Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: UTlLY+0sJkGajz69oWWJCSwlIXU/XqJ6YCi1DCK0Ja0=
Subject key identifier: 3C:8B:3B:65:38:36:7C:97:B4:C3:43:B8:F1:C6:33:C2:15:F1:51:67
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019D9998D5294B05CB255CED2D4DC8575717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0CAD
Signing time: Fri 17 Apr 2026 04:00:23 +0000
Manifest this update: Fri 17 Apr 2026 04:00:23 +0000
Manifest next update: Sat 18 Apr 2026 04:00:23 +0000
Files and hashes: 1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: Aua4Ul4SZnsO1YSyqXsk7ApvdLd/CsT7gaZ8m+HnDcw=)
2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d5:29:4b:05:cb:25:5c:ed:2d:4d:c8:57:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Apr 17 04:00:23 2026 GMT
Not After : Apr 18 04:00:23 2026 GMT
Subject: CN=3c8b3b6538367c97b4c343b8f1c633c215f15167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:66:62:bf:d2:b7:3b:d2:41:05:a2:dd:cf:
25:08:0c:5b:f6:4c:73:45:c5:db:db:93:5e:6f:c0:
ee:3b:a7:9c:d7:7b:3f:f5:41:a8:be:f2:3f:16:1e:
58:be:77:19:4f:ef:28:7f:48:d8:e1:33:ce:00:ff:
ca:64:fe:1f:21:14:15:be:88:f4:cc:46:78:50:0e:
25:3b:54:57:4c:de:fb:15:60:63:a2:db:93:93:64:
c7:dc:89:35:ce:01:d8:a8:82:01:f2:50:a6:0e:dd:
25:a6:1a:9e:1a:71:c7:82:4c:2c:e1:d4:8e:19:ad:
4b:d1:e3:59:0b:5d:84:3f:2a:cb:b2:d0:a1:41:24:
97:b0:d8:1b:d5:f3:d9:a5:4e:b5:75:43:94:d2:01:
2a:be:24:ba:7b:04:66:44:0f:ea:aa:94:93:1e:3c:
d1:ae:bd:f1:34:8e:7c:36:f8:10:33:2e:ae:5b:a8:
d0:6f:f0:ab:33:a3:c7:74:fe:64:71:96:3d:9f:92:
f4:1d:ab:7b:a8:6d:da:fe:3b:be:6c:8e:9f:a6:e2:
a8:02:48:aa:1a:d9:6c:8c:cc:31:67:18:1a:37:a2:
90:fc:6c:07:07:d3:1c:5d:34:d2:9a:c8:12:d8:76:
54:4e:8a:05:ce:b3:9c:79:51:d7:ab:4c:da:08:2d:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:3B:65:38:36:7C:97:B4:C3:43:B8:F1:C6:33:C2:15:F1:51:67
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e2:5f:ca:5d:61:57:d6:42:d3:20:30:07:0a:b1:34:a4:ef:
34:a3:9c:11:b3:63:31:2a:f5:d9:2d:e5:c1:c3:2e:15:c6:10:
47:aa:d3:f7:cf:84:ac:f6:65:fe:80:ce:44:0b:bf:68:52:1e:
70:8d:2e:a2:76:9d:6b:1a:f1:18:58:97:ba:37:2d:eb:99:eb:
6d:c8:24:fd:77:d7:4f:a4:f7:20:7b:9f:84:58:d8:9e:c7:ed:
35:1b:e1:a4:1b:6f:1f:c2:16:38:c8:b8:8c:b0:3b:2b:72:56:
52:51:ab:01:32:27:32:9f:1f:ce:9f:34:06:e1:29:77:4b:f0:
93:e2:3c:8c:91:fa:7b:b2:46:0e:bd:09:37:2a:0c:e4:0c:49:
40:f5:fe:cf:eb:64:63:9d:14:c2:cd:1f:4b:b8:1c:db:f9:3e:
8b:eb:4f:f2:3c:db:c7:2d:b3:17:a5:32:f0:55:dc:02:42:9d:
cf:a5:cd:3e:3d:00:50:c2:b0:9e:18:3d:60:cb:b0:8f:e6:7c:
51:40:44:0a:c2:7e:c6:bb:74:77:fe:61:28:f1:99:34:1b:25:
79:69:ed:fd:d0:05:e0:ea:30:34:d0:a7:b0:3b:f2:22:14:f1:
8e:97:e8:bf:df:d4:96:2b:b2:41:7c:20:d2:87:2e:91:93:b4:
78:d7:c0:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmNUpSwXLJVztLU3IV1cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm
OGZkY2YwHhcNMjYwNDE3MDQwMDIzWhcNMjYwNDE4MDQwMDIzWjAzMTEwLwYDVQQD
EygzYzhiM2I2NTM4MzY3Yzk3YjRjMzQzYjhmMWM2MzNjMjE1ZjE1MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncRmYr/StzvSQQWi3c8lCAxb9kxz
RcXb25Neb8DuO6ec13s/9UGovvI/Fh5YvncZT+8of0jY4TPOAP/KZP4fIRQVvoj0
zEZ4UA4lO1RXTN77FWBjotuTk2TH3Ik1zgHYqIIB8lCmDt0lphqeGnHHgkws4dSO
Ga1L0eNZC12EPyrLstChQSSXsNgb1fPZpU61dUOU0gEqviS6ewRmRA/qqpSTHjzR
rr3xNI58NvgQMy6uW6jQb/CrM6PHdP5kcZY9n5L0Hat7qG3a/ju+bI6fpuKoAkiq
GtlsjMwxZxgaN6KQ/GwHB9McXTTSmsgS2HZUTooFzrOceVHXq0zaCC3djwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyLO2U4NnyXtMNDuPHGM8IV8VFnMB8GA1UdIwQY
MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt
NzEwZWY0NzczMmIwLzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw
LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeJfyl1h
V9ZC0yAwBwqxNKTvNKOcEbNjMSr12S3lwcMuFcYQR6rT98+ErPZl/oDORAu/aFIe
cI0uonadaxrxGFiXujct65nrbcgk/XfXT6T3IHufhFjYnsftNRvhpBtvH8IWOMi4
jLA7K3JWUlGrATInMp8fzp80BuEpd0vwk+I8jJH6e7JGDr0JNyoM5AxJQPX+z+tk
Y50Uws0fS7gc2/k+i+tP8jzbxy2zF6Uy8FXcAkKdz6XNPj0AUMKwnhg9YMuwj+Z8
UUBECsJ+xrt0d/5hKPGZNBsleWnt/dAF4OowNNCnsDvyIhTxjpfov9/UliuyQXwg
0ocukZO0eNfA/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:38 2026 by rpki-client