Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: 4ehf42mbUMTptllhzjNgs6FmItqLVqjdoNqA67nfsPw=
Subject key identifier: CC:06:9A:60:D7:28:C8:5F:9A:3F:31:49:5F:52:A7:80:F8:BB:20:E0
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019CADFE92CA8C2E0F3D02719A36A560688B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: rycI5Gwi8yP7ot2pR806wPbk4o7p0dwcgP0TYqvE7Bo=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:92:ca:8c:2e:0f:3d:02:71:9a:36:a5:60:68:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=cc069a60d728c85f9a3f31495f52a780f8bb20e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:de:7e:46:29:21:82:cb:7a:83:7f:d2:27:
bf:e3:38:3e:1a:67:a2:de:a2:b9:8a:04:50:21:3b:
1d:e2:a6:ba:c3:15:85:ff:1f:c7:71:51:d6:9e:e3:
1e:35:c0:16:f6:6c:cb:54:0b:0f:3f:27:da:64:de:
f3:d5:aa:84:89:c3:31:d3:6d:49:fe:e7:53:3d:01:
6b:2c:1f:31:ff:02:ee:12:63:98:92:32:cd:7f:73:
9f:d8:7d:ff:38:23:17:95:09:48:2e:23:67:66:09:
37:cd:f2:98:3a:f1:cd:86:bb:0e:37:3d:ae:fa:5a:
5e:df:4c:58:f0:fc:c3:73:63:21:0d:b1:86:8d:6c:
66:82:74:d1:ce:f4:33:1a:71:49:e0:d5:53:ec:3c:
db:9c:37:a4:96:ab:6c:0d:85:0d:42:71:c9:91:8d:
50:fd:c8:68:8d:5d:4a:ce:47:72:b3:23:7c:a4:08:
6c:1d:93:13:1b:29:ff:de:fe:c5:24:34:1a:9d:1e:
f7:dc:f9:30:45:64:13:d0:4c:62:61:75:ed:27:9f:
38:44:0d:d0:92:94:49:60:93:b9:57:4b:27:42:3c:
9b:b9:f0:7f:3b:ef:84:0b:87:b5:6f:07:44:72:43:
cc:bf:04:9e:94:83:3b:9d:3d:91:17:e5:7d:ff:9a:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:06:9A:60:D7:28:C8:5F:9A:3F:31:49:5F:52:A7:80:F8:BB:20:E0
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:5c:08:cf:a4:b9:c0:e4:73:23:c1:87:3b:9e:42:d1:f7:
22:25:a1:9e:f0:a8:44:6d:f4:23:5a:41:df:cf:3b:a8:00:86:
5e:87:24:dc:93:d3:ad:f5:be:5a:51:2d:f3:f8:78:a2:fd:ba:
e1:42:13:c1:e1:d6:57:4b:3b:8b:f8:4f:81:31:b2:9e:70:c5:
0d:b6:97:f2:00:f9:10:fb:41:3a:db:54:fe:19:4c:d3:41:5b:
5a:4e:d9:f4:18:d6:a8:59:ba:f0:62:3a:a0:ec:28:08:fb:15:
13:bb:be:d8:70:ef:68:f1:34:c4:7c:e2:25:90:b6:74:1f:1e:
5e:e5:a9:66:92:47:7c:0e:ec:bf:85:f0:3c:56:1b:f5:1d:a0:
8c:e1:5e:af:4a:a3:50:a9:24:6b:57:8b:20:81:4d:dd:a6:e3:
19:17:52:e1:0c:19:b8:53:89:a2:dd:03:27:bd:99:14:eb:f7:
36:f5:7f:98:1a:2a:9e:99:cb:f8:8f:ac:d2:f2:00:4f:b0:d1:
6a:0e:f1:6c:24:39:21:d5:6e:15:bf:06:a3:2e:13:fe:68:75:
95:7a:ba:ca:1e:64:bd:13:75:bc:8c:a4:56:cb:df:8c:e5:db:
b2:6f:a2:98:cd:27:fe:9b:b1:18:1a:7e:c5:40:95:3e:4e:e3:
11:b9:37:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pLKjC4PPQJxmjalYGiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjYwMzAyMTAwMTA3WhcNMjYwMzAzMTAwMTA3WjAzMTEwLwYDVQQD
EyhjYzA2OWE2MGQ3MjhjODVmOWEzZjMxNDk1ZjUyYTc4MGY4YmIyMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49TefkYpIYLLeoN/0ie/4zg+Gmei
3qK5igRQITsd4qa6wxWF/x/HcVHWnuMeNcAW9mzLVAsPPyfaZN7z1aqEicMx021J
/udTPQFrLB8x/wLuEmOYkjLNf3Of2H3/OCMXlQlILiNnZgk3zfKYOvHNhrsONz2u
+lpe30xY8PzDc2MhDbGGjWxmgnTRzvQzGnFJ4NVT7DzbnDeklqtsDYUNQnHJkY1Q
/chojV1KzkdysyN8pAhsHZMTGyn/3v7FJDQanR733PkwRWQT0ExiYXXtJ584RA3Q
kpRJYJO5V0snQjybufB/O++EC4e1bwdEckPMvwSelIM7nT2RF+V9/5oIrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwGmmDXKMhfmj8xSV9Sp4D4uyDgMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP5cCM+k
ucDkcyPBhzueQtH3IiWhnvCoRG30I1pB3887qACGXock3JPTrfW+WlEt8/h4ov26
4UITweHWV0s7i/hPgTGynnDFDbaX8gD5EPtBOttU/hlM00FbWk7Z9BjWqFm68GI6
oOwoCPsVE7u+2HDvaPE0xHziJZC2dB8eXuWpZpJHfA7sv4XwPFYb9R2gjOFer0qj
UKkka1eLIIFN3abjGRdS4QwZuFOJot0DJ72ZFOv3NvV/mBoqnpnL+I+s0vIAT7DR
ag7xbCQ5IdVuFb8Goy4T/mh1lXq6yh5kvRN1vIykVsvfjOXbsm+imM0n/puxGBp+
xUCVPk7jEbk3eQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:35 2026 by rpki-client