Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: uvyfIRCpHsNgxdbU1hQgdOgpRUkE6RPWB+P53PnrSqk=
Subject key identifier: 41:29:65:B3:65:A3:FF:84:8E:B6:B2:83:6C:EF:AA:F8:FA:E1:67:07
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019D9AE26503D7EF625099E1F4E5C662D0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0BF4
Signing time: Fri 17 Apr 2026 10:00:21 +0000
Manifest this update: Fri 17 Apr 2026 10:00:21 +0000
Manifest next update: Sat 18 Apr 2026 10:00:21 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: SmNopIN1gtKuTQx5TVIG9y0m8P8c4Jhf0L3NPcduHts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:65:03:d7:ef:62:50:99:e1:f4:e5:c6:62:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Apr 17 10:00:21 2026 GMT
Not After : Apr 18 10:00:21 2026 GMT
Subject: CN=412965b365a3ff848eb6b2836cefaaf8fae16707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:50:2b:7d:52:a9:11:56:df:93:de:f1:61:
7f:94:50:f8:27:63:1f:f2:50:68:35:6b:32:56:f8:
dd:38:ac:71:40:8d:f7:d1:45:c0:67:be:05:13:19:
a4:3d:7f:94:a6:52:64:e5:dc:79:5e:0b:6c:31:e8:
24:5b:06:dd:b5:55:9c:f6:da:d6:fc:c6:1f:c2:eb:
59:6d:c0:72:f6:0f:c9:85:56:bf:75:0f:c5:09:6f:
ae:ff:a4:48:5e:dc:28:04:46:38:21:ac:9a:a6:ad:
0f:c5:29:87:b4:f7:6b:4f:4d:c4:7b:0e:76:40:19:
88:b1:ff:dd:5e:5c:cb:14:ab:89:aa:83:3f:f1:57:
5a:02:e8:83:cf:72:97:a0:1c:ac:85:eb:28:be:5b:
82:2a:c9:85:22:f2:cf:6f:75:c2:72:72:9b:38:4f:
b0:a5:df:12:0d:2a:71:1d:b3:6a:38:f4:dc:65:ce:
26:74:40:fa:d9:3b:6f:28:81:07:8b:df:c1:2f:e1:
a5:62:8d:e3:ca:cb:ba:fb:c2:5a:12:6a:75:3c:51:
06:55:be:44:05:5f:52:52:a7:fb:9a:64:f1:98:57:
f2:65:61:dd:6c:1b:3a:5a:32:5a:f5:e8:db:39:fb:
72:50:d9:e0:0f:f6:a6:16:69:c4:00:f3:20:01:12:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:65:B3:65:A3:FF:84:8E:B6:B2:83:6C:EF:AA:F8:FA:E1:67:07
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:55:89:fb:12:5c:2f:2a:3c:94:11:61:7e:66:2a:22:ca:
c8:a5:d7:5f:eb:b9:0a:31:33:7d:f2:e3:26:b5:27:ec:33:35:
92:5c:8f:b8:40:e9:55:9f:bb:e2:52:28:99:dc:fd:e3:e3:0d:
72:7a:3c:ea:17:6c:86:a7:bc:4d:a0:77:48:35:af:b9:1f:d6:
71:e2:35:1b:75:0a:e6:36:42:a9:11:f1:2a:55:e9:e7:c8:e4:
a0:2d:8d:ca:c3:67:b3:40:e0:07:59:bc:3f:ba:96:90:32:92:
49:9a:90:d6:48:f8:51:13:8a:0f:f6:28:c1:d8:d3:b6:c1:c9:
9e:f5:da:00:6a:ba:5d:46:04:e1:e6:a6:6c:68:14:db:90:88:
f5:4d:56:79:6c:79:c2:e1:18:ae:da:35:8f:ad:4d:bc:e8:5c:
27:b7:82:b8:ae:2d:89:a0:c1:88:be:00:90:92:a9:89:65:16:
58:82:c7:bc:33:ba:05:2d:98:28:1e:4c:b1:2e:bf:85:d3:d9:
3f:34:02:15:ab:85:9d:34:c4:f0:19:83:dc:c5:05:fd:43:ab:
a3:35:46:bd:8f:3c:76:49:76:20:09:d3:21:3d:c1:62:0d:d3:
1e:45:41:7c:f1:7c:c8:90:82:b8:cc:24:6e:f0:8e:be:5f:77:
4f:d3:85:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4mUD1+9iUJnh9OXGYtDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2RjZTg1MGNiMjYyN2E1MmJkZjRiOTkzNGExMTI4OGNi
NmQyNzcwHhcNMjYwNDE3MTAwMDIxWhcNMjYwNDE4MTAwMDIxWjAzMTEwLwYDVQQD
Eyg0MTI5NjViMzY1YTNmZjg0OGViNmIyODM2Y2VmYWFmOGZhZTE2NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGxQK31SqRFW35Pe8WF/lFD4J2Mf
8lBoNWsyVvjdOKxxQI330UXAZ74FExmkPX+UplJk5dx5XgtsMegkWwbdtVWc9trW
/MYfwutZbcBy9g/JhVa/dQ/FCW+u/6RIXtwoBEY4Iayapq0PxSmHtPdrT03Eew52
QBmIsf/dXlzLFKuJqoM/8VdaAuiDz3KXoByshesovluCKsmFIvLPb3XCcnKbOE+w
pd8SDSpxHbNqOPTcZc4mdED62TtvKIEHi9/BL+GlYo3jysu6+8JaEmp1PFEGVb5E
BV9SUqf7mmTxmFfyZWHdbBs6WjJa9ejbOftyUNngD/amFmnEAPMgARIw6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEpZbNlo/+Ejrayg2zvqvj64WcHMB8GA1UdIwQY
MBaAFOk9zoUMsmJ6Ur30uZNKESiMttJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMt
ZjVlOTM2NDY2OThlLzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMtZjVlOTM2NDY2OThl
LzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZFVifsS
XC8qPJQRYX5mKiLKyKXXX+u5CjEzffLjJrUn7DM1klyPuEDpVZ+74lIomdz94+MN
cno86hdshqe8TaB3SDWvuR/WceI1G3UK5jZCqRHxKlXp58jkoC2NysNns0DgB1m8
P7qWkDKSSZqQ1kj4UROKD/YowdjTtsHJnvXaAGq6XUYE4eambGgU25CI9U1WeWx5
wuEYrto1j61NvOhcJ7eCuK4tiaDBiL4AkJKpiWUWWILHvDO6BS2YKB5MsS6/hdPZ
PzQCFauFnTTE8BmD3MUF/UOrozVGvY88dkl2IAnTIT3BYg3THkVBfPF8yJCCuMwk
bvCOvl93T9OFCA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:43 2026 by rpki-client