Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: rJQc1Ffd8IocI/nyo14fAR/dyddHeCGoC7yH3zqVRE8=
Subject key identifier: 43:5F:CB:E2:11:95:43:A3:82:19:90:8A:D6:E5:3D:9C:89:47:F3:98
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019D99998CE831A0A1440F22D36F001C98D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:01:10 +0000
Manifest this update: Fri 17 Apr 2026 04:01:10 +0000
Manifest next update: Sat 18 Apr 2026 04:01:10 +0000
Files and hashes: 1: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (hash: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: S3f1k62IUyzq8rdRaf00Txrloe9NTs3oLhCrqx6RajQ=)
3: MUlaySuRJAJWjFOIuDQTeuxgbkI.roa (hash: k8la9Hpl6/O/fQnwY4pQN76Y+PJ8sXIpVpbtRiPNQgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8c:e8:31:a0:a1:44:0f:22:d3:6f:00:1c:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Apr 17 04:01:10 2026 GMT
Not After : Apr 18 04:01:10 2026 GMT
Subject: CN=435fcbe2119543a38219908ad6e53d9c8947f398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:57:bb:4f:9e:e6:da:6e:6c:e6:35:4c:56:
06:6e:25:46:30:ea:7a:16:a0:40:d6:2d:bf:4c:63:
f8:5b:7d:0e:26:1e:8a:21:0d:9c:af:0a:60:07:74:
31:9c:f0:3f:50:00:ff:42:8f:34:f2:9c:6c:19:b3:
d5:35:7d:b4:d7:c5:8c:b8:7f:45:e2:5c:ad:67:fa:
a4:9c:ef:e2:84:8d:d6:78:d5:04:83:b0:4f:86:a8:
a8:5c:ac:23:ae:93:0e:21:f9:34:61:85:2f:8f:2f:
f2:0e:c0:a3:db:9c:56:4d:48:d1:91:3a:b1:24:66:
c2:80:1d:5e:48:90:b9:05:15:87:c3:7a:78:60:d9:
c3:b7:ad:8b:ee:df:26:97:db:73:f6:7c:f7:3b:60:
4e:6c:9a:61:27:c3:b2:c3:2a:dd:c5:4e:47:95:79:
93:89:8e:a3:4e:ec:2e:2b:3f:7f:b5:c9:89:b7:9b:
3c:cc:e7:b0:3a:74:4e:9c:57:60:8b:e9:8a:a6:20:
c6:cc:79:25:6c:7c:89:c8:01:dd:de:ce:59:14:c1:
21:a1:16:55:67:64:9c:24:5e:28:35:2d:7a:8d:99:
b0:5c:10:08:be:d0:14:cc:d6:d3:0e:f2:a5:ac:8e:
b8:3e:13:c0:d0:dc:69:95:d1:9a:f9:a8:f1:34:47:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:CB:E2:11:95:43:A3:82:19:90:8A:D6:E5:3D:9C:89:47:F3:98
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cf:6b:1e:ad:6d:b3:c8:24:5f:11:23:ed:ba:3c:2f:9b:b4:
84:f9:8b:00:a2:f2:f2:51:7f:c3:f8:74:82:e8:cb:74:85:a4:
3d:5a:35:e2:45:6d:a8:7c:64:53:2f:4f:64:b1:ed:fc:cc:d9:
1c:67:c5:ba:6f:d5:9e:d3:eb:d0:ef:8a:36:b8:50:bd:b5:af:
98:ff:18:80:c4:1c:83:20:27:9b:f4:aa:fe:24:39:79:5b:2b:
c9:83:b1:b0:f8:b9:78:29:c1:22:50:2b:39:39:24:13:8b:13:
d6:cf:56:53:69:d6:db:86:8b:e9:a6:4e:11:e9:15:d7:79:4a:
83:60:48:af:f6:63:b9:4d:07:50:a5:ee:7d:ab:f5:cc:a7:2f:
94:2c:b6:e3:cf:db:12:8c:f4:b6:1d:ed:f8:fe:c5:a0:eb:d5:
e5:81:c2:79:6c:35:f0:59:7e:6b:31:e9:5c:1d:b5:73:2c:f7:
31:ae:80:51:fb:de:21:3d:73:c5:c2:c8:95:b9:c7:d5:22:00:
a5:fa:9d:4b:6c:21:75:98:e8:3b:b0:18:d7:73:bc:72:56:4f:
67:a9:5e:14:83:a7:5b:27:73:09:29:aa:50:25:89:6a:d5:3f:
fa:4d:fc:a7:8b:0c:3d:19:3c:ea:4d:82:f3:dd:85:4f:86:c9:
85:dd:67:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmYzoMaChRA8i028AHJjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjYwNDE3MDQwMTEwWhcNMjYwNDE4MDQwMTEwWjAzMTEwLwYDVQQD
Eyg0MzVmY2JlMjExOTU0M2EzODIxOTkwOGFkNmU1M2Q5Yzg5NDdmMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25hXu0+e5tpubOY1TFYGbiVGMOp6
FqBA1i2/TGP4W30OJh6KIQ2crwpgB3QxnPA/UAD/Qo808pxsGbPVNX2018WMuH9F
4lytZ/qknO/ihI3WeNUEg7BPhqioXKwjrpMOIfk0YYUvjy/yDsCj25xWTUjRkTqx
JGbCgB1eSJC5BRWHw3p4YNnDt62L7t8ml9tz9nz3O2BObJphJ8OywyrdxU5HlXmT
iY6jTuwuKz9/tcmJt5s8zOewOnROnFdgi+mKpiDGzHklbHyJyAHd3s5ZFMEhoRZV
Z2ScJF4oNS16jZmwXBAIvtAUzNbTDvKlrI64PhPA0NxpldGa+ajxNEfuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENfy+IRlUOjghmQitblPZyJR/OYMB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac9rHq1t
s8gkXxEj7bo8L5u0hPmLAKLy8lF/w/h0gujLdIWkPVo14kVtqHxkUy9PZLHt/MzZ
HGfFum/VntPr0O+KNrhQvbWvmP8YgMQcgyAnm/Sq/iQ5eVsryYOxsPi5eCnBIlAr
OTkkE4sT1s9WU2nW24aL6aZOEekV13lKg2BIr/ZjuU0HUKXufav1zKcvlCy248/b
Eoz0th3t+P7FoOvV5YHCeWw18Fl+azHpXB21cyz3Ma6AUfveIT1zxcLIlbnH1SIA
pfqdS2whdZjoO7AY13O8clZPZ6leFIOnWydzCSmqUCWJatU/+k38p4sMPRk86k2C
892FT4bJhd1nsg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:26 2026 by rpki-client