Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: yL7U4wa6XrL8FaDHH50HQb5GfLlbLOeDKfVzzKOCmig=
Subject key identifier: 2A:79:BD:0D:ED:9B:A4:64:5A:E6:24:88:9A:DD:3B:7F:9D:BB:B9:CB
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 019CAEA3738F6B40B799DDFDAD3B3A0A0689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 13:01:13 +0000
Manifest this update: Mon 02 Mar 2026 13:01:13 +0000
Manifest next update: Tue 03 Mar 2026 13:01:13 +0000
Files and hashes: 1: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: DqoaZnkA8dyrW1MBkxLmQhYuedopTYXaS5ywtaC3Mmw=)
2: u65mmO6HRK5seaMFhAXBI1NDzRY.roa (hash: bDLwuznXJEsV9R4nt39n1oPS76JZaY8ubPqpqj3zceQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:73:8f:6b:40:b7:99:dd:fd:ad:3b:3a:0a:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Mar 2 13:01:13 2026 GMT
Not After : Mar 3 13:01:13 2026 GMT
Subject: CN=2a79bd0ded9ba4645ae624889add3b7f9dbbb9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:14:2f:ce:0e:a1:5b:06:ff:e1:83:e3:0e:
cc:1b:f2:c3:28:f3:4a:f0:17:77:67:f1:50:7b:3d:
c8:08:6c:d8:71:9d:f6:ca:39:14:21:f1:c4:11:a2:
7a:38:d4:aa:93:1a:76:9d:9d:1b:16:9f:ad:00:78:
db:29:b7:85:93:de:8b:06:a9:4a:29:66:a7:0e:cb:
a8:0b:70:ea:a9:aa:05:f2:ae:87:95:ff:53:cd:cd:
42:53:71:4e:96:9c:50:16:0d:7d:0d:f6:00:d8:ae:
2f:29:16:b7:eb:af:53:9d:e9:84:dd:03:42:8c:f0:
37:99:82:41:af:6f:90:fd:1a:19:d5:e9:21:1b:8c:
cb:e8:58:fb:24:27:61:ef:3b:9c:54:7a:f1:5a:f1:
cb:c7:4e:42:3a:3c:ef:8e:99:20:74:42:8f:03:d7:
29:9d:ba:28:79:ed:61:15:67:41:73:7f:6e:b1:18:
33:6d:2a:9c:bf:3c:ed:ec:de:66:df:13:df:dc:7e:
f8:34:b9:e9:c5:1e:06:0f:16:22:b8:ec:90:b9:29:
38:d2:da:7d:57:de:f5:7e:c3:d7:ea:4f:95:09:ac:
7e:b5:a5:32:e6:ed:bc:7d:05:08:fd:12:de:1c:02:
03:6c:6d:15:3d:f7:d4:65:a3:94:29:a5:fc:be:e8:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:BD:0D:ED:9B:A4:64:5A:E6:24:88:9A:DD:3B:7F:9D:BB:B9:CB
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a9:48:db:37:61:cf:40:ae:72:4b:9e:fe:3a:cd:a5:e4:6b:
d2:f6:74:ec:4b:86:3b:d1:a5:70:17:af:df:cd:e9:90:01:c2:
0e:e7:5f:85:5c:80:e5:31:2c:7a:c5:1e:91:65:1d:e5:97:3d:
30:ff:b9:0a:13:ed:7a:6a:92:41:b3:05:61:29:f5:43:d8:d9:
52:ca:88:ca:ba:61:8e:70:4d:05:a4:9d:cc:c0:11:e2:fb:35:
9a:1e:be:dd:56:f6:b2:0c:f5:f2:08:a3:3b:85:8d:d3:38:d9:
43:b9:00:a0:3a:b8:3b:18:8a:5c:ea:0f:7b:07:3a:40:a3:0c:
b0:10:39:3d:a4:65:bb:1f:20:d0:7c:e3:04:b4:30:95:59:92:
d5:13:f1:a4:f7:71:7a:ed:cc:b0:d8:26:a3:4f:ce:7e:ed:6a:
f5:ba:03:2c:41:b9:e0:d8:2c:99:61:1c:55:9b:2f:a9:38:aa:
56:d9:cb:6f:8a:a8:01:47:20:0b:f8:34:7e:7b:9f:b1:fc:e5:
8b:27:a7:0e:db:96:31:a3:2c:7c:05:30:88:3f:9a:74:28:12:
28:29:2e:dc:fc:b7:64:3c:fa:d8:8f:3d:f4:61:e5:de:4f:45:
73:42:37:c7:18:35:0e:80:78:2c:ea:71:78:4c:87:a4:b8:59:
51:52:85:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo3OPa0C3md39rTs6CgaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx
OWY3NjMwHhcNMjYwMzAyMTMwMTEzWhcNMjYwMzAzMTMwMTEzWjAzMTEwLwYDVQQD
EygyYTc5YmQwZGVkOWJhNDY0NWFlNjI0ODg5YWRkM2I3ZjlkYmJiOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSgUL84OoVsG/+GD4w7MG/LDKPNK
8Bd3Z/FQez3ICGzYcZ32yjkUIfHEEaJ6ONSqkxp2nZ0bFp+tAHjbKbeFk96LBqlK
KWanDsuoC3DqqaoF8q6Hlf9Tzc1CU3FOlpxQFg19DfYA2K4vKRa3669TnemE3QNC
jPA3mYJBr2+Q/RoZ1ekhG4zL6Fj7JCdh7zucVHrxWvHLx05COjzvjpkgdEKPA9cp
nbooee1hFWdBc39usRgzbSqcvzzt7N5m3xPf3H74NLnpxR4GDxYiuOyQuSk40tp9
V971fsPX6k+VCax+taUy5u28fQUI/RLeHAIDbG0VPffUZaOUKaX8vuhO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp5vQ3tm6RkWuYkiJrdO3+du7nLMB8GA1UdIwQY
MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt
ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx
LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKlI2zdh
z0Cuckue/jrNpeRr0vZ07EuGO9GlcBev383pkAHCDudfhVyA5TEsesUekWUd5Zc9
MP+5ChPtemqSQbMFYSn1Q9jZUsqIyrphjnBNBaSdzMAR4vs1mh6+3Vb2sgz18gij
O4WN0zjZQ7kAoDq4OxiKXOoPewc6QKMMsBA5PaRlux8g0HzjBLQwlVmS1RPxpPdx
eu3MsNgmo0/Ofu1q9boDLEG54NgsmWEcVZsvqTiqVtnLb4qoAUcgC/g0fnufsfzl
iyenDtuWMaMsfAUwiD+adCgSKCku3Py3ZDz62I899GHl3k9Fc0I3xxg1DoB4LOpx
eEyHpLhZUVKFBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:31 2026 by rpki-client