Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: 7iD4p1BwyoAErhxfT++/NCVVnqG4DAABWbcks3wDOmY=
Subject key identifier: 57:B7:6F:AB:9D:4B:AC:86:47:30:15:87:A9:D8:00:22:25:EE:FF:7A
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019CAB6BA7690B78F2963804E95D38A76D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0DA6
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: fbF8QwJN6rDTSHKqp01g2Ml5zEjVFQSmUupPYNwrFMQ=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a7:69:0b:78:f2:96:38:04:e9:5d:38:a7:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=57b76fab9d4bac8647301587a9d8002225eeff7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:cd:16:2a:0f:0a:9f:2d:15:07:e9:03:a4:
0c:3a:b4:89:86:9d:75:cc:a6:34:a9:b0:53:af:dd:
51:33:30:ff:50:15:24:8d:43:d9:72:79:27:e3:cc:
c5:a8:70:85:1f:57:17:c4:22:f2:ef:21:b1:0c:9a:
39:2a:2c:ee:44:fe:c7:bd:ac:0f:fb:0d:b8:c7:3d:
fc:f0:50:6f:4f:5f:cb:a4:cc:75:d7:0d:a7:81:c9:
4a:f9:df:e9:dd:59:79:08:a2:61:ff:35:8e:3e:3c:
c7:0f:80:73:ce:9a:44:a1:46:18:40:40:3a:02:c5:
ba:63:51:bb:3b:fb:ee:17:9f:d8:62:3c:fe:d4:44:
6a:64:a1:ed:6c:a7:14:b9:07:c1:1d:1a:e1:03:e1:
ac:cb:aa:90:3c:62:44:57:a9:23:45:06:79:f9:1c:
a4:bb:fe:aa:1d:a4:b9:4b:f6:e9:55:25:6e:6f:06:
2e:5a:91:ad:b0:be:cd:a2:db:89:ca:0d:09:85:19:
2a:09:e8:28:db:2b:17:7d:b6:69:86:34:00:aa:8d:
d2:d5:1c:7b:b4:88:75:bc:5d:fe:ec:89:84:6a:28:
83:f2:22:68:34:90:09:e9:9f:81:eb:19:67:9c:6b:
08:98:7a:a5:cb:19:6c:7f:cf:ff:aa:6e:5d:4e:78:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:6F:AB:9D:4B:AC:86:47:30:15:87:A9:D8:00:22:25:EE:FF:7A
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1d:4c:b4:8b:1b:e7:1a:d2:62:ba:69:3e:58:54:08:9b:d1:
13:6a:e9:b9:9c:a4:be:2a:17:6e:aa:13:f2:b6:30:ec:16:09:
fd:8d:d0:46:ee:8a:6d:c8:ac:c4:dd:93:89:dc:b0:b4:62:e1:
8c:d1:19:c0:8e:76:69:88:ef:e7:71:c1:af:9f:9e:6b:78:ba:
69:35:a3:9c:fd:aa:4c:51:f5:47:9a:fb:ca:47:5d:9a:61:e3:
76:74:d4:03:ed:db:ea:31:61:64:f0:7a:d1:e8:c0:33:d5:3c:
76:64:40:40:d7:87:f0:66:5d:6c:7b:3a:db:c6:5c:1e:4b:42:
63:c9:01:e6:32:b3:46:b1:e1:bf:b8:b2:14:55:8a:44:ff:de:
2d:7c:92:8c:6a:d8:35:47:56:84:99:b4:e2:6e:c4:04:87:61:
d1:99:b5:7b:7e:a2:4c:72:16:e9:f3:ae:09:4f:df:eb:b5:73:
8e:aa:02:2c:e9:f3:20:74:ba:21:25:61:e4:5b:30:12:e4:5d:
60:62:ba:31:3d:cd:8a:1b:7f:82:c0:e9:50:c3:43:d0:22:da:
e8:30:86:21:f8:17:a9:a8:54:5a:74:b0:8f:bf:ed:55:79:3d:
c8:b6:bd:c5:cb:2a:f7:86:41:86:e6:db:b9:ef:a8:75:e1:b3:
f7:ba:7a:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6dpC3jyljgE6V04p207MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh
YzZlMDcwHhcNMjYwMzAxMjIwMTI0WhcNMjYwMzAyMjIwMTI0WjAzMTEwLwYDVQQD
Eyg1N2I3NmZhYjlkNGJhYzg2NDczMDE1ODdhOWQ4MDAyMjI1ZWVmZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurnNFioPCp8tFQfpA6QMOrSJhp11
zKY0qbBTr91RMzD/UBUkjUPZcnkn48zFqHCFH1cXxCLy7yGxDJo5KizuRP7HvawP
+w24xz388FBvT1/LpMx11w2ngclK+d/p3Vl5CKJh/zWOPjzHD4BzzppEoUYYQEA6
AsW6Y1G7O/vuF5/YYjz+1ERqZKHtbKcUuQfBHRrhA+Gsy6qQPGJEV6kjRQZ5+Ryk
u/6qHaS5S/bpVSVubwYuWpGtsL7NotuJyg0JhRkqCego2ysXfbZphjQAqo3S1Rx7
tIh1vF3+7ImEaiiD8iJoNJAJ6Z+B6xlnnGsImHqlyxlsf8//qm5dTniPNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe3b6udS6yGRzAVh6nYACIl7v96MB8GA1UdIwQY
MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt
NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1
LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbR1MtIsb
5xrSYrppPlhUCJvRE2rpuZykvioXbqoT8rYw7BYJ/Y3QRu6KbcisxN2TidywtGLh
jNEZwI52aYjv53HBr5+ea3i6aTWjnP2qTFH1R5r7ykddmmHjdnTUA+3b6jFhZPB6
0ejAM9U8dmRAQNeH8GZdbHs628ZcHktCY8kB5jKzRrHhv7iyFFWKRP/eLXySjGrY
NUdWhJm04m7EBIdh0Zm1e36iTHIW6fOuCU/f67VzjqoCLOnzIHS6ISVh5FswEuRd
YGK6MT3Niht/gsDpUMND0CLa6DCGIfgXqahUWnSwj7/tVXk9yLa9xcsq94ZBhubb
ue+odeGz97p6yg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:38 2026 by rpki-client