Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: EmclOByXetNHhBhsV8nYVsXU7ZD4EO19GS1KUUSMv7s=
Subject key identifier: 8C:59:F0:7D:1F:F4:0A:62:52:33:7C:9C:B0:9C:03:92:F8:17:F3:65
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019CAB343360504CF53FCDC159B30C4481D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0F1A
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: 7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (hash: AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: 7cg09JjkORk6TrXS5gIszbLw4jS1/reZL3UxWt015wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:33:60:50:4c:f5:3f:cd:c1:59:b3:0c:44:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=8c59f07d1ff40a6252337c9cb09c0392f817f365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:8c:02:01:23:85:f1:a0:e1:43:b4:9a:02:
af:63:cc:df:25:9e:b6:a0:44:51:8e:ba:fd:01:bd:
37:01:40:ed:e4:d2:c0:36:95:e3:50:e5:8f:a6:11:
ad:91:e0:66:d2:28:f2:39:4f:0f:de:56:1a:f2:18:
4f:83:5d:ad:aa:03:c9:db:62:e2:11:29:8f:21:e1:
76:bd:9d:32:48:1f:55:5d:6e:b6:09:25:d4:c4:1b:
58:1d:75:0a:2a:2c:65:31:62:ba:76:ff:d4:e0:c0:
81:48:62:59:51:71:64:de:34:b0:27:f2:79:79:c8:
ca:dc:98:80:3a:81:cd:2b:fc:76:ac:a7:5b:bf:f1:
37:9a:2c:b5:24:47:05:a6:61:4d:be:28:a6:38:ea:
de:50:e4:37:0b:c6:32:ef:db:a0:9d:97:75:11:66:
6a:86:9f:0a:55:fb:36:ea:f7:d3:ed:2d:d8:27:5f:
c1:60:52:fb:21:b2:f8:52:bb:ca:a6:c4:b7:61:7a:
ca:97:87:d3:cb:c8:57:94:1f:45:3b:ca:32:6b:f9:
13:0c:56:03:7a:e5:29:9c:c6:fd:10:87:c7:51:e8:
74:56:8d:a9:d3:7b:ba:66:78:95:41:e3:d9:1b:79:
42:05:54:04:9b:4e:2d:ae:a0:69:e7:53:44:67:d1:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:59:F0:7D:1F:F4:0A:62:52:33:7C:9C:B0:9C:03:92:F8:17:F3:65
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a4:06:11:cc:21:ed:33:8c:e7:dd:54:8c:5b:38:9c:9b:79:
a4:ba:7e:ea:b6:6d:f8:96:81:7d:b5:7e:1e:59:be:01:ea:a5:
82:4c:81:b7:57:0c:57:af:70:e5:06:dd:93:3f:d7:21:1e:3e:
c3:6d:41:7a:f3:7b:d1:d7:65:c4:96:48:5c:89:1c:ef:03:d5:
4f:85:b4:a5:f5:07:50:ea:d4:5c:5c:b1:87:7f:7a:c4:8c:a8:
37:0d:15:1e:9e:10:89:b5:e3:36:27:91:e8:d6:b0:0a:8d:40:
1f:54:99:cd:44:fb:0f:02:e5:d5:49:54:8a:00:75:f2:2f:34:
5b:53:01:3b:19:c2:27:a9:23:be:86:22:49:87:58:c6:c0:85:
c4:b3:1b:c7:03:3c:ec:d6:25:11:f8:2f:48:82:8d:ef:a3:5d:
44:e7:0a:06:4a:b3:85:14:a5:b7:e8:b0:f0:4b:93:cb:6a:ea:
4a:c6:ae:66:c0:48:98:90:4a:bd:a7:1b:15:23:d2:13:28:9e:
01:68:c1:04:4f:66:c7:14:a4:09:be:ed:90:78:21:ae:16:99:
c8:e7:f0:24:43:92:91:d8:e8:be:02:89:7e:e6:d0:7d:5e:85:
90:56:d5:70:89:ec:e6:3e:f2:f6:05:aa:d0:5e:02:bf:c7:be:
29:15:80:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDNgUEz1P83BWbMMRIHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk
MDg3MWUwHhcNMjYwMzAxMjEwMDUwWhcNMjYwMzAyMjEwMDUwWjAzMTEwLwYDVQQD
Eyg4YzU5ZjA3ZDFmZjQwYTYyNTIzMzdjOWNiMDljMDM5MmY4MTdmMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwqMAgEjhfGg4UO0mgKvY8zfJZ62
oERRjrr9Ab03AUDt5NLANpXjUOWPphGtkeBm0ijyOU8P3lYa8hhPg12tqgPJ22Li
ESmPIeF2vZ0ySB9VXW62CSXUxBtYHXUKKixlMWK6dv/U4MCBSGJZUXFk3jSwJ/J5
ecjK3JiAOoHNK/x2rKdbv/E3miy1JEcFpmFNviimOOreUOQ3C8Yy79ugnZd1EWZq
hp8KVfs26vfT7S3YJ1/BYFL7IbL4UrvKpsS3YXrKl4fTy8hXlB9FO8oya/kTDFYD
euUpnMb9EIfHUeh0Vo2p03u6ZniVQePZG3lCBVQEm04trqBp51NEZ9HnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxZ8H0f9ApiUjN8nLCcA5L4F/NlMB8GA1UdIwQY
MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt
MTkzY2M2MWJjZTYxLzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx
LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqQGEcwh
7TOM591UjFs4nJt5pLp+6rZt+JaBfbV+Hlm+AeqlgkyBt1cMV69w5Qbdkz/XIR4+
w21BevN70ddlxJZIXIkc7wPVT4W0pfUHUOrUXFyxh396xIyoNw0VHp4QibXjNieR
6NawCo1AH1SZzUT7DwLl1UlUigB18i80W1MBOxnCJ6kjvoYiSYdYxsCFxLMbxwM8
7NYlEfgvSIKN76NdROcKBkqzhRSlt+iw8EuTy2rqSsauZsBImJBKvacbFSPSEyie
AWjBBE9mxxSkCb7tkHghrhaZyOfwJEOSkdjovgKJfubQfV6FkFbVcIns5j7y9gWq
0F4Cv8e+KRWAAw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:06 2026 by rpki-client