Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier: KI+XfBwtyRNowCfi5SWXxbelCsZgBTY8R5jOr1kLQG4=
Subject key identifier: 6F:20:47:39:EC:59:C0:CA:10:29:61:47:75:64:29:1D:66:87:39:7A
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 019CAED9E777AC97955AFAE02F771EB7E2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number: 1137
Signing time: Mon 02 Mar 2026 14:00:42 +0000
Manifest this update: Mon 02 Mar 2026 14:00:42 +0000
Manifest next update: Tue 03 Mar 2026 14:00:42 +0000
Files and hashes: 1: W8jOnIUAyFMaEP25sAUwJyxVaIM.roa (hash: i6lculuV3eQhPhN35emc/bL4sPdv/8Y0MhiLt4tT+wI=)
2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: o8bxWqLlAiR/rthC9prk3KJUr5CKQLjftRTMZEDRM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:e7:77:ac:97:95:5a:fa:e0:2f:77:1e:b7:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Mar 2 14:00:42 2026 GMT
Not After : Mar 3 14:00:42 2026 GMT
Subject: CN=6f204739ec59c0ca102961477564291d6687397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:0f:8a:14:7e:8c:ef:4d:4f:35:b8:c7:cb:
3b:92:78:9b:57:b1:55:3f:e3:68:14:08:be:c0:17:
7a:52:b9:09:c0:8e:2f:f2:8b:e4:be:9d:ca:aa:30:
d5:e1:11:d1:b8:11:ca:e0:26:0f:ad:34:89:f7:34:
7e:91:c6:13:11:b9:13:6b:e5:0c:6a:31:63:33:b3:
42:90:03:f9:18:e3:2c:e0:98:e1:eb:32:71:d1:bf:
36:ba:9b:39:de:1d:e7:fc:c4:6a:0d:02:3b:70:c1:
8a:c7:32:38:10:84:01:e3:2a:1b:fe:dd:64:a2:03:
43:b9:44:c4:e9:d5:92:d3:41:89:e6:8d:0e:e5:f6:
69:ca:4b:c0:ca:22:a2:62:bc:b5:a7:10:03:32:96:
d4:17:f2:36:c2:12:f9:55:69:1c:bb:aa:0c:3c:08:
92:95:5b:05:67:d6:0c:0b:3b:3d:e9:bb:36:4c:fe:
c4:02:5b:f3:a8:fc:0a:dd:1d:9c:74:e9:89:98:67:
62:a9:80:de:cc:47:2e:ab:1c:23:d4:9d:cb:fd:52:
b9:2c:76:ab:a8:ee:64:2d:b4:45:cd:4e:2d:2d:e3:
28:0f:62:39:a7:1a:aa:b8:50:03:1e:2c:63:36:05:
0c:91:55:b1:f8:4e:b6:0b:7a:76:a3:46:80:cb:b8:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:20:47:39:EC:59:C0:CA:10:29:61:47:75:64:29:1D:66:87:39:7A
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e5:ee:83:f3:1f:50:44:99:dd:fe:8f:2e:8a:35:96:31:4d:
b8:6c:c7:3a:c0:59:3b:f7:c7:41:cd:98:64:c5:b8:7f:92:bd:
ba:2f:cb:45:a9:e8:58:90:5c:f2:23:6f:51:4c:9d:7d:c8:c1:
4b:62:8a:84:6d:9d:ba:e9:68:81:80:72:9a:70:46:cc:75:c3:
e4:16:23:cc:68:00:44:ee:1c:47:57:fe:d2:27:a8:a3:75:05:
08:5f:63:13:4d:a3:9c:c6:60:60:12:8a:39:7e:3c:fd:52:20:
e8:30:f3:d4:c1:f4:5e:85:cd:10:7b:da:0e:26:9c:ca:3e:b7:
e0:50:8f:b7:d9:79:4a:6b:59:52:cb:c0:93:ab:1d:9d:a0:c3:
43:7a:72:e2:04:0a:ad:03:5a:ba:1f:b3:58:6f:56:69:bf:15:
0a:c8:3c:94:5f:aa:30:2a:e8:0e:58:db:e4:d0:37:e4:51:ea:
b0:a3:d8:e9:bc:32:25:e5:ec:b9:5a:af:94:ec:f3:f8:a8:f0:
a0:cc:17:99:0b:45:d0:59:af:19:73:a4:98:b4:e7:e9:d6:55:
36:c6:3c:96:32:3b:67:66:7b:be:62:80:ae:76:0b:50:02:dc:
87:e3:29:af:bf:23:80:04:d5:35:d9:d6:da:c0:57:93:d8:73:
0f:ad:85:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2ed3rJeVWvrgL3cet+LOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTFlZWQzYWNlMGZjMmY4YWEwMDBkZTY4N2E0OWJlZmQy
NzkxZDgwHhcNMjYwMzAyMTQwMDQyWhcNMjYwMzAzMTQwMDQyWjAzMTEwLwYDVQQD
Eyg2ZjIwNDczOWVjNTljMGNhMTAyOTYxNDc3NTY0MjkxZDY2ODczOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEMPihR+jO9NTzW4x8s7knibV7FV
P+NoFAi+wBd6UrkJwI4v8ovkvp3KqjDV4RHRuBHK4CYPrTSJ9zR+kcYTEbkTa+UM
ajFjM7NCkAP5GOMs4Jjh6zJx0b82ups53h3n/MRqDQI7cMGKxzI4EIQB4yob/t1k
ogNDuUTE6dWS00GJ5o0O5fZpykvAyiKiYry1pxADMpbUF/I2whL5VWkcu6oMPAiS
lVsFZ9YMCzs96bs2TP7EAlvzqPwK3R2cdOmJmGdiqYDezEcuqxwj1J3L/VK5LHar
qO5kLbRFzU4tLeMoD2I5pxqquFADHixjNgUMkVWx+E62C3p2o0aAy7ij1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8gRznsWcDKEClhR3VkKR1mhzl6MB8GA1UdIwQY
MBaAFHeh7tOs4PwviqAA3mh6Sb79J5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjkt
MjIwNGVlMjE3MjgwLzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjktMjIwNGVlMjE3Mjgw
LzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOXug/Mf
UESZ3f6PLoo1ljFNuGzHOsBZO/fHQc2YZMW4f5K9ui/LRanoWJBc8iNvUUydfcjB
S2KKhG2duulogYBymnBGzHXD5BYjzGgARO4cR1f+0ieoo3UFCF9jE02jnMZgYBKK
OX48/VIg6DDz1MH0XoXNEHvaDiacyj634FCPt9l5SmtZUsvAk6sdnaDDQ3py4gQK
rQNauh+zWG9Wab8VCsg8lF+qMCroDljb5NA35FHqsKPY6bwyJeXsuVqvlOzz+Kjw
oMwXmQtF0FmvGXOkmLTn6dZVNsY8ljI7Z2Z7vmKArnYLUALch+Mpr78jgATVNdnW
2sBXk9hzD62FWQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:39 2026 by rpki-client