Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: pLeTAfpgCmayuoCww9iwxK7s/RjYvJ9MMbcjllns1ZM=
Subject key identifier: 99:FC:77:28:E3:C6:70:6C:69:0D:A3:29:48:1F:DC:32:5B:51:97:0B
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 01A117186680D1DE622FE34C67E5511502E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0DC2
Signing time: Wed 07 Oct 2026 16:00:37 +0000
Manifest this update: Wed 07 Oct 2026 16:00:37 +0000
Manifest next update: Thu 08 Oct 2026 16:00:37 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: jsC4cQxcZF1coWulwjhN8spX3RPgq1s+Dw/m6z4XEqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:18:66:80:d1:de:62:2f:e3:4c:67:e5:51:15:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Oct 7 16:00:37 2026 GMT
Not After : Oct 8 16:00:37 2026 GMT
Subject: CN=99fc7728e3c6706c690da329481fdc325b51970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:c5:cd:bc:3c:26:a7:9a:f8:6a:52:2f:83:
34:3b:af:4a:de:8c:79:6f:81:4a:65:25:bb:4c:fb:
0f:1a:7a:8d:31:95:86:b3:46:54:11:13:e9:d0:b7:
de:9f:18:25:61:bf:65:db:25:6f:82:c7:6d:0f:d6:
1c:77:d8:b8:27:13:e0:0b:f4:0b:4d:31:c0:9f:96:
b9:2f:61:f9:d7:8b:f6:a4:7a:52:96:24:1f:9b:e1:
73:89:c8:0b:60:be:d1:3a:3e:52:7e:f2:a1:5f:31:
14:0f:8a:f1:a2:e0:7f:70:7d:15:77:70:b5:2a:50:
64:98:14:e0:fb:86:25:52:b5:a7:fb:56:5d:cf:06:
d6:1b:25:59:fe:22:50:26:31:99:1b:5c:fe:fb:f6:
ae:55:83:f5:97:1a:33:eb:28:59:71:d0:f7:14:4f:
90:bf:da:23:52:a9:8d:0c:4f:92:5c:3c:df:9d:5d:
f6:17:5b:98:ea:fb:d6:3d:be:53:5a:28:d7:dc:7c:
ac:7e:41:cc:49:59:3b:46:83:5e:fd:a8:a5:72:d1:
f3:bf:2e:34:fa:da:d0:06:93:fa:fa:10:4c:54:29:
c2:de:98:03:72:87:f8:1f:d4:28:58:5d:ee:bb:29:
78:62:14:3b:4c:ba:7c:49:e7:e5:ba:e5:16:18:15:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:77:28:E3:C6:70:6C:69:0D:A3:29:48:1F:DC:32:5B:51:97:0B
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:53:95:27:4f:a4:4a:92:cf:91:6f:7f:2a:07:b7:b6:b8:9b:
24:1a:49:5e:ce:bb:be:eb:09:36:c8:2c:cf:de:bd:91:e5:14:
5a:9a:9e:7b:5f:57:41:e2:73:e6:ec:ec:04:c2:31:31:fe:d9:
cf:3d:6e:7f:e3:f8:60:9b:bc:48:2a:20:e8:16:c9:df:11:39:
db:1f:58:6c:8a:86:4c:59:5d:b9:b4:dd:d8:c1:04:90:69:e8:
73:e6:7a:4c:e9:2c:f2:79:71:e1:44:1a:59:4f:0e:37:06:c0:
70:e9:27:8a:c9:6d:b7:cf:7a:ee:b3:49:a6:31:dc:f0:7e:6d:
a7:23:5f:80:ae:dd:39:8b:09:07:9b:3b:a7:ba:4f:d8:08:47:
01:d5:1d:9a:74:63:b8:74:1c:ba:1a:3c:b4:d4:29:08:d6:8a:
fc:03:87:6d:78:8b:45:1c:e9:30:17:ca:97:75:4a:b8:76:96:
d6:0e:9c:28:bd:8d:9a:e4:6c:28:3a:7e:97:07:39:6c:e0:f7:
58:e6:98:51:03:86:26:62:26:92:0e:b7:1c:93:36:f9:bd:bf:
cc:8b:ab:c1:e6:be:cd:16:19:82:64:c6:24:ad:d7:31:f0:ba:
be:4e:a4:61:a5:8a:35:4e:ee:ce:ac:ed:a0:d0:40:2a:ac:1e:
c8:c0:66:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXGGaA0d5iL+NMZ+VRFQLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2RjZTg1MGNiMjYyN2E1MmJkZjRiOTkzNGExMTI4OGNi
NmQyNzcwHhcNMjYxMDA3MTYwMDM3WhcNMjYxMDA4MTYwMDM3WjAzMTEwLwYDVQQD
Eyg5OWZjNzcyOGUzYzY3MDZjNjkwZGEzMjk0ODFmZGMzMjViNTE5NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkczFzbw8Jqea+GpSL4M0O69K3ox5
b4FKZSW7TPsPGnqNMZWGs0ZUERPp0LfenxglYb9l2yVvgsdtD9Ycd9i4JxPgC/QL
TTHAn5a5L2H514v2pHpSliQfm+FzicgLYL7ROj5SfvKhXzEUD4rxouB/cH0Vd3C1
KlBkmBTg+4YlUrWn+1ZdzwbWGyVZ/iJQJjGZG1z++/auVYP1lxoz6yhZcdD3FE+Q
v9ojUqmNDE+SXDzfnV32F1uY6vvWPb5TWijX3HysfkHMSVk7RoNe/ailctHzvy40
+trQBpP6+hBMVCnC3pgDcof4H9QoWF3uuyl4YhQ7TLp8SefluuUWGBV0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn8dyjjxnBsaQ2jKUgf3DJbUZcLMB8GA1UdIwQY
MBaAFOk9zoUMsmJ6Ur30uZNKESiMttJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMt
ZjVlOTM2NDY2OThlLzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMtZjVlOTM2NDY2OThl
LzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlOVJ0+k
SpLPkW9/Kge3tribJBpJXs67vusJNsgsz969keUUWpqee19XQeJz5uzsBMIxMf7Z
zz1uf+P4YJu8SCog6BbJ3xE52x9YbIqGTFldubTd2MEEkGnoc+Z6TOks8nlx4UQa
WU8ONwbAcOknisltt8967rNJpjHc8H5tpyNfgK7dOYsJB5s7p7pP2AhHAdUdmnRj
uHQcuho8tNQpCNaK/AOHbXiLRRzpMBfKl3VKuHaW1g6cKL2NmuRsKDp+lwc5bOD3
WOaYUQOGJmImkg63HJM2+b2/zIurwea+zRYZgmTGJK3XMfC6vk6kYaWKNU7uzqzt
oNBAKqweyMBmeQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:18:31 2026 by rpki-client