Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: QOoEtDzS7bKFpFrHFLYVvZYOKrmgWgB7JO7axF99pcI=
Subject key identifier: 31:EF:B5:47:AD:7B:77:A6:D8:8D:AF:EE:FE:26:33:C3:56:BE:44:9D
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 019D9962FD311189703607AB4688364DD85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:34 +0000
Manifest this update: Fri 17 Apr 2026 03:01:34 +0000
Manifest next update: Sat 18 Apr 2026 03:01:34 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: MWRYblcIXjk7rFJZvOFKAm+38d9X6bFGlfzX2YPMTnM=)
2: PMopp0pb43IV-3YVKympni_YLmU.roa (hash: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fd:31:11:89:70:36:07:ab:46:88:36:4d:d8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Apr 17 03:01:34 2026 GMT
Not After : Apr 18 03:01:34 2026 GMT
Subject: CN=31efb547ad7b77a6d88dafeefe2633c356be449d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:47:14:97:b0:c4:e6:f4:df:27:1a:9f:39:
42:6b:3c:a1:37:c8:20:60:72:86:9e:e0:51:d9:31:
1f:ce:48:ad:c0:7b:8d:91:f0:9d:28:1f:bf:85:91:
35:d6:cc:e3:a5:c5:66:d9:51:a7:76:87:b0:dd:33:
f2:8b:9e:80:9c:93:22:8e:5f:d8:93:b3:04:15:9d:
0b:95:ce:98:f4:89:f3:d9:f3:ad:fc:a8:68:26:fd:
10:43:33:4c:12:9f:51:14:a8:e0:25:45:01:50:03:
f1:f5:8c:05:b6:b2:c1:fd:e2:a1:ca:58:d5:32:9a:
a3:3f:96:aa:35:a9:15:7c:8e:09:57:9e:b9:db:6c:
da:4a:8e:6b:f0:49:95:81:0d:4e:f3:5d:b5:fb:47:
05:27:9c:61:24:97:0d:53:63:7d:d1:dd:a6:5e:fa:
b2:5c:56:8a:a2:3e:b6:11:d8:17:13:42:d1:a1:55:
41:f7:92:5d:c4:2a:49:90:c1:89:b4:45:0d:4d:39:
c4:75:c5:7d:62:65:71:02:75:3a:9f:8e:06:93:44:
2b:73:6a:58:6f:29:9f:0c:32:31:3a:b1:6f:2b:89:
6d:cb:e0:b5:7b:fb:4e:7a:13:59:b6:8a:e4:8f:24:
50:63:9d:6c:b5:aa:00:36:e9:e4:7f:03:d1:cc:f8:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:B5:47:AD:7B:77:A6:D8:8D:AF:EE:FE:26:33:C3:56:BE:44:9D
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:e7:9f:4e:3f:f5:78:95:d8:ea:94:8e:d1:f1:e2:85:fe:
3b:db:bb:2e:5c:2c:9c:b2:ab:7b:99:fb:fa:89:3d:c6:77:dd:
3f:06:aa:c6:89:f7:24:46:d5:80:cd:08:11:38:8a:39:37:ad:
c5:02:56:f1:3a:f0:62:f2:56:86:42:00:59:19:a4:a6:22:c4:
89:31:6a:ba:0e:dd:20:c4:c1:0c:c3:91:26:a2:7d:cf:15:ab:
ba:af:90:0c:3a:76:73:82:69:5b:8b:97:ef:8f:75:cc:27:fc:
b7:87:a6:76:f7:1b:28:4f:ba:43:53:cb:a7:a4:1a:08:38:3f:
42:19:e6:54:01:11:33:51:40:ef:6d:4c:74:2f:16:e5:9b:b9:
c0:6c:5f:88:f4:e8:48:60:2e:e4:73:90:3e:4a:12:bb:58:95:
32:52:9e:84:ef:75:5c:4f:99:3f:54:4d:e1:7a:2d:99:55:f3:
97:09:c1:cf:27:e7:7a:1c:7b:a9:21:dc:c0:ba:ec:26:63:02:
2d:59:93:c1:9f:5b:58:74:77:70:7d:c5:20:dd:f1:79:6e:51:
b8:3f:56:0e:2b:46:14:43:d1:f0:cb:e3:cd:fa:e0:c0:37:12:
3c:14:ce:68:66:0b:4d:52:46:0c:69:57:fc:d7:b3:d1:28:48:
4f:ba:e1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYv0xEYlwNgerRog2TdhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjYwNDE3MDMwMTM0WhcNMjYwNDE4MDMwMTM0WjAzMTEwLwYDVQQD
EygzMWVmYjU0N2FkN2I3N2E2ZDg4ZGFmZWVmZTI2MzNjMzU2YmU0NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MRHFJewxOb03ycanzlCazyhN8gg
YHKGnuBR2TEfzkitwHuNkfCdKB+/hZE11szjpcVm2VGndoew3TPyi56AnJMijl/Y
k7MEFZ0Llc6Y9Inz2fOt/KhoJv0QQzNMEp9RFKjgJUUBUAPx9YwFtrLB/eKhyljV
MpqjP5aqNakVfI4JV56522zaSo5r8EmVgQ1O8121+0cFJ5xhJJcNU2N90d2mXvqy
XFaKoj62EdgXE0LRoVVB95JdxCpJkMGJtEUNTTnEdcV9YmVxAnU6n44Gk0Qrc2pY
bymfDDIxOrFvK4lty+C1e/tOehNZtorkjyRQY51staoANunkfwPRzPjYQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHvtUete3em2I2v7v4mM8NWvkSdMB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx7nn04/
9XiV2OqUjtHx4oX+O9u7LlwsnLKre5n7+ok9xnfdPwaqxon3JEbVgM0IETiKOTet
xQJW8TrwYvJWhkIAWRmkpiLEiTFqug7dIMTBDMORJqJ9zxWruq+QDDp2c4JpW4uX
7491zCf8t4emdvcbKE+6Q1PLp6QaCDg/QhnmVAERM1FA721MdC8W5Zu5wGxfiPTo
SGAu5HOQPkoSu1iVMlKehO91XE+ZP1RN4XotmVXzlwnBzyfnehx7qSHcwLrsJmMC
LVmTwZ9bWHR3cH3FIN3xeW5RuD9WDitGFEPR8MvjzfrgwDcSPBTOaGYLTVJGDGlX
/Nez0ShIT7rhaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:17 2026 by rpki-client