Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: wxVQKO/SOCdeGDpQtPp7MlX0la0U9l65VyIh4+xmKig=
Subject key identifier: 35:5C:64:ED:86:49:2B:05:57:A1:4F:0E:0E:4C:A4:D5:85:AD:6D:B9
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 019CA9EB5DF0AB1A13A958664B27E1C3CDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 15:01:40 +0000
Manifest this update: Sun 01 Mar 2026 15:01:40 +0000
Manifest next update: Mon 02 Mar 2026 15:01:40 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: M5lT3qtXPrwdci4m5bCMzvLvvM80hbq8yUFQ2qfseb0=)
2: EQUgl00EZFitLJ6oysydLWzSpDI.roa (hash: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw=)
3: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:5d:f0:ab:1a:13:a9:58:66:4b:27:e1:c3:cd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Mar 1 15:01:40 2026 GMT
Not After : Mar 2 15:01:40 2026 GMT
Subject: CN=355c64ed86492b0557a14f0e0e4ca4d585ad6db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:68:04:ff:92:bc:15:82:fc:33:c5:00:2f:
d7:8d:89:2d:7a:7e:96:61:90:33:23:ea:16:99:d6:
bd:90:ae:71:3f:a2:6c:8c:62:c2:85:4c:57:84:0e:
d7:13:ba:85:d9:0e:ca:76:5b:ea:61:73:29:0e:ee:
3e:57:85:59:fc:a6:62:0b:0a:e4:4f:9d:dd:f4:5a:
ad:18:58:01:03:bf:d8:83:10:b2:49:fd:11:32:40:
0d:51:0b:e1:95:ae:f8:2e:08:1f:7e:7e:be:e5:14:
1b:6a:41:74:0f:90:37:96:94:28:6f:c7:2e:74:16:
26:5b:56:50:82:a1:3d:e2:63:1f:4e:56:39:c8:79:
fe:67:33:50:8a:0b:e1:87:87:b6:54:4e:db:60:85:
96:33:6d:be:33:1b:a7:e3:76:0b:0a:9f:42:da:fa:
b6:60:fa:d2:fe:24:a9:03:6b:60:1c:1c:92:d5:75:
39:f7:f2:74:4d:93:40:e7:5a:c8:09:67:3a:ea:54:
dd:33:6f:a6:f6:0c:ee:0e:ec:38:5f:6f:db:4c:4e:
9d:a4:73:61:9e:17:65:c3:65:25:29:b4:f1:91:9f:
44:6f:92:7b:23:f9:ed:f4:61:10:88:df:83:e2:e4:
df:ed:6a:0d:4f:79:d5:7f:35:7a:a4:30:ac:bf:13:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:64:ED:86:49:2B:05:57:A1:4F:0E:0E:4C:A4:D5:85:AD:6D:B9
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:40:04:c3:07:e3:b4:b1:1b:95:76:8a:40:be:fe:f4:dd:11:
7e:9a:51:61:74:34:77:16:f9:40:2b:70:87:2c:48:78:ad:0a:
c7:f2:3c:8b:c0:8a:be:62:c3:6d:dd:66:72:b7:f1:3e:66:c5:
21:8e:52:15:c2:f3:2f:11:af:5a:15:da:c3:0b:c7:1b:99:43:
8b:5a:1d:a1:4b:a2:1c:62:6e:c3:02:18:25:91:2e:20:58:94:
f1:56:a8:8b:eb:f3:f5:d6:79:7d:6c:0c:73:fb:a8:97:26:8c:
3a:2b:8d:b4:e4:70:99:75:58:64:21:ca:c3:d4:76:c4:6a:1c:
5b:21:54:02:2f:c5:79:4f:7a:0f:a3:93:61:9a:36:d9:3b:63:
2e:65:41:6e:50:c6:d8:df:7a:ff:b7:ad:12:c7:7e:02:73:50:
d0:8f:f0:78:1f:93:1e:b4:34:64:54:70:5f:4c:0a:31:68:a2:
a5:a1:bc:6b:7b:ce:98:7a:77:20:18:61:59:7e:c4:5b:f2:a2:
82:de:a9:b3:39:04:4f:6b:ca:77:b4:b0:9a:a1:0d:a9:ce:20:
52:01:b3:80:a7:9a:e5:2d:32:16:01:bf:d2:43:2a:d0:6d:34:
36:5b:79:92:cb:a4:94:f9:a9:73:92:5b:7b:99:04:7d:3a:bc:
04:26:57:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp613wqxoTqVhmSyfhw82rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTE4N2NiZjczOGMwZTlkN2EzZWQ5YmZjYjJjNGE2Nzcy
MjY0ODMwHhcNMjYwMzAxMTUwMTQwWhcNMjYwMzAyMTUwMTQwWjAzMTEwLwYDVQQD
EygzNTVjNjRlZDg2NDkyYjA1NTdhMTRmMGUwZTRjYTRkNTg1YWQ2ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo95oBP+SvBWC/DPFAC/XjYkten6W
YZAzI+oWmda9kK5xP6JsjGLChUxXhA7XE7qF2Q7KdlvqYXMpDu4+V4VZ/KZiCwrk
T53d9FqtGFgBA7/YgxCySf0RMkANUQvhla74Lggffn6+5RQbakF0D5A3lpQob8cu
dBYmW1ZQgqE94mMfTlY5yHn+ZzNQigvhh4e2VE7bYIWWM22+Mxun43YLCp9C2vq2
YPrS/iSpA2tgHByS1XU59/J0TZNA51rICWc66lTdM2+m9gzuDuw4X2/bTE6dpHNh
nhdlw2UlKbTxkZ9Eb5J7I/nt9GEQiN+D4uTf7WoNT3nVfzV6pDCsvxPevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVcZO2GSSsFV6FPDg5MpNWFrW25MB8GA1UdIwQY
MBaAFOpRh8v3OMDp16Ptm/yyxKZ3ImSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxHSHlfYzR3T25Yby0yYl9MTEVwbmNpWklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNWYyMzgtYmI2Mi00NTVkLTk5MjEt
M2EyNzIyNTA3ZWU1LzEvNmxHSHlfYzR3T25Yby0yYl9MTEVwbmNpWklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNWYyMzgtYmI2Mi00NTVkLTk5MjEtM2EyNzIyNTA3ZWU1
LzEvNmxHSHlfYzR3T25Yby0yYl9MTEVwbmNpWklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkAEwwfj
tLEblXaKQL7+9N0RfppRYXQ0dxb5QCtwhyxIeK0Kx/I8i8CKvmLDbd1mcrfxPmbF
IY5SFcLzLxGvWhXawwvHG5lDi1odoUuiHGJuwwIYJZEuIFiU8Vaoi+vz9dZ5fWwM
c/uolyaMOiuNtORwmXVYZCHKw9R2xGocWyFUAi/FeU96D6OTYZo22TtjLmVBblDG
2N96/7etEsd+AnNQ0I/weB+THrQ0ZFRwX0wKMWiipaG8a3vOmHp3IBhhWX7EW/Ki
gt6pszkET2vKd7SwmqENqc4gUgGzgKea5S0yFgG/0kMq0G00Nlt5ksuklPmpc5Jb
e5kEfTq8BCZXEA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:18 2026 by rpki-client