Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier: s+mPT0lxoyRz2exd/DbfbuAc6ZqAsjxzJNHpv56jCo0=
Subject key identifier: 4D:6E:53:54:9D:C2:9D:D3:BC:17:71:0D:DB:C5:CA:35:4D:B9:EF:20
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 019CACB48574303F8EA08375DAC06828ABEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number: 0FE5
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: FOcFic26Vk8hfL4NYsuNCL9nV+IKGfPC4xHao4ITilM=)
2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:85:74:30:3f:8e:a0:83:75:da:c0:68:28:ab:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=4d6e53549dc29dd3bc17710ddbc5ca354db9ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:62:5e:c7:7b:dc:75:c6:7e:f2:b0:eb:45:
c2:1b:30:1c:3c:47:e2:e8:6e:28:a4:88:44:65:b4:
27:ed:f0:3e:9b:f1:1e:ce:93:32:e8:b1:c4:05:40:
41:7b:05:4c:b2:62:3e:a0:1d:a9:45:44:68:fb:e9:
66:e9:96:1f:e7:fd:f1:71:3a:16:a8:33:7e:17:d6:
3b:09:14:03:d7:32:9a:b6:a6:36:fa:c2:cd:e6:95:
5c:70:32:71:9a:51:75:8a:b1:cd:10:6b:36:43:f4:
6c:64:eb:30:3e:3a:6f:8f:2a:c0:37:7b:94:10:58:
65:19:8c:be:1f:28:dd:7a:67:6a:47:dc:0d:5d:af:
09:90:f2:52:fb:a0:21:b6:b1:86:89:70:2f:8c:f9:
1e:8f:f8:22:be:0d:85:33:8c:1b:c5:57:e8:bd:a6:
58:c9:2c:9e:dc:9f:71:5a:99:0d:d8:19:2e:85:d3:
e5:f8:ed:dd:84:d9:5b:06:e7:68:39:a1:f7:1d:d5:
6a:56:1f:52:05:ac:8d:fa:0a:6b:59:57:bd:25:25:
f8:dd:12:5d:57:87:8c:8f:1c:40:3d:33:75:cd:15:
43:7b:f1:69:a3:e0:66:59:b6:ae:8f:05:8e:df:40:
17:76:dc:2c:73:4c:8c:41:e3:5e:3d:a2:e9:91:fd:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6E:53:54:9D:C2:9D:D3:BC:17:71:0D:DB:C5:CA:35:4D:B9:EF:20
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:54:40:32:ab:7e:06:5e:85:45:d7:af:2a:80:40:4b:68:
bb:ac:b7:30:41:73:0f:05:96:63:6a:12:6a:6f:2a:4a:a7:e3:
63:99:c4:16:9e:5f:7f:70:c3:2c:c3:6f:b1:5d:df:94:f0:2e:
7c:6a:54:74:08:df:a0:b0:7b:b7:c5:af:82:44:80:6b:72:b3:
b6:f6:64:db:e2:e9:9d:ea:7b:ea:47:f8:a9:9d:82:b9:72:4a:
07:a4:fc:74:cd:61:24:bb:a1:d6:c4:c3:28:c7:83:f0:c5:9f:
02:92:93:db:d4:af:3f:3a:86:43:00:e1:29:96:e1:68:2d:a1:
72:61:02:49:72:31:31:1e:26:98:a1:d1:bc:08:4e:e8:13:05:
22:c1:cc:11:f3:44:ea:6a:12:0b:80:82:a8:28:51:fb:56:18:
42:ce:9d:88:1e:bc:3e:bd:ae:fa:28:a7:73:10:c8:7b:db:f5:
da:28:3b:1a:a3:cb:68:7d:5d:ff:9a:5b:2b:00:13:27:a4:2c:
58:7c:66:7d:37:5d:5a:79:da:51:18:ba:0e:72:05:40:68:95:
e1:cf:3d:04:1c:96:bf:73:54:82:03:76:76:7a:10:90:bd:a8:
df:a8:0e:7f:ac:13:a5:52:c9:27:20:eb:e5:c3:75:d8:12:f3:
29:da:99:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystIV0MD+OoIN12sBoKKvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk
NGViYmYwHhcNMjYwMzAyMDQwMDM3WhcNMjYwMzAzMDQwMDM3WjAzMTEwLwYDVQQD
Eyg0ZDZlNTM1NDlkYzI5ZGQzYmMxNzcxMGRkYmM1Y2EzNTRkYjllZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygNiXsd73HXGfvKw60XCGzAcPEfi
6G4opIhEZbQn7fA+m/EezpMy6LHEBUBBewVMsmI+oB2pRURo++lm6ZYf5/3xcToW
qDN+F9Y7CRQD1zKatqY2+sLN5pVccDJxmlF1irHNEGs2Q/RsZOswPjpvjyrAN3uU
EFhlGYy+HyjdemdqR9wNXa8JkPJS+6AhtrGGiXAvjPkej/givg2FM4wbxVfovaZY
ySye3J9xWpkN2BkuhdPl+O3dhNlbBudoOaH3HdVqVh9SBayN+gprWVe9JSX43RJd
V4eMjxxAPTN1zRVDe/Fpo+BmWbaujwWO30AXdtwsc0yMQeNePaLpkf1W3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1uU1Sdwp3TvBdxDdvFyjVNue8gMB8GA1UdIwQY
MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt
NjZmOGI2ZTE2YjhhLzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh
LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd5UQDKr
fgZehUXXryqAQEtou6y3MEFzDwWWY2oSam8qSqfjY5nEFp5ff3DDLMNvsV3flPAu
fGpUdAjfoLB7t8WvgkSAa3KztvZk2+Lpnep76kf4qZ2CuXJKB6T8dM1hJLuh1sTD
KMeD8MWfApKT29SvPzqGQwDhKZbhaC2hcmECSXIxMR4mmKHRvAhO6BMFIsHMEfNE
6moSC4CCqChR+1YYQs6diB68Pr2u+iincxDIe9v12ig7GqPLaH1d/5pbKwATJ6Qs
WHxmfTddWnnaURi6DnIFQGiV4c89BByWv3NUggN2dnoQkL2o36gOf6wTpVLJJyDr
5cN12BLzKdqZ4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:38 2026 by rpki-client