Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: TOyz3I98gTF1IKC3nAL4H7ZpI+5RISjQUGwGyj/ew80=
Subject key identifier: 22:74:2B:46:D5:B9:C1:F7:FF:2D:77:A3:6C:C7:3E:A8:36:98:F9:C8
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019CACEBE845CB6557D4248150044AAF721D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:01:07 +0000
Manifest this update: Mon 02 Mar 2026 05:01:07 +0000
Manifest next update: Tue 03 Mar 2026 05:01:07 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: XsjkkaCEJ1QvEL4QSaemT3yuo0JLimQykxG1SW+VlUc=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e8:45:cb:65:57:d4:24:81:50:04:4a:af:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Mar 2 05:01:07 2026 GMT
Not After : Mar 3 05:01:07 2026 GMT
Subject: CN=22742b46d5b9c1f7ff2d77a36cc73ea83698f9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:3c:af:f5:a4:d4:22:8d:3a:47:32:9d:5b:
0b:a0:9a:c7:89:25:b5:12:84:4f:d3:b1:ae:0b:20:
aa:ad:a5:89:60:a9:2d:2e:ff:48:ca:82:5d:b3:e3:
6a:59:bb:ce:e6:a1:0c:58:d5:5f:3f:c0:2a:1a:ec:
b7:46:bb:77:38:a1:b8:e9:73:6d:9d:1d:c5:eb:66:
3d:09:92:d3:13:7e:cd:e1:d7:6b:10:2e:05:75:f1:
19:b5:b4:35:f9:bb:43:8d:42:ca:be:92:5b:0c:6c:
ce:c1:ca:4d:96:06:5d:1e:81:84:cb:cc:20:04:a6:
81:5d:1c:c0:c7:2a:c9:d5:2b:c6:61:48:7d:a6:77:
da:3d:7d:87:5d:a4:be:e9:d8:ee:a6:41:7d:ba:12:
d1:47:5a:71:0f:ce:d4:0c:f9:7f:62:84:78:e0:6d:
7a:2c:95:8f:9c:3e:68:52:a2:3e:b6:82:63:04:d6:
c0:75:e1:24:91:23:40:d3:82:bb:9a:03:02:63:e6:
a1:32:2e:72:a6:90:49:6c:e1:5a:26:7b:fc:a2:65:
bf:62:49:c1:56:bb:11:d4:05:68:a2:6c:2f:68:cb:
bb:07:bf:c0:b9:c2:6d:55:9e:98:8c:03:cf:19:00:
c8:15:ef:c1:04:71:e9:8b:a2:17:c8:a4:5f:8f:c7:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:2B:46:D5:B9:C1:F7:FF:2D:77:A3:6C:C7:3E:A8:36:98:F9:C8
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:cc:7f:01:38:8d:68:46:0f:3e:1e:39:45:55:75:45:0f:
a2:20:be:e0:a4:3f:6f:c5:7e:e3:1a:a2:17:5a:30:be:ef:35:
a9:c8:87:d4:cc:62:84:51:bc:32:31:bc:9e:02:7a:b9:ee:33:
6c:af:a3:df:b8:dd:76:2f:c6:0d:b3:54:ae:34:45:da:9c:e0:
2d:07:28:2a:30:8f:09:97:a7:1a:03:8e:db:40:f8:9a:aa:99:
4b:8b:9c:76:ce:ac:6f:f9:0b:73:66:61:da:c0:e5:cc:72:da:
81:84:e3:1d:b5:76:6d:94:c1:3b:81:88:80:04:05:97:79:b6:
f0:26:81:ad:e4:15:14:71:11:c2:1a:4a:af:a3:6c:84:a6:fd:
f5:48:00:59:60:34:c2:81:fc:9d:bf:a5:8b:ee:ba:e1:9b:4c:
96:b8:f8:21:21:4d:16:50:eb:f3:9d:02:df:df:25:f0:3a:d1:
09:cb:39:b9:4d:84:3e:48:59:05:a6:f3:b9:8a:56:91:12:9a:
45:7a:3d:95:e6:dc:71:54:3c:64:b4:bc:e5:ca:ad:d1:60:99:
71:47:d9:c8:f0:9d:e6:9f:5a:e2:df:97:c9:e7:b1:1a:e6:9b:
15:51:b1:da:22:b8:26:20:ab:b1:61:5d:e6:84:28:b0:d1:55:
83:dd:7f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+hFy2VX1CSBUARKr3IdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1
NTM1MzMwHhcNMjYwMzAyMDUwMTA3WhcNMjYwMzAzMDUwMTA3WjAzMTEwLwYDVQQD
EygyMjc0MmI0NmQ1YjljMWY3ZmYyZDc3YTM2Y2M3M2VhODM2OThmOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvg8r/Wk1CKNOkcynVsLoJrHiSW1
EoRP07GuCyCqraWJYKktLv9IyoJds+NqWbvO5qEMWNVfP8AqGuy3Rrt3OKG46XNt
nR3F62Y9CZLTE37N4ddrEC4FdfEZtbQ1+btDjULKvpJbDGzOwcpNlgZdHoGEy8wg
BKaBXRzAxyrJ1SvGYUh9pnfaPX2HXaS+6djupkF9uhLRR1pxD87UDPl/YoR44G16
LJWPnD5oUqI+toJjBNbAdeEkkSNA04K7mgMCY+ahMi5yppBJbOFaJnv8omW/YknB
VrsR1AVoomwvaMu7B7/AucJtVZ6YjAPPGQDIFe/BBHHpi6IXyKRfj8crUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ0K0bVucH3/y13o2zHPqg2mPnIMB8GA1UdIwQY
MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt
MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl
LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBHMfwE4
jWhGDz4eOUVVdUUPoiC+4KQ/b8V+4xqiF1owvu81qciH1MxihFG8MjG8ngJ6ue4z
bK+j37jddi/GDbNUrjRF2pzgLQcoKjCPCZenGgOO20D4mqqZS4ucds6sb/kLc2Zh
2sDlzHLagYTjHbV2bZTBO4GIgAQFl3m28CaBreQVFHERwhpKr6NshKb99UgAWWA0
woH8nb+li+664ZtMlrj4ISFNFlDr850C398l8DrRCcs5uU2EPkhZBabzuYpWkRKa
RXo9lebccVQ8ZLS85cqt0WCZcUfZyPCd5p9a4t+XyeexGuabFVGx2iK4JiCrsWFd
5oQosNFVg91/fg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:26 2026 by rpki-client