Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier: QeCFI9ATyFZE8d/tetuPDUoxfkk3MUxcbJVnZ8QtVb4=
Subject key identifier: CB:3D:3D:CB:CA:BE:7E:14:B6:91:29:4C:E1:6B:8D:3C:10:61:A7:D6
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 019CABD97DBC80128342B49B43260E3026EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number: 12F3
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: o1d5Q7L2TB4cW5AIjFH2cO70163N/sf7ejLhsnjVJd4=)
2: geUvZA4ewTlG88hTMf-uSmrWhDQ.roa (hash: 2pWVSfUZrGtWyoII6+WIJ6jWbQPbI427Ph6KkMpwer0=)
3: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (hash: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7d:bc:80:12:83:42:b4:9b:43:26:0e:30:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=cb3d3dcbcabe7e14b691294ce16b8d3c1061a7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:c0:26:f2:f4:ef:a6:88:7a:91:31:37:78:
dd:d4:d8:76:74:34:8c:fe:59:5e:36:d1:68:e0:36:
11:7d:cc:d7:1b:aa:b4:a2:e2:35:64:3e:0c:8d:40:
df:b5:f7:7f:b9:a1:4f:45:9a:02:69:d1:60:bb:ea:
a2:aa:93:04:fa:e6:4e:ae:89:ff:93:ce:8c:0c:16:
c8:ec:a1:06:c2:8a:3f:5a:50:62:43:68:00:f5:c8:
73:01:b4:0a:69:54:5a:76:26:10:58:b4:65:98:5b:
6e:08:a3:c9:9c:2d:9c:52:20:07:60:1b:b6:a1:29:
ce:64:9a:6d:0c:9c:df:3b:1d:02:a6:32:00:45:d2:
99:8c:8a:27:33:da:53:78:0d:98:2f:ce:37:93:b1:
99:ac:11:f3:0f:8d:c9:8f:5d:f2:29:bb:4a:4c:cf:
a2:80:d8:e5:fb:4b:8f:41:e2:91:d6:cd:a2:7b:ef:
01:ef:de:e7:53:1d:f2:a4:c9:2c:22:09:7d:ea:b6:
42:a4:32:15:41:21:a8:4c:4c:b1:0e:a4:bb:58:61:
ea:88:3e:28:6c:bc:5f:29:c2:ff:e3:a6:0d:50:ca:
bd:3b:a0:fb:2e:b1:f0:05:93:07:17:99:83:27:d6:
a2:39:4d:af:d3:26:43:d9:10:8d:61:d8:bb:e2:4b:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:3D:CB:CA:BE:7E:14:B6:91:29:4C:E1:6B:8D:3C:10:61:A7:D6
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:3e:4c:3b:0d:02:8f:ff:d0:30:66:e2:a4:0c:de:d8:f5:
1a:c9:9f:d0:d6:23:df:c3:20:ca:c3:17:c4:07:81:e5:60:f5:
89:25:f8:dc:26:9a:8e:4b:2f:b1:79:97:c0:34:f7:36:2c:6d:
a2:c2:a5:4e:31:0a:86:98:d4:b0:00:da:f3:c9:f0:24:31:b2:
74:8f:c9:ef:5f:12:66:2a:fe:2d:d5:62:3b:aa:3a:a5:a7:d5:
b4:72:29:1d:cf:d0:f9:ab:a2:2f:df:98:99:5b:59:36:05:c8:
86:17:ef:80:a5:0e:f7:7c:b7:38:1f:f7:ca:68:ed:d0:d0:08:
f0:da:02:c9:3f:26:92:cf:2e:72:67:18:05:13:02:b6:7b:7a:
3d:9e:e7:00:39:fb:ea:08:7c:75:c5:33:c9:f5:77:39:ab:b6:
05:51:33:7f:10:1a:da:8b:82:9c:e0:6d:07:5d:7a:99:54:2e:
cf:a7:73:28:0a:ab:ca:a4:07:c0:d9:12:cd:df:d9:57:c3:63:
91:b6:42:1c:b5:ad:13:a2:d1:3f:68:70:c6:81:74:c7:f2:00:
d9:33:5c:6a:9f:23:a7:f8:21:38:cd:7b:ae:0b:87:c4:25:3d:
c9:91:f0:1c:0c:f0:12:55:e1:e0:fc:b9:e9:bb:6c:87:29:aa:
fa:71:e5:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2X28gBKDQrSbQyYOMCbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTU5YjY4Y2U0MTM2OGE5OWZlMTA3OWVjNTRjMzZjOWJi
MWJmOTQwHhcNMjYwMzAyMDAwMTIzWhcNMjYwMzAzMDAwMTIzWjAzMTEwLwYDVQQD
EyhjYjNkM2RjYmNhYmU3ZTE0YjY5MTI5NGNlMTZiOGQzYzEwNjFhN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+LAJvL076aIepExN3jd1Nh2dDSM
/lleNtFo4DYRfczXG6q0ouI1ZD4MjUDftfd/uaFPRZoCadFgu+qiqpME+uZOron/
k86MDBbI7KEGwoo/WlBiQ2gA9chzAbQKaVRadiYQWLRlmFtuCKPJnC2cUiAHYBu2
oSnOZJptDJzfOx0CpjIARdKZjIonM9pTeA2YL843k7GZrBHzD43Jj13yKbtKTM+i
gNjl+0uPQeKR1s2ie+8B797nUx3ypMksIgl96rZCpDIVQSGoTEyxDqS7WGHqiD4o
bLxfKcL/46YNUMq9O6D7LrHwBZMHF5mDJ9aiOU2v0yZD2RCNYdi74ksZ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs9PcvKvn4UtpEpTOFrjTwQYafWMB8GA1UdIwQY
MBaAFOgVm2jOQTaKmf4QeexUw2ybsb+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt
MGYzYjZmOTY5OTBiLzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi
LzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASR4+TDsN
Ao//0DBm4qQM3tj1Gsmf0NYj38MgysMXxAeB5WD1iSX43CaajksvsXmXwDT3Nixt
osKlTjEKhpjUsADa88nwJDGydI/J718SZir+LdViO6o6pafVtHIpHc/Q+auiL9+Y
mVtZNgXIhhfvgKUO93y3OB/3ymjt0NAI8NoCyT8mks8ucmcYBRMCtnt6PZ7nADn7
6gh8dcUzyfV3Oau2BVEzfxAa2ouCnOBtB116mVQuz6dzKAqryqQHwNkSzd/ZV8Nj
kbZCHLWtE6LRP2hwxoF0x/IA2TNcap8jp/ghOM17rguHxCU9yZHwHAzwElXh4Py5
6btshymq+nHlgQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:55 2026 by rpki-client