Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: K6RC5d0zQw9qDT/icCSuq9b5fJT6HLHpWLHGwGyNo7s=
Subject key identifier: E4:C2:B4:51:17:0B:05:C9:89:E9:65:BD:78:DF:A0:63:BD:12:17:12
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019CAA58E4E32FACE27754CA8CB6B54C4FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0D8F
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: FuIldjWwC771dcFJZ2BXXg7QNtE.roa (hash: 0/YvhnNfmrfW1rIeAImBgzBQVqK+XQUOllK6k6PziVo=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: yxKupEFg6QZ3q5bFRu5FF4OXd+8JIoQE7vEIyFZ/yF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e4:e3:2f:ac:e2:77:54:ca:8c:b6:b5:4c:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=e4c2b451170b05c989e965bd78dfa063bd121712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:85:a8:da:ce:85:20:96:45:cc:d4:ea:15:
65:08:e6:ed:f3:bd:bc:42:5f:83:b0:83:a3:19:a3:
ed:15:00:51:8a:ba:61:52:b1:27:62:57:4e:01:72:
e6:e9:13:de:91:c6:57:dd:0d:62:fb:a8:6e:0a:58:
00:2e:1c:0d:27:ad:85:59:73:38:ef:ec:9b:f4:4c:
2d:10:cc:c5:19:51:6f:42:1f:63:e5:05:eb:17:a4:
6c:44:0e:a3:db:fb:dd:2a:91:b5:6f:2b:33:a4:87:
02:de:a4:a7:a1:4d:a5:5c:cd:9f:d7:bb:d6:1a:3f:
a6:54:ef:27:e8:44:80:80:2f:70:04:13:87:45:63:
d9:17:37:a7:15:19:02:f1:89:8a:39:89:83:92:0a:
5c:45:6b:34:06:1e:b5:e7:79:ed:9b:b4:c5:9d:2d:
4e:e0:cc:6b:0e:9c:cc:65:86:58:9b:37:36:7b:bf:
fe:c3:51:61:27:f5:4e:ca:5b:2a:5c:d5:5e:70:4e:
40:68:18:87:d4:29:42:97:14:dc:2e:de:1c:c8:c9:
38:81:90:a6:52:58:52:7d:e5:e4:64:cf:b2:3a:fa:
7b:20:f7:ff:e0:69:62:63:10:4a:1b:9d:ef:88:af:
3b:bb:cd:0c:c7:12:aa:b2:a8:f9:5c:aa:89:56:40:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:B4:51:17:0B:05:C9:89:E9:65:BD:78:DF:A0:63:BD:12:17:12
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c7:eb:9b:71:8e:f4:b5:66:ba:fc:82:7c:69:4d:b6:e4:d1:
37:68:47:a2:e7:dc:01:02:5e:fb:ce:cc:7b:87:85:7c:38:86:
79:30:53:69:74:d3:e9:9c:34:c8:45:8f:94:c2:16:90:91:67:
bc:8f:b2:5c:19:57:b7:62:6e:e8:e8:e9:47:04:d5:1f:4a:78:
14:1c:42:39:2e:4d:53:1a:9c:d8:29:30:d8:e8:26:b8:7f:cb:
69:b2:10:69:0e:86:e8:3c:ae:c2:83:31:10:4f:a0:32:d1:56:
8e:86:68:e8:e3:8b:9c:5b:d5:23:2a:50:c9:b7:35:77:85:bb:
52:bd:62:8f:38:8c:b7:2e:4b:5f:ee:3e:a5:20:fb:fb:85:f3:
97:d8:61:e0:09:18:8b:fa:71:f8:a4:ae:f6:b3:61:42:88:59:
f7:f9:d6:cd:33:f2:1b:eb:cd:e8:db:f5:d0:97:7b:63:0d:6e:
45:5c:6a:2c:ee:29:a3:98:8b:c3:49:90:0c:49:54:3a:36:e4:
46:37:c8:df:b3:a2:a4:fe:8e:4f:4f:19:63:7b:e5:f7:4a:54:
44:18:38:6e:91:62:e4:3b:c0:0d:c7:d7:79:fc:69:da:d2:48:
7e:ba:f5:b7:47:65:e3:6d:a5:04:24:ef:d8:e8:fa:c8:6e:46:
1d:e0:54:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWOTjL6zid1TKjLa1TE+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0
MTYwY2IwHhcNMjYwMzAxMTcwMTE4WhcNMjYwMzAyMTcwMTE4WjAzMTEwLwYDVQQD
EyhlNGMyYjQ1MTE3MGIwNWM5ODllOTY1YmQ3OGRmYTA2M2JkMTIxNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3mFqNrOhSCWRczU6hVlCObt8728
Ql+DsIOjGaPtFQBRirphUrEnYldOAXLm6RPekcZX3Q1i+6huClgALhwNJ62FWXM4
7+yb9EwtEMzFGVFvQh9j5QXrF6RsRA6j2/vdKpG1byszpIcC3qSnoU2lXM2f17vW
Gj+mVO8n6ESAgC9wBBOHRWPZFzenFRkC8YmKOYmDkgpcRWs0Bh6153ntm7TFnS1O
4MxrDpzMZYZYmzc2e7/+w1FhJ/VOylsqXNVecE5AaBiH1ClClxTcLt4cyMk4gZCm
UlhSfeXkZM+yOvp7IPf/4GliYxBKG53viK87u80MxxKqsqj5XKqJVkBvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTCtFEXCwXJiellvXjfoGO9EhcSMB8GA1UdIwQY
MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt
ZWNkN2ZlZTdjMWIwLzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw
LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncfrm3GO
9LVmuvyCfGlNtuTRN2hHoufcAQJe+87Me4eFfDiGeTBTaXTT6Zw0yEWPlMIWkJFn
vI+yXBlXt2Ju6OjpRwTVH0p4FBxCOS5NUxqc2Ckw2OgmuH/LabIQaQ6G6DyuwoMx
EE+gMtFWjoZo6OOLnFvVIypQybc1d4W7Ur1ijziMty5LX+4+pSD7+4Xzl9hh4AkY
i/px+KSu9rNhQohZ9/nWzTPyG+vN6Nv10Jd7Yw1uRVxqLO4po5iLw0mQDElUOjbk
RjfI37OipP6OT08ZY3vl90pURBg4bpFi5DvADcfXefxp2tJIfrr1t0dl422lBCTv
2Oj6yG5GHeBU1g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:37 2026 by rpki-client