Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: nefDjyaZw/HznvvGHYD1ummVsiKcOuZqqhh0q6jmP/c=
Subject key identifier: C2:B0:D7:61:11:0A:20:1E:85:A6:45:EE:AA:EC:5A:C9:96:D3:10:EA
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 019D9B5129FF981D9ED6BDA6E6596746AD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 143C
Signing time: Fri 17 Apr 2026 12:01:20 +0000
Manifest this update: Fri 17 Apr 2026 12:01:20 +0000
Manifest next update: Sat 18 Apr 2026 12:01:20 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: JfNJtrTxoya78xfcUKDT9kPl3g7PSJMyRPxu4Wpr4LI=)
2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:29:ff:98:1d:9e:d6:bd:a6:e6:59:67:46:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Apr 17 12:01:20 2026 GMT
Not After : Apr 18 12:01:20 2026 GMT
Subject: CN=c2b0d761110a201e85a645eeaaec5ac996d310ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:81:30:2b:31:a2:a7:43:12:34:c1:e6:1d:
2e:cd:68:19:3e:8a:f7:78:ff:c0:ca:35:34:89:67:
f2:b4:d3:10:b6:10:8e:ea:a3:1e:46:c2:c6:f6:db:
d7:d2:9f:39:ef:48:cd:32:98:25:a5:3b:84:92:b7:
9c:8d:99:30:99:d3:13:d4:27:a5:98:ac:7a:ee:89:
3b:54:1a:9b:77:a0:1f:0f:55:63:b5:cd:c7:3a:55:
0d:89:6d:95:64:5f:f5:85:05:5b:77:7c:5f:f9:be:
26:50:89:dd:09:2b:1d:03:f8:13:7e:a8:b7:7e:38:
ae:b0:2e:26:eb:f9:5b:b1:2f:df:c3:43:d0:84:a3:
d7:fd:3a:32:5e:e4:45:3e:82:39:fd:2b:ec:e1:38:
27:01:86:35:68:5f:18:66:80:8e:e0:e3:a8:d6:87:
30:b2:8f:8d:0f:8a:e9:7b:c1:a7:4c:0a:a0:1b:d2:
59:d7:24:a3:9c:21:23:72:fb:24:b7:60:56:eb:5e:
5a:a8:55:92:f1:00:38:91:c4:12:85:3c:db:33:28:
01:e5:20:e5:6c:c9:a6:03:40:79:d2:af:02:28:5f:
ab:fc:82:2f:bf:a1:48:09:a9:8f:aa:12:9c:6a:31:
57:6f:45:2a:ad:f1:ae:6a:00:88:6e:d9:5f:a6:27:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:D7:61:11:0A:20:1E:85:A6:45:EE:AA:EC:5A:C9:96:D3:10:EA
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e5:5b:1f:b2:a4:6d:56:eb:32:af:39:54:69:34:d2:f7:8f:
49:51:68:14:91:c9:98:6e:61:e1:39:d8:76:99:4d:ee:02:c0:
3d:9a:33:30:ee:81:58:0d:e8:e3:79:c8:f3:e7:9b:06:60:1d:
01:ab:38:67:a0:7d:c3:7b:6d:c8:23:95:66:40:fc:23:5d:b3:
2b:8f:20:b9:18:50:06:d4:4c:c7:45:30:d5:4c:b8:2a:5c:35:
26:61:d0:dd:a8:9c:c6:97:a3:e5:99:a8:9c:cb:0c:04:c3:7b:
36:c0:ee:59:8e:54:44:1f:67:e4:82:1c:f3:85:77:65:50:d6:
f1:4e:ef:ff:7c:10:bf:30:1a:9d:61:2a:52:37:ba:ce:15:c2:
d9:08:f9:8f:65:86:da:c2:6b:b3:f5:98:b5:8b:3e:37:be:4f:
7e:52:8a:40:5b:64:f8:96:b6:47:19:31:df:b9:d7:f2:e1:9b:
17:b2:e4:04:02:d0:e8:3a:50:8e:d3:ce:9b:cd:9b:69:f4:53:
24:37:8b:2c:c4:d2:0b:0f:60:11:53:11:41:dd:b8:f2:3f:a6:
73:5b:73:74:14:a1:5e:26:a6:41:3d:2f:3a:91:dd:ef:a8:7d:
13:e7:ac:9b:c6:95:2b:a8:5e:e7:35:02:b9:ee:87:bc:88:b2:
0c:5a:07:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUSn/mB2e1r2m5llnRq1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTA3NGUzMjgyMmM4YmVmM2E3ZGNiMzEyODA4MjViZDI3
NTQ1YzkwHhcNMjYwNDE3MTIwMTIwWhcNMjYwNDE4MTIwMTIwWjAzMTEwLwYDVQQD
EyhjMmIwZDc2MTExMGEyMDFlODVhNjQ1ZWVhYWVjNWFjOTk2ZDMxMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWBMCsxoqdDEjTB5h0uzWgZPor3
eP/AyjU0iWfytNMQthCO6qMeRsLG9tvX0p8570jNMpglpTuEkrecjZkwmdMT1Cel
mKx67ok7VBqbd6AfD1Vjtc3HOlUNiW2VZF/1hQVbd3xf+b4mUIndCSsdA/gTfqi3
fjiusC4m6/lbsS/fw0PQhKPX/ToyXuRFPoI5/Svs4TgnAYY1aF8YZoCO4OOo1ocw
so+ND4rpe8GnTAqgG9JZ1ySjnCEjcvskt2BW615aqFWS8QA4kcQShTzbMygB5SDl
bMmmA0B50q8CKF+r/IIvv6FICamPqhKcajFXb0UqrfGuagCIbtlfpicKwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKw12ERCiAehaZF7qrsWsmW0xDqMB8GA1UdIwQY
MBaAFOgQdOMoIsi+86fcsxKAglvSdUXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQt
M2U0ZTg0ZjM1Y2QwLzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQtM2U0ZTg0ZjM1Y2Qw
LzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuVbH7Kk
bVbrMq85VGk00vePSVFoFJHJmG5h4TnYdplN7gLAPZozMO6BWA3o43nI8+ebBmAd
Aas4Z6B9w3ttyCOVZkD8I12zK48guRhQBtRMx0Uw1Uy4Klw1JmHQ3aicxpej5Zmo
nMsMBMN7NsDuWY5URB9n5IIc84V3ZVDW8U7v/3wQvzAanWEqUje6zhXC2Qj5j2WG
2sJrs/WYtYs+N75PflKKQFtk+Ja2Rxkx37nX8uGbF7LkBALQ6DpQjtPOm82bafRT
JDeLLMTSCw9gEVMRQd248j+mc1tzdBShXiamQT0vOpHd76h9E+esm8aVK6he5zUC
ue6HvIiyDFoH3A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:47 2026 by rpki-client