Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier: j+yBlRboXZ5S5A+AU7JDfyC6RI51x+R9OEZ5Pme6INY=
Subject key identifier: 27:F9:E4:9F:F8:07:15:FD:F7:7B:C0:22:C6:17:99:78:72:87:16:B7
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial: 019CAB6B35EECEE0308824873E0C0B48F38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number: 106D
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: uCP9mrm+YDYGkQ0xvTN94Gklbn1K7W5EZGsxCNu2eN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:35:ee:ce:e0:30:88:24:87:3e:0c:0b:48:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=27f9e49ff80715fdf77bc022c6179978728716b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:83:f0:9e:bb:cb:8f:ed:8c:d8:13:3c:8e:
b5:12:d7:8e:66:83:be:14:e0:fc:f1:8c:65:44:c4:
c1:ed:9a:9c:f2:08:7f:74:4f:db:fc:d1:41:77:be:
bb:69:96:f4:4a:5f:4d:f9:e6:f2:01:77:8d:94:e9:
7f:80:e5:ae:81:ea:2a:ec:58:9c:37:87:42:b9:4e:
e1:9c:99:a8:15:5d:7d:24:43:d7:9f:00:b1:75:a6:
52:34:9c:80:3a:5e:eb:2f:ec:4c:3e:5a:32:7d:fa:
63:d1:49:d9:da:96:ac:6f:ed:71:7b:23:68:0c:c0:
e1:7f:7d:6d:35:a6:36:8f:4c:3e:10:01:d1:c3:bf:
c0:5c:29:c5:77:10:e9:23:b8:dd:44:8e:be:66:89:
35:aa:ca:a4:46:47:13:23:a4:3a:bc:e6:ad:96:62:
07:58:32:56:2b:9a:4d:8c:4f:6b:6f:b3:81:b1:27:
22:2a:2c:84:cf:bc:3f:0d:30:ed:63:57:2f:7b:0a:
10:50:f9:5a:a5:54:40:91:c0:8c:c0:bf:31:f3:3f:
77:96:9d:64:45:e8:dd:78:55:3a:75:f1:fb:e7:98:
20:89:84:82:b5:36:5a:26:46:ec:e0:12:d8:be:9a:
b6:b6:3d:af:6c:fe:09:68:bf:5f:fe:ca:c6:40:0e:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:E4:9F:F8:07:15:FD:F7:7B:C0:22:C6:17:99:78:72:87:16:B7
X509v3 Authority Key Identifier:
keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:03:f0:86:90:d6:bb:ec:cc:98:5f:5b:13:7f:ba:59:a2:
d2:c1:39:f5:00:80:70:f9:df:f1:c0:30:b1:3f:fd:33:d4:93:
9d:18:0d:14:a5:78:cb:04:95:06:85:a5:8d:97:8d:3d:30:33:
70:e5:4b:ec:12:89:de:09:bf:a2:be:13:29:b1:fe:fe:e2:b5:
08:93:b6:9f:8b:1d:55:6a:33:33:80:d1:c1:39:03:bf:53:dd:
b0:b3:17:84:c6:5e:6d:4e:d3:de:73:d1:07:22:f5:52:be:44:
df:92:47:ed:52:00:fd:0e:d8:cd:a3:1b:ec:37:2a:1a:f4:e9:
f7:30:b2:af:62:fd:64:a1:f3:d2:6f:cf:52:11:72:8d:03:45:
7f:d2:1f:1c:14:63:c5:85:ca:70:83:39:08:7a:23:ce:77:21:
a0:36:ed:96:60:b3:4d:0c:e0:56:6f:80:7c:45:61:a1:81:cf:
3f:38:b0:0e:63:b2:7c:71:b6:b5:40:19:7b:dd:27:0e:2e:f1:
ee:d9:28:2f:ce:ce:6d:a7:a0:f1:50:db:0b:10:5e:a5:5b:6d:
b6:e2:94:b1:91:24:e0:74:7e:c5:6c:dc:fc:e4:3d:2e:ac:f8:
77:64:f3:8e:4b:aa:90:73:35:9b:9d:88:1f:b1:76:3a:06:74:
fc:23:ac:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazXuzuAwiCSHPgwLSPONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmJlYTAwYjU3ZDBiOWE4Y2FmMTlmNmRmZTRkZDMwYTRm
ZTZjNDcwHhcNMjYwMzAxMjIwMDU1WhcNMjYwMzAyMjIwMDU1WjAzMTEwLwYDVQQD
EygyN2Y5ZTQ5ZmY4MDcxNWZkZjc3YmMwMjJjNjE3OTk3ODcyODcxNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqteD8J67y4/tjNgTPI61EteOZoO+
FOD88YxlRMTB7Zqc8gh/dE/b/NFBd767aZb0Sl9N+ebyAXeNlOl/gOWugeoq7Fic
N4dCuU7hnJmoFV19JEPXnwCxdaZSNJyAOl7rL+xMPloyffpj0UnZ2pasb+1xeyNo
DMDhf31tNaY2j0w+EAHRw7/AXCnFdxDpI7jdRI6+Zok1qsqkRkcTI6Q6vOatlmIH
WDJWK5pNjE9rb7OBsSciKiyEz7w/DTDtY1cvewoQUPlapVRAkcCMwL8x8z93lp1k
RejdeFU6dfH755ggiYSCtTZaJkbs4BLYvpq2tj2vbP4JaL9f/srGQA5+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf55J/4BxX993vAIsYXmXhyhxa3MB8GA1UdIwQY
MBaAFOhr6gC1fQuajK8Z9t/k3TCk/mxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGIt
YzdmNTY2NWNiOTE4LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGItYzdmNTY2NWNiOTE4
LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNYD8IaQ
1rvszJhfWxN/ulmi0sE59QCAcPnf8cAwsT/9M9STnRgNFKV4ywSVBoWljZeNPTAz
cOVL7BKJ3gm/or4TKbH+/uK1CJO2n4sdVWozM4DRwTkDv1PdsLMXhMZebU7T3nPR
ByL1Ur5E35JH7VIA/Q7YzaMb7DcqGvTp9zCyr2L9ZKHz0m/PUhFyjQNFf9IfHBRj
xYXKcIM5CHojznchoDbtlmCzTQzgVm+AfEVhoYHPPziwDmOyfHG2tUAZe90nDi7x
7tkoL87Obaeg8VDbCxBepVtttuKUsZEk4HR+xWzc/OQ9Lqz4d2TzjkuqkHM1m52I
H7F2OgZ0/COsVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:37 2026 by rpki-client