Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: oP1D21yO9Ez27iEWbIV9hnscI2OlCOhIbq2RntSns8I=
Subject key identifier: 7E:3E:06:7E:23:97:D0:65:F3:0D:87:E6:76:0D:FA:B7:8B:F6:37:0D
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019CAC0FE9F90F2DEC8FF88C087ADF3E0E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: EF9xnFC+Fs41AuVLCIf7ufD8vL7JfMWUz1oQc5SA6Ic=)
2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e9:f9:0f:2d:ec:8f:f8:8c:08:7a:df:3e:0e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=7e3e067e2397d065f30d87e6760dfab78bf6370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:e1:6a:74:2e:07:7f:25:f0:6e:0d:f1:be:
5c:54:4f:a9:4d:22:c1:10:4d:3f:45:94:d9:08:48:
51:3e:90:a0:a0:2f:29:c4:01:16:39:90:02:62:81:
1a:be:32:2a:ab:9e:fc:04:b8:1b:9d:05:24:a0:1e:
b2:fb:f0:74:b4:3e:e1:e0:3b:44:f8:77:be:03:93:
ca:4f:50:44:70:cc:c3:5c:ea:e0:2c:96:54:fe:fd:
53:9b:84:64:53:a6:45:b7:35:78:6e:ab:20:c5:9b:
e9:f2:4d:6f:73:66:5e:4a:8d:3a:58:bb:84:e0:cd:
39:9c:88:2a:dc:bd:74:0b:e8:bf:f2:67:ff:d5:45:
de:60:8e:6f:1f:0b:89:7e:f5:e7:4f:11:dc:3d:ae:
54:da:cc:0a:8f:6d:15:a3:55:81:b1:34:a7:0b:ae:
bb:c8:0f:c7:ce:61:9e:9d:1a:9f:8d:c8:46:eb:5c:
95:d2:d0:6b:03:e7:b7:70:8a:29:d1:12:f8:fd:81:
d6:6a:cc:49:05:61:90:1a:45:bd:80:32:69:e0:0e:
42:4b:87:72:44:4e:c0:7c:1f:52:ee:9d:2e:9c:d4:
b2:7f:b5:93:a2:ac:8e:17:bd:12:aa:e4:ac:39:cf:
a6:94:81:d1:95:5a:89:89:f9:2d:6d:81:8f:89:ad:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3E:06:7E:23:97:D0:65:F3:0D:87:E6:76:0D:FA:B7:8B:F6:37:0D
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:25:96:c3:78:2e:7a:24:46:0d:b5:fa:ba:e4:5a:31:5b:57:
37:9c:13:2a:cf:cb:c9:16:57:72:56:c3:ed:dc:b0:f7:40:dd:
b1:86:60:12:12:44:9e:3a:96:eb:3b:3c:24:e9:c8:ed:09:29:
46:f0:d7:a7:84:bb:ad:58:25:cb:6b:d8:ce:45:0a:8e:45:3f:
fe:10:58:f5:ca:21:31:55:05:bf:de:44:e3:8d:99:3c:81:04:
6b:d6:58:25:88:d6:8c:2b:50:7b:04:cc:50:03:6d:7c:3f:b4:
d5:32:95:a0:9c:f2:94:76:30:55:5d:d3:90:a3:bb:94:7c:5c:
3d:b3:98:21:78:8d:6c:9c:1f:cf:3e:88:cf:e4:a0:5f:26:76:
52:c6:30:42:a1:be:f4:97:d2:87:37:dc:19:4f:40:08:94:ec:
e6:9a:16:00:85:b3:99:47:51:ce:0b:1b:72:de:ab:4c:09:d5:
8e:7b:2a:e9:cb:a7:3f:f4:86:65:e8:20:a7:00:05:9a:18:a2:
1a:e3:e9:de:03:47:88:1a:d8:ca:90:fb:1a:b2:61:8d:37:c1:
8f:ea:7a:c3:ef:1b:d4:3b:da:12:a5:93:de:30:44:5f:e3:07:
e0:9f:15:c8:e6:8b:41:88:6b:57:06:b9:23:45:ae:90:9b:84:
14:01:af:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+n5Dy3sj/iMCHrfPg40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm
OGZkY2YwHhcNMjYwMzAyMDEwMDQ5WhcNMjYwMzAzMDEwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZTNlMDY3ZTIzOTdkMDY1ZjMwZDg3ZTY3NjBkZmFiNzhiZjYzNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2/hanQuB38l8G4N8b5cVE+pTSLB
EE0/RZTZCEhRPpCgoC8pxAEWOZACYoEavjIqq578BLgbnQUkoB6y+/B0tD7h4DtE
+He+A5PKT1BEcMzDXOrgLJZU/v1Tm4RkU6ZFtzV4bqsgxZvp8k1vc2ZeSo06WLuE
4M05nIgq3L10C+i/8mf/1UXeYI5vHwuJfvXnTxHcPa5U2swKj20Vo1WBsTSnC667
yA/HzmGenRqfjchG61yV0tBrA+e3cIop0RL4/YHWasxJBWGQGkW9gDJp4A5CS4dy
RE7AfB9S7p0unNSyf7WToqyOF70SquSsOc+mlIHRlVqJifktbYGPia1n5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4+Bn4jl9Bl8w2H5nYN+reL9jcNMB8GA1UdIwQY
MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt
NzEwZWY0NzczMmIwLzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw
LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiWWw3gu
eiRGDbX6uuRaMVtXN5wTKs/LyRZXclbD7dyw90DdsYZgEhJEnjqW6zs8JOnI7Qkp
RvDXp4S7rVgly2vYzkUKjkU//hBY9cohMVUFv95E442ZPIEEa9ZYJYjWjCtQewTM
UANtfD+01TKVoJzylHYwVV3TkKO7lHxcPbOYIXiNbJwfzz6Iz+SgXyZ2UsYwQqG+
9JfShzfcGU9ACJTs5poWAIWzmUdRzgsbct6rTAnVjnsq6cunP/SGZeggpwAFmhii
GuPp3gNHiBrYypD7GrJhjTfBj+p6w+8b1DvaEqWT3jBEX+MH4J8VyOaLQYhrVwa5
I0WukJuEFAGvTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:51 2026 by rpki-client