Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier: eJt/t26hOAiSYWfZyfhtU2yT2jTpRzc80KCoKfI0Gzw=
Subject key identifier: 5D:33:83:66:98:EF:3F:71:8A:81:71:BA:24:95:9B:3A:B4:44:30:18
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial: 019D9A070F4A0545F9156E5F7600A47AB71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number: 0BFD
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: 6r/0K2qOimNseXOhIUMpZbHvK8pHj0BORkCoZ7BODnA=)
2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0f:4a:05:45:f9:15:6e:5f:76:00:a4:7a:b7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=5d33836698ef3f718a8171ba24959b3ab4443018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:6d:2c:f0:ea:01:d4:f1:e2:a1:97:ff:6f:
b0:e8:ec:a4:0e:81:4b:74:c8:c8:d0:55:4f:95:c6:
b4:63:35:83:a3:4a:bb:4e:91:74:5f:21:ce:3c:ec:
70:7d:2e:04:7d:33:97:69:0f:36:2d:f6:e7:a5:b3:
80:cf:de:24:b8:1e:c1:f9:fc:87:49:ef:77:b8:33:
dc:97:38:da:8f:00:7f:45:a8:65:83:58:e6:92:ae:
7d:02:0d:f9:c2:c0:8e:b8:38:1d:4a:c0:b7:c2:01:
07:79:da:47:68:fa:e0:29:20:c5:15:10:7c:ee:9f:
88:ca:44:81:5e:7d:f4:40:c4:69:d6:1f:c1:a6:94:
1e:92:da:7f:08:2d:3d:66:17:c5:27:b1:29:3b:ae:
30:a3:66:47:5a:c9:35:17:76:36:18:a3:1d:bc:72:
fc:ec:67:3c:37:1c:48:7a:ff:a9:ee:09:25:06:a4:
44:fc:90:ab:12:42:de:8c:61:1f:c6:0d:43:69:ce:
96:e2:c0:99:bc:11:fc:c4:4a:72:fb:8e:c8:40:9b:
f9:8c:5e:44:d7:fa:d1:85:78:29:b1:db:7f:05:cc:
6d:1b:fc:ef:1f:d3:51:20:16:66:ca:09:e9:ce:c4:
ea:ad:05:d2:e8:cb:75:91:40:b8:e8:7e:cf:b5:ab:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:33:83:66:98:EF:3F:71:8A:81:71:BA:24:95:9B:3A:B4:44:30:18
X509v3 Authority Key Identifier:
keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ed:6e:dc:89:8f:ab:4f:7c:a7:58:5f:50:18:55:f1:5e:ff:
41:eb:c7:95:45:b9:be:bd:eb:75:da:12:ee:18:f7:08:2e:20:
eb:52:4a:c0:f8:31:0f:a9:47:ba:9a:b2:97:15:b8:31:5e:a7:
37:13:f4:c5:59:1c:5c:07:0f:8a:e9:d1:cb:6f:af:46:4b:c9:
e4:1f:ba:c3:a9:5a:dc:62:b3:e5:52:c1:ee:b8:60:9e:92:43:
a9:c1:f9:ec:28:f7:8d:9c:9f:17:d0:34:cb:69:b1:9d:35:07:
f9:56:8e:5d:57:bf:d0:1d:f6:d2:19:79:9e:c4:da:3f:07:4d:
43:61:d0:e1:45:21:ab:d9:06:7b:d3:f9:1c:de:eb:70:b7:ac:
ec:b6:7f:5e:67:96:32:92:95:d9:cd:c1:3e:9b:32:56:5a:bf:
b2:71:c7:88:d3:6f:37:c8:d0:9f:7d:d5:0d:e8:72:c1:13:9c:
d3:92:60:30:24:6b:0a:bf:d9:4e:88:48:2b:a3:1e:28:9c:7e:
4a:46:8b:d7:45:31:eb:3e:ae:ff:74:66:4d:eb:8f:5c:a6:6e:
dd:b9:db:b8:1d:c0:15:d6:20:37:e9:15:90:1d:24:9f:40:13:
72:c0:a8:94:58:cc:14:4d:fd:b4:6a:b1:10:75:83:30:a7:c0:
7d:bf:2f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBw9KBUX5FW5fdgCkerceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Yzg3NDY5OTc4MDk1ZDhhZmY2MzI3MjgwNGJiMmYzNWQx
NDkxMDMwHhcNMjYwNDE3MDYwMDQ3WhcNMjYwNDE4MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZDMzODM2Njk4ZWYzZjcxOGE4MTcxYmEyNDk1OWIzYWI0NDQzMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIdtLPDqAdTx4qGX/2+w6OykDoFL
dMjI0FVPlca0YzWDo0q7TpF0XyHOPOxwfS4EfTOXaQ82LfbnpbOAz94kuB7B+fyH
Se93uDPclzjajwB/Rahlg1jmkq59Ag35wsCOuDgdSsC3wgEHedpHaPrgKSDFFRB8
7p+IykSBXn30QMRp1h/BppQektp/CC09ZhfFJ7EpO64wo2ZHWsk1F3Y2GKMdvHL8
7Gc8NxxIev+p7gklBqRE/JCrEkLejGEfxg1Dac6W4sCZvBH8xEpy+47IQJv5jF5E
1/rRhXgpsdt/BcxtG/zvH9NRIBZmygnpzsTqrQXS6Mt1kUC46H7PtaujXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0zg2aY7z9xioFxuiSVmzq0RDAYMB8GA1UdIwQY
MBaAFOnIdGmXgJXYr/YycoBLsvNdFJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMt
MGNjM2I0Y2FmNjgzLzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMtMGNjM2I0Y2FmNjgz
LzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe1u3ImP
q098p1hfUBhV8V7/QevHlUW5vr3rddoS7hj3CC4g61JKwPgxD6lHupqylxW4MV6n
NxP0xVkcXAcPiunRy2+vRkvJ5B+6w6la3GKz5VLB7rhgnpJDqcH57Cj3jZyfF9A0
y2mxnTUH+VaOXVe/0B320hl5nsTaPwdNQ2HQ4UUhq9kGe9P5HN7rcLes7LZ/XmeW
MpKV2c3BPpsyVlq/snHHiNNvN8jQn33VDehywROc05JgMCRrCr/ZTohIK6MeKJx+
SkaL10Ux6z6u/3RmTeuPXKZu3bnbuB3AFdYgN+kVkB0kn0ATcsColFjMFE39tGqx
EHWDMKfAfb8vQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:15:04 2026 by rpki-client