Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: TTdimZZxSLU9d4Ym/9+6Z0zLXXwdpPEgZfoj3KI4uN8=
Subject key identifier: FC:70:8B:25:E3:BE:39:82:E7:A0:F7:FC:97:3F:A4:88:21:23:81:A3
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 019CAD22AB1F2C13806F79660E82B0807576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0C82
Signing time: Mon 02 Mar 2026 06:00:56 +0000
Manifest this update: Mon 02 Mar 2026 06:00:56 +0000
Manifest next update: Tue 03 Mar 2026 06:00:56 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: 8qxgaEFTU9mVoaIeyrGXqZ52JqqswiJAziHXaWRwY7M=)
2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ab:1f:2c:13:80:6f:79:66:0e:82:b0:80:75:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Mar 2 06:00:56 2026 GMT
Not After : Mar 3 06:00:56 2026 GMT
Subject: CN=fc708b25e3be3982e7a0f7fc973fa488212381a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:50:8f:36:e7:41:0d:b1:b3:bb:18:51:40:
89:90:a3:cc:ef:13:0b:9f:1d:e0:92:71:5e:8c:ba:
6b:ba:49:35:e4:82:d4:19:17:e6:80:e8:1c:ae:47:
94:b4:4c:ed:b4:41:97:45:a1:76:71:e3:cb:4e:25:
67:4b:da:09:9d:28:03:da:02:9f:b2:6a:90:54:96:
03:5a:00:7a:28:e7:24:9a:47:aa:05:d6:59:01:fc:
24:2f:42:66:eb:f6:97:42:68:19:57:97:59:2e:9f:
df:c9:79:54:2c:f4:fd:39:c1:c8:e7:4d:7b:d3:6e:
6f:2c:b0:f8:39:ee:91:4b:ff:34:92:52:dc:18:d3:
cf:4a:43:be:5a:35:e8:27:35:ee:ce:8c:a6:33:55:
da:db:cf:0f:b6:07:46:62:1a:aa:8e:c9:8e:01:cc:
6d:b7:a5:ea:42:b2:53:b0:b6:32:88:b1:9c:2f:14:
74:76:58:f5:89:0e:75:97:67:77:7b:c3:42:8e:9b:
dc:49:34:60:bb:89:a5:c7:b4:2e:89:27:f6:f2:43:
80:68:2f:c7:00:4e:0c:73:67:87:00:de:3b:df:68:
b4:8f:25:ed:c1:86:54:ee:af:56:d4:ed:29:d7:24:
06:98:64:57:5b:6a:d1:b1:81:e6:5f:a5:0e:66:11:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:70:8B:25:E3:BE:39:82:E7:A0:F7:FC:97:3F:A4:88:21:23:81:A3
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:07:ca:3b:08:61:b5:27:27:5f:a3:4b:ad:a8:35:51:21:
fe:ab:97:70:30:65:49:e4:61:aa:d3:2f:b2:40:e4:31:74:33:
60:66:0c:41:41:03:dd:f1:0a:84:57:ee:43:2c:ed:9b:1b:88:
16:75:43:de:87:6e:ac:e6:bf:dd:8b:e2:be:8d:2a:03:68:09:
c7:d1:ff:fb:87:1e:6b:34:c2:6e:a6:83:0b:9b:0b:6c:3a:c3:
2d:86:e4:3e:2a:99:84:41:64:99:27:77:0f:59:8b:0b:9f:56:
b2:e0:bc:77:62:18:7d:b7:98:a4:ac:10:86:4c:80:e5:64:f0:
48:47:a6:e4:90:76:be:2a:d0:5b:bf:48:f5:fe:12:05:fc:be:
29:47:c9:c3:a9:4e:22:66:18:45:df:d8:b9:f7:59:79:ea:2d:
e6:32:73:1b:ad:6e:6f:99:9f:bc:e2:7e:9b:3e:7f:8e:2d:cd:
d4:6f:0d:23:78:4f:88:c3:fd:77:5a:4f:ad:27:e4:6e:e1:67:
5a:70:1e:75:26:7f:6e:43:4d:b0:c4:62:da:2a:8f:c7:89:3d:
3d:ca:d1:90:b1:da:05:a3:28:d0:ab:5e:6a:01:5d:e8:e1:9d:
12:5c:62:33:d9:40:6d:be:09:87:36:0e:9d:8e:05:91:28:1b:
55:89:c0:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIqsfLBOAb3lmDoKwgHV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzM0NjlkMWU3MzVhZTRkNjA4MzdiNzcwOWMzM2ZmNDI3
YzhlODQwHhcNMjYwMzAyMDYwMDU2WhcNMjYwMzAzMDYwMDU2WjAzMTEwLwYDVQQD
EyhmYzcwOGIyNWUzYmUzOTgyZTdhMGY3ZmM5NzNmYTQ4ODIxMjM4MWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3RQjzbnQQ2xs7sYUUCJkKPM7xML
nx3gknFejLprukk15ILUGRfmgOgcrkeUtEzttEGXRaF2cePLTiVnS9oJnSgD2gKf
smqQVJYDWgB6KOckmkeqBdZZAfwkL0Jm6/aXQmgZV5dZLp/fyXlULPT9OcHI5017
025vLLD4Oe6RS/80klLcGNPPSkO+WjXoJzXuzoymM1Xa288PtgdGYhqqjsmOAcxt
t6XqQrJTsLYyiLGcLxR0dlj1iQ51l2d3e8NCjpvcSTRgu4mlx7QuiSf28kOAaC/H
AE4Mc2eHAN4732i0jyXtwYZU7q9W1O0p1yQGmGRXW2rRsYHmX6UOZhH0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxwiyXjvjmC56D3/Jc/pIghI4GjMB8GA1UdIwQY
MBaAFOjDRp0ec1rk1gg3t3CcM/9CfI6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEt
ODkyNDg1MGQ5NWQ2LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEtODkyNDg1MGQ5NWQ2
LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPQHyjsI
YbUnJ1+jS62oNVEh/quXcDBlSeRhqtMvskDkMXQzYGYMQUED3fEKhFfuQyztmxuI
FnVD3odurOa/3Yvivo0qA2gJx9H/+4ceazTCbqaDC5sLbDrDLYbkPiqZhEFkmSd3
D1mLC59WsuC8d2IYfbeYpKwQhkyA5WTwSEem5JB2virQW79I9f4SBfy+KUfJw6lO
ImYYRd/YufdZeeot5jJzG61ub5mfvOJ+mz5/ji3N1G8NI3hPiMP9d1pPrSfkbuFn
WnAedSZ/bkNNsMRi2iqPx4k9PcrRkLHaBaMo0KteagFd6OGdElxiM9lAbb4JhzYO
nY4FkSgbVYnAgw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:30:14 2026 by rpki-client