Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File: 06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier: 6sos/zz/OZVR/l/UWvRLy7NlF/Z2uHix+m44pHdmZ3w=
Subject key identifier: 1D:BA:EA:6B:D1:5C:A7:57:68:CB:09:10:9C:09:02:B1:C9:94:B8:28
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer: /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial: 019DA4F8A8440980C97B26AA5AA596159572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number: CD
Signing time: Sun 19 Apr 2026 09:00:52 +0000
Manifest this update: Sun 19 Apr 2026 09:00:52 +0000
Manifest next update: Mon 20 Apr 2026 09:00:52 +0000
Files and hashes: 1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: 3rtaHY4LX4mkn8BfeY9xhXuDceKZkLkJFIyafk49hzU=)
2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:a8:44:09:80:c9:7b:26:aa:5a:a5:96:15:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Validity
Not Before: Apr 19 09:00:52 2026 GMT
Not After : Apr 20 09:00:52 2026 GMT
Subject: CN=1dbaea6bd15ca75768cb09109c0902b1c994b828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:c7:8a:54:ff:af:2e:83:7f:b1:29:be:4e:
6f:5c:c3:65:93:5a:7b:1a:6e:68:d0:11:9e:11:da:
1b:c3:98:6a:5f:67:90:04:0f:56:d6:a6:27:a8:c2:
6c:f1:45:29:0c:1a:63:67:47:93:3b:71:6b:25:76:
aa:79:7a:5c:c4:03:1e:ff:14:e6:55:92:d9:d7:e9:
55:75:9e:27:fe:99:c9:59:9f:c7:bc:67:05:2c:e3:
0c:0e:26:a9:d7:52:2c:94:49:9f:fd:38:6b:34:63:
a8:bb:6b:62:24:e7:ca:4d:20:4f:24:83:63:4d:74:
17:b2:b7:30:7c:41:03:1a:0c:99:2b:b0:f5:72:02:
19:46:0f:f6:cf:44:e4:bf:4c:bf:a2:45:52:17:a7:
41:a1:28:15:6a:01:4e:13:1a:74:af:3b:87:06:bd:
d5:53:45:88:b7:13:af:94:39:6a:43:8f:af:dd:15:
d9:45:84:e9:d9:3d:0f:24:24:d3:ba:08:c8:b2:b8:
b0:d9:bf:4f:75:21:18:65:80:cd:9b:b5:f9:c1:1e:
7d:83:8b:20:cc:c1:e0:33:71:7d:d5:87:e8:fb:67:
71:af:0c:28:75:45:b4:45:5d:56:6b:1e:cd:65:2e:
34:2b:5c:84:e8:88:6e:19:9c:1e:5c:4a:c1:a4:6c:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:EA:6B:D1:5C:A7:57:68:CB:09:10:9C:09:02:B1:C9:94:B8:28
X509v3 Authority Key Identifier:
keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:e2:a2:cb:21:5a:23:0a:48:b2:03:d7:f3:8b:af:10:71:
3f:8f:bd:fb:35:2f:ef:7f:de:00:99:bc:60:dc:b7:48:33:79:
55:93:25:9d:6c:7c:2d:4e:dd:7a:1b:49:4b:ec:74:2a:6e:7e:
cd:e2:2b:34:c2:92:db:47:5e:76:ad:0e:43:d7:5d:fe:da:ed:
4e:fd:fa:91:f3:7d:46:db:ff:90:09:cb:2c:71:dd:87:96:9b:
e6:9b:a1:89:34:34:8f:bd:f6:90:55:a1:bb:cb:83:47:70:7b:
b3:1d:e5:4e:be:75:e2:00:fc:ff:a3:fa:e9:63:af:c1:73:f9:
a4:4e:45:0a:b7:11:79:b2:15:1a:2b:82:25:78:08:f6:2f:8a:
d6:23:47:21:21:97:15:c1:1a:5f:f5:8b:4b:67:50:04:b2:71:
29:4b:8b:3c:3a:84:58:68:b3:6e:5a:f0:6a:77:3a:58:bf:68:
b7:56:5a:9f:fe:ae:ac:15:2c:c1:b4:7f:2c:7f:57:96:43:70:
25:c4:27:b9:b6:27:9e:c1:4e:49:38:48:42:4c:e7:29:12:e9:
24:b4:50:30:15:af:7a:8c:bf:ed:be:ef:72:f4:1d:b3:05:3d:
7a:91:94:d5:cb:55:32:95:16:b3:ed:f8:d0:a3:24:89:95:68:
dc:05:c7:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+KhECYDJeyaqWqWWFZVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYTYzZjMwN2I4ZDJkZTJjMzcwODFkNjQ2YzI5ZWYwZWQ3
YzgyYTAwHhcNMjYwNDE5MDkwMDUyWhcNMjYwNDIwMDkwMDUyWjAzMTEwLwYDVQQD
EygxZGJhZWE2YmQxNWNhNzU3NjhjYjA5MTA5YzA5MDJiMWM5OTRiODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxLHilT/ry6Df7Epvk5vXMNlk1p7
Gm5o0BGeEdobw5hqX2eQBA9W1qYnqMJs8UUpDBpjZ0eTO3FrJXaqeXpcxAMe/xTm
VZLZ1+lVdZ4n/pnJWZ/HvGcFLOMMDiap11IslEmf/ThrNGOou2tiJOfKTSBPJINj
TXQXsrcwfEEDGgyZK7D1cgIZRg/2z0Tkv0y/okVSF6dBoSgVagFOExp0rzuHBr3V
U0WItxOvlDlqQ4+v3RXZRYTp2T0PJCTTugjIsriw2b9PdSEYZYDNm7X5wR59g4sg
zMHgM3F91Yfo+2dxrwwodUW0RV1Wax7NZS40K1yE6IhuGZweXErBpGwHaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB266mvRXKdXaMsJEJwJArHJlLgoMB8GA1UdIwQY
MBaAFNOmPzB7jS3iw3CB1kbCnvDtfIKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZZX01IdU5MZUxEY0lIV1JzS2U4TzE4Z3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85YTAwZmMtYTk3Mi00YzAzLTgzZWQt
NTFkNTJiOTNiNWVjLzEvMDZZX01IdU5MZUxEY0lIV1JzS2U4TzE4Z3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85YTAwZmMtYTk3Mi00YzAzLTgzZWQtNTFkNTJiOTNiNWVj
LzEvMDZZX01IdU5MZUxEY0lIV1JzS2U4TzE4Z3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4Xiossh
WiMKSLID1/OLrxBxP4+9+zUv73/eAJm8YNy3SDN5VZMlnWx8LU7dehtJS+x0Km5+
zeIrNMKS20dedq0OQ9dd/trtTv36kfN9Rtv/kAnLLHHdh5ab5puhiTQ0j732kFWh
u8uDR3B7sx3lTr514gD8/6P66WOvwXP5pE5FCrcRebIVGiuCJXgI9i+K1iNHISGX
FcEaX/WLS2dQBLJxKUuLPDqEWGizblrwanc6WL9ot1Zan/6urBUswbR/LH9XlkNw
JcQnubYnnsFOSThIQkznKRLpJLRQMBWveoy/7b7vcvQdswU9epGU1ctVMpUWs+34
0KMkiZVo3AXHtg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:22 2026 by rpki-client