
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: sDtH7vFyTV0adOOOTIXW4M/j8ySz1SspvotvgJbpXSM=
Subject key identifier: 84:77:92:93:38:0B:3A:4C:90:61:19:51:42:3A:62:16:D7:CB:51:1B
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 019D9C2CF72CBDEB515032482A44D71F68F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 16:01:25 +0000
Manifest this update: Fri 17 Apr 2026 16:01:25 +0000
Manifest next update: Sat 18 Apr 2026 16:01:25 +0000
Files and hashes: 1: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: 6jF2Hf5eTZBcpjNuLmZoZqCtcKe4Wk0uOZHvxtZXM8U=)
2: u65mmO6HRK5seaMFhAXBI1NDzRY.roa (hash: bDLwuznXJEsV9R4nt39n1oPS76JZaY8ubPqpqj3zceQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:f7:2c:bd:eb:51:50:32:48:2a:44:d7:1f:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Apr 17 16:01:25 2026 GMT
Not After : Apr 18 16:01:25 2026 GMT
Subject: CN=84779293380b3a4c90611951423a6216d7cb511b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:b2:13:b5:5b:0e:eb:5c:c1:d5:e1:93:5d:
05:ab:45:8d:3d:8e:12:67:c9:f3:de:c0:5a:89:0e:
f2:4d:0b:a5:05:b2:c2:81:58:1e:a0:f5:16:42:ae:
6d:05:32:65:ec:e3:8e:bb:24:21:bc:04:fd:46:28:
54:8d:76:ef:26:3f:0b:26:c4:c4:47:51:3b:49:e8:
d9:f6:b3:93:ca:55:8c:d4:9d:55:05:a1:c4:6f:0a:
a8:57:49:02:7a:a8:37:8b:fd:2f:9e:63:4a:f9:4b:
b1:c3:44:a5:c6:79:7f:65:31:7f:c8:e4:cb:fd:81:
af:2c:b9:d3:a4:99:ff:e6:38:d5:cd:ec:d3:74:b9:
67:34:1c:d1:aa:52:77:6d:54:59:b0:f6:36:2a:9e:
14:ee:95:f5:a5:ec:7c:ac:7d:88:1c:5d:a2:32:fc:
b4:7c:f1:aa:28:35:98:ab:4a:23:cf:c3:1d:0d:2c:
fb:c2:f7:a6:72:df:01:7b:a3:8c:07:01:eb:9b:a1:
bd:b4:23:61:89:94:53:53:cc:e8:dd:83:f0:bd:1e:
cb:74:3b:97:c3:63:dc:9c:7b:06:36:60:c2:4e:84:
fa:29:e0:e8:06:a2:23:0a:72:c3:5a:26:9f:aa:0a:
21:7d:e1:ed:31:4e:f4:5f:95:aa:4a:66:0d:71:1f:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:92:93:38:0B:3A:4C:90:61:19:51:42:3A:62:16:D7:CB:51:1B
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:23:5c:dc:f9:9d:42:ea:a2:96:77:8f:0b:78:c2:7b:ea:0f:
f9:c0:4c:c3:c2:07:cd:7f:15:aa:7f:a5:11:12:bf:ea:ee:58:
68:28:9e:78:82:62:ef:18:15:95:13:58:bc:0d:e9:5c:12:c6:
14:73:eb:78:00:89:d4:97:ab:4b:ca:c6:d9:d9:b3:48:54:20:
7f:9c:b2:03:be:38:23:11:a5:a4:aa:bd:28:0d:0f:39:39:82:
fe:8c:ac:7f:d1:f8:48:f4:6c:bf:62:26:b6:d7:de:bd:f6:29:
c2:e3:2b:03:f5:34:e4:5e:c0:50:f9:09:cc:f1:ac:00:97:f3:
5d:22:7f:6d:5a:8a:82:07:1e:f7:c7:94:a7:5b:9d:fb:9f:e8:
dc:ef:41:76:40:59:85:cc:46:73:44:a4:27:47:83:f5:c0:db:
00:dd:42:b2:ec:15:f2:d0:82:f7:d6:6d:9d:89:52:99:2e:98:
b6:28:bd:eb:d7:74:fb:95:97:69:a6:b1:94:18:a3:53:a4:b3:
75:84:6c:16:e9:0f:d2:28:ed:79:7b:e8:f9:fa:3d:51:9a:98:
f4:17:95:1a:8e:50:11:a7:09:fa:80:d6:12:0e:8e:fe:6c:ea:
9c:e2:e0:8c:3f:27:f3:9b:e0:42:10:1b:4e:17:1c:01:9c:36:
3c:75:59:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLPcsvetRUDJIKkTXH2j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx
OWY3NjMwHhcNMjYwNDE3MTYwMTI1WhcNMjYwNDE4MTYwMTI1WjAzMTEwLwYDVQQD
Eyg4NDc3OTI5MzM4MGIzYTRjOTA2MTE5NTE0MjNhNjIxNmQ3Y2I1MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloiyE7VbDutcwdXhk10Fq0WNPY4S
Z8nz3sBaiQ7yTQulBbLCgVgeoPUWQq5tBTJl7OOOuyQhvAT9RihUjXbvJj8LJsTE
R1E7SejZ9rOTylWM1J1VBaHEbwqoV0kCeqg3i/0vnmNK+Uuxw0Slxnl/ZTF/yOTL
/YGvLLnTpJn/5jjVzezTdLlnNBzRqlJ3bVRZsPY2Kp4U7pX1pex8rH2IHF2iMvy0
fPGqKDWYq0ojz8MdDSz7wvemct8Be6OMBwHrm6G9tCNhiZRTU8zo3YPwvR7LdDuX
w2PcnHsGNmDCToT6KeDoBqIjCnLDWiafqgohfeHtMU70X5WqSmYNcR/1dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR3kpM4CzpMkGEZUUI6YhbXy1EbMB8GA1UdIwQY
MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt
ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx
LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCNc3Pmd
QuqilnePC3jCe+oP+cBMw8IHzX8Vqn+lERK/6u5YaCieeIJi7xgVlRNYvA3pXBLG
FHPreACJ1JerS8rG2dmzSFQgf5yyA744IxGlpKq9KA0POTmC/oysf9H4SPRsv2Im
ttfevfYpwuMrA/U05F7AUPkJzPGsAJfzXSJ/bVqKggce98eUp1ud+5/o3O9BdkBZ
hcxGc0SkJ0eD9cDbAN1CsuwV8tCC99ZtnYlSmS6Ytii969d0+5WXaaaxlBijU6Sz
dYRsFukP0ijteXvo+fo9UZqY9BeVGo5QEacJ+oDWEg6O/mzqnOLgjD8n85vgQhAb
ThccAZw2PHVZnw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:55 2026 by rpki-client