:d9:7a:d0:5b:96:a1:47:84:e1:78:e4:
3e:70:5e:f1:8a:21:fd:ff:ef:ff:11:4f:65:54:e6:
fa:52:46:ee:75:43:de:9f:b1:24:eb:a5:e0:2e:7d:
e8:64:2b:57:1d:66:1f:b2:0e:47:99:dc:19:a9:5c:
a0:8e:85:40:74:ee:30:5d:f6:86:33:99:72:34:24:
8a:33:c7:b5:a9:1d:80:71:18:dc:87:72:2a:e0:2d:
89:1e:44:58:4e:7c:67:d1:4b:b3:b7:45:aa:66:7d:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:76:6D:29:1A:87:2F:5C:EE:70:98:4B:49:EC:94:D9:2B:71:F9
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3b:dc:36:4b:e7:69:f9:fc:71:8e:3d:52:1b:16:1e:63:43:
04:d8:18:a2:92:e3:6e:f5:c7:12:6c:b9:94:fc:f2:6e:85:ab:
4b:b6:d0:fa:3b:ac:4b:e4:2d:f6:40:d1:41:eb:64:08:0b:8f:
b8:d8:cf:60:bf:8b:9a:7c:a2:a5:d8:1c:b2:62:0e:e6:45:30:
1c:e4:14:91:bc:50:bd:1a:fd:46:47:0f:09:70:91:e0:89:39:
5c:36:53:db:6f:3f:06:e2:a1:a8:1b:aa:4a:38:b4:3c:64:b2:
12:fc:db:ae:cb:13:b2:a5:cc:6d:a3:ac:85:e6:05:a1:29:8d:
b6:6b:16:24:32:c3:99:1b:3a:24:28:e9:a2:aa:d7:9d:47:ba:
f1:5b:46:57:e5:6d:08:9b:e4:59:72:91:4a:46:80:17:ab:b8:
51:84:21:4e:50:6e:79:19:2e:66:88:17:3f:88:20:1a:4e:e8:
4f:5d:eb:97:cf:5c:44:c8:ca:3a:40:d3:a8:a9:ed:6f:2e:cd:
cc:4e:2d:2b:22:fb:b8:6f:d9:b3:47:71:57:c4:9f:6f:6f:bc:
d1:56:41:3c:3f:a5:10:33:d3:62:1d:08:9c:29:06:96:d5:67:
8e:a1:b8:c3:bb:ff:dc:d1:d5:fe:3a:23:4a:5d:39:88:f0:0e:
82:d6:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:42 2026 by rpki-client