Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: yVlgNx4sq2Zd+/daE03uGU4yhaodxLvAIygPKmbHizs=
Subject key identifier: 0D:6B:1C:57:28:DF:B4:43:C4:2F:46:3C:06:90:6B:BC:9C:2C:07:4B
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019CACEB5C76F1BA072A49C0B88D2788AE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0438
Signing time: Mon 02 Mar 2026 05:00:31 +0000
Manifest this update: Mon 02 Mar 2026 05:00:31 +0000
Manifest next update: Tue 03 Mar 2026 05:00:31 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: Z0j4CLrG8tgP+Xo0HxPVWvGEmKOd6LA6TtAMXsHXIQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5c:76:f1:ba:07:2a:49:c0:b8:8d:27:88:ae:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Mar 2 05:00:31 2026 GMT
Not After : Mar 3 05:00:31 2026 GMT
Subject: CN=0d6b1c5728dfb443c42f463c06906bbc9c2c074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:c0:ef:f6:fe:28:44:94:d7:d2:07:09:b5:
09:8d:52:63:02:1a:af:95:e8:86:0a:ef:08:a3:0b:
f1:90:2a:41:0d:0b:cd:ae:1b:bb:40:07:4a:6d:30:
08:aa:a5:9b:3c:e9:c2:06:f8:65:ce:bd:1c:9c:45:
43:d1:4f:1b:2b:4f:a8:e7:e7:8c:12:c4:5c:1a:63:
cf:31:be:2a:00:cf:22:d5:b5:37:b5:18:ce:d9:55:
e3:0c:0a:fc:b5:d0:37:1c:de:50:b0:1a:90:8c:50:
df:b0:45:84:01:b5:a3:a0:45:32:87:2b:c7:13:07:
2f:2a:2b:10:df:12:03:c4:09:f6:cd:3e:fd:fd:e0:
d6:bb:fa:17:58:4a:69:cb:69:c1:d9:fc:9a:84:54:
bc:08:35:76:e4:a9:d2:42:f0:e3:88:b8:ab:83:ac:
44:3c:83:40:e7:8c:e8:d1:3f:0f:41:fb:9b:73:ef:
3d:18:c8:82:96:32:63:b2:a7:15:a6:45:aa:05:fe:
76:a4:0f:c9:64:c0:0a:9f:78:b1:de:2c:27:6a:e8:
48:be:c0:80:dd:19:d6:bf:00:51:73:f3:87:7c:cb:
38:72:ae:22:34:0e:07:eb:0b:6c:19:0c:31:11:79:
0a:0a:6c:19:e7:71:1a:36:51:7a:fc:6a:2f:e0:ee:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:1C:57:28:DF:B4:43:C4:2F:46:3C:06:90:6B:BC:9C:2C:07:4B
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:dd:0f:e7:59:b7:f8:6f:5d:9e:08:38:16:47:f5:13:ef:f8:
fc:a3:a7:ee:c9:7a:90:b3:fe:db:40:88:10:e9:bb:18:3d:0a:
7a:05:9f:cb:60:7d:b0:27:53:87:e8:4d:0e:55:93:05:b8:d9:
26:62:eb:2e:86:fc:27:bb:f2:f2:ab:6f:2b:02:5b:09:65:b2:
fd:74:fd:c7:19:22:11:ba:81:d2:12:8d:15:34:e4:60:67:38:
ac:89:1d:93:ec:52:9e:d8:97:e6:92:a7:fe:f6:ce:95:d6:44:
57:4a:1c:b0:a1:95:cb:3b:21:63:f9:a8:69:b2:51:95:c8:9b:
b4:45:47:9a:76:ae:7b:68:a6:ee:82:5f:0d:1e:53:5f:8c:e0:
ff:57:18:60:c0:fb:fb:c2:be:8b:42:08:d4:1b:fc:bc:8e:57:
35:3c:96:38:5a:21:99:1e:40:5c:50:85:95:93:4a:df:49:6a:
e8:ba:f8:e9:44:54:6d:51:6d:59:5d:8f:ec:ba:68:33:2e:6a:
c6:db:9a:de:1c:55:db:0a:0e:e7:e4:70:3e:31:ea:ef:d0:8a:
95:3f:54:4e:53:9c:61:12:35:79:f0:96:30:2d:ee:e8:c2:90:
0c:66:bc:5b:f8:63:f3:fc:24:ff:2e:60:5f:d4:20:b8:c1:85:
d2:7a:db:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys61x28boHKknAuI0niK4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4
MWU4YzIwHhcNMjYwMzAyMDUwMDMxWhcNMjYwMzAzMDUwMDMxWjAzMTEwLwYDVQQD
EygwZDZiMWM1NzI4ZGZiNDQzYzQyZjQ2M2MwNjkwNmJiYzljMmMwNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsijA7/b+KESU19IHCbUJjVJjAhqv
leiGCu8IowvxkCpBDQvNrhu7QAdKbTAIqqWbPOnCBvhlzr0cnEVD0U8bK0+o5+eM
EsRcGmPPMb4qAM8i1bU3tRjO2VXjDAr8tdA3HN5QsBqQjFDfsEWEAbWjoEUyhyvH
EwcvKisQ3xIDxAn2zT79/eDWu/oXWEppy2nB2fyahFS8CDV25KnSQvDjiLirg6xE
PINA54zo0T8PQfubc+89GMiCljJjsqcVpkWqBf52pA/JZMAKn3ix3iwnauhIvsCA
3RnWvwBRc/OHfMs4cq4iNA4H6wtsGQwxEXkKCmwZ53EaNlF6/Gov4O7D3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1rHFco37RDxC9GPAaQa7ycLAdLMB8GA1UdIwQY
MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt
ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh
LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN0P51m3
+G9dngg4Fkf1E+/4/KOn7sl6kLP+20CIEOm7GD0KegWfy2B9sCdTh+hNDlWTBbjZ
JmLrLob8J7vy8qtvKwJbCWWy/XT9xxkiEbqB0hKNFTTkYGc4rIkdk+xSntiX5pKn
/vbOldZEV0ocsKGVyzshY/moabJRlcibtEVHmnaue2im7oJfDR5TX4zg/1cYYMD7
+8K+i0II1Bv8vI5XNTyWOFohmR5AXFCFlZNK30lq6Lr46URUbVFtWV2P7LpoMy5q
xtua3hxV2woO5+RwPjHq79CKlT9UTlOcYRI1efCWMC3u6MKQDGa8W/hj8/wk/y5g
X9QguMGF0nrbaw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:02 2026 by rpki-client