Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: lHmWNt6OxAdSGdiR7BEsjSrLiVVfjLw0nQLDmcIaFIg=
Subject key identifier: DB:0D:C2:1A:03:E5:8E:A8:9C:30:A4:36:2D:55:C2:4A:CA:86:28:0A
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 019CAA8FBC50AD69DD7F72E200E3A75DB03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0CFE
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: lipPl+5qeBUBwvoj6asAmSEpuIjU/ll+oVqvidoO28U=)
2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:bc:50:ad:69:dd:7f:72:e2:00:e3:a7:5d:b0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=db0dc21a03e58ea89c30a4362d55c24aca86280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:c8:55:6b:c6:3b:27:c9:ef:82:0b:06:40:
88:cd:f7:a4:51:5f:f3:a2:06:a7:78:e9:e8:a0:a6:
99:af:6f:4c:78:8c:9e:80:86:65:40:68:7d:5a:cc:
aa:62:40:90:3d:74:99:66:26:79:01:21:dc:f5:97:
1e:90:ea:75:08:11:80:ce:97:21:fa:9a:d8:55:ce:
8c:8a:50:3c:83:41:2a:95:7f:47:23:d8:c4:4d:aa:
58:50:fe:3b:24:cf:05:0c:61:f9:0e:25:19:26:39:
28:72:99:3b:77:66:f3:c5:63:ee:56:f0:15:15:90:
30:10:0b:01:97:51:e8:e0:05:50:1a:1e:b4:ec:ea:
99:01:63:4a:20:20:ab:dd:5b:63:07:28:49:e4:94:
87:7c:0c:ec:48:18:3f:9f:75:47:59:04:d4:4d:ef:
60:45:4f:89:b8:c3:ae:d9:b4:cd:eb:6c:bd:af:46:
b3:12:7b:d9:62:af:87:0d:b9:3a:5e:f6:d2:68:e7:
e6:8a:c7:b2:65:2f:85:7a:3a:32:90:d4:d6:2f:96:
da:83:e0:aa:3b:0e:2a:c9:ba:30:ea:97:22:f7:37:
8f:cf:57:9d:73:e1:fe:f7:36:aa:f6:8c:44:20:fd:
e3:64:51:76:84:52:a9:16:6f:f1:7a:23:c2:fa:2e:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:C2:1A:03:E5:8E:A8:9C:30:A4:36:2D:55:C2:4A:CA:86:28:0A
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e6:66:20:e9:cc:82:0c:90:bd:91:a8:6d:c0:f6:8f:fc:27:
e1:f1:5c:aa:95:e3:11:1a:42:a2:36:bc:e2:ac:c8:da:88:f1:
30:bb:0e:e3:66:e4:9e:2f:45:f0:01:60:9c:ac:90:8a:21:5b:
08:e6:17:2f:46:83:ff:e8:df:e0:4f:6c:17:53:ab:c4:79:07:
be:48:9f:f8:c5:43:de:fa:17:89:b4:9c:6b:b9:19:0a:b3:89:
e3:c2:f7:f9:4d:00:11:69:81:38:36:95:91:92:79:26:86:c8:
a3:ce:65:e6:4c:ad:3d:9e:c0:82:ae:65:65:a2:a9:ce:e0:cd:
2e:8a:77:5c:54:9e:87:f5:96:83:42:ce:14:88:bb:2d:fe:e4:
e7:92:fd:0a:6a:c7:97:80:b0:a9:88:ca:6d:1a:eb:1c:da:a9:
51:0d:5b:8b:10:4b:43:1f:ab:9b:19:85:26:33:ff:e5:a9:d7:
5b:3e:48:18:48:09:cc:77:06:46:bd:1f:88:e6:d4:17:65:ac:
9c:0d:7d:88:27:6e:18:64:2c:04:ed:1d:da:d5:bb:bd:25:7b:
9a:cb:3c:c1:ef:d0:16:28:8d:6f:28:82:25:68:ee:32:51:bd:
19:d3:e5:ab:8a:67:94:50:fd:4e:99:17:a6:d2:05:c1:0f:2a:
9e:f9:71:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj7xQrWndf3LiAOOnXbA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy
YzNjZWIwHhcNMjYwMzAxMTgwMTEyWhcNMjYwMzAyMTgwMTEyWjAzMTEwLwYDVQQD
EyhkYjBkYzIxYTAzZTU4ZWE4OWMzMGE0MzYyZDU1YzI0YWNhODYyODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpLIVWvGOyfJ74ILBkCIzfekUV/z
oganeOnooKaZr29MeIyegIZlQGh9WsyqYkCQPXSZZiZ5ASHc9ZcekOp1CBGAzpch
+prYVc6MilA8g0EqlX9HI9jETapYUP47JM8FDGH5DiUZJjkocpk7d2bzxWPuVvAV
FZAwEAsBl1Ho4AVQGh607OqZAWNKICCr3VtjByhJ5JSHfAzsSBg/n3VHWQTUTe9g
RU+JuMOu2bTN62y9r0azEnvZYq+HDbk6XvbSaOfmiseyZS+FejoykNTWL5bag+Cq
Ow4qybow6pci9zePz1edc+H+9zaq9oxEIP3jZFF2hFKpFm/xeiPC+i6b1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsNwhoD5Y6onDCkNi1VwkrKhigKMB8GA1UdIwQY
MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt
YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh
LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceZmIOnM
ggyQvZGobcD2j/wn4fFcqpXjERpCoja84qzI2ojxMLsO42bkni9F8AFgnKyQiiFb
COYXL0aD/+jf4E9sF1OrxHkHvkif+MVD3voXibSca7kZCrOJ48L3+U0AEWmBODaV
kZJ5JobIo85l5kytPZ7Agq5lZaKpzuDNLop3XFSeh/WWg0LOFIi7Lf7k55L9CmrH
l4CwqYjKbRrrHNqpUQ1bixBLQx+rmxmFJjP/5anXWz5IGEgJzHcGRr0fiObUF2Ws
nA19iCduGGQsBO0d2tW7vSV7mss8we/QFiiNbyiCJWjuMlG9GdPlq4pnlFD9TpkX
ptIFwQ8qnvlxbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:35 2026 by rpki-client