Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: sm3JglXQ2VtBd/YGRwvAusjmV5bBKUIh1tyY2MyNie0=
Subject key identifier: 82:54:86:D3:CD:D1:39:25:B0:13:8C:2D:E4:8D:D3:2E:4D:DC:8C:AB
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019D992B44A71124E7EAB20E8B9231BFE22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 06B4
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: Pr/7pYBtk+tU70Q9RzgsPrsgn/LL2j8HtqYpraPdZ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:44:a7:11:24:e7:ea:b2:0e:8b:92:31:bf:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=825486d3cdd13925b0138c2de48dd32e4ddc8cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:af:6d:34:67:fe:3a:dc:b4:55:ef:11:4b:
ae:ed:25:b7:80:45:ca:e1:7a:1e:35:4d:59:eb:bf:
f6:d2:e9:8d:cd:41:55:b9:23:8d:c2:95:e9:1b:ed:
dc:20:44:db:ec:95:c1:15:95:ef:61:69:34:e2:dc:
43:31:e1:7d:a3:fd:bb:6a:2a:f8:fb:aa:7b:72:07:
d6:86:0a:d3:e7:12:49:a0:19:6e:c8:af:ed:9b:aa:
91:96:ea:c6:4b:d3:dc:dd:d1:23:8a:43:f8:96:32:
57:09:0b:bd:56:45:53:60:5d:0e:26:7f:d6:ae:ee:
72:c2:f2:95:92:cf:83:5f:df:b7:f6:d7:38:7e:23:
44:d1:06:61:6b:54:84:93:ab:31:8a:b2:6e:24:a9:
40:ac:aa:7c:91:cf:0e:3c:10:b9:2d:b3:76:7d:87:
26:40:83:c9:a9:5e:5e:dc:e3:1d:71:d2:1b:88:46:
1b:5c:de:4d:8d:9a:6b:a9:75:34:39:ed:e4:0c:c5:
8d:56:b7:99:83:79:55:2d:39:8b:e0:98:6c:08:64:
88:ea:3e:bc:d8:14:40:93:69:98:f5:5b:40:9c:e5:
ac:80:67:79:db:2d:48:b6:93:f1:41:19:88:ed:43:
c5:73:c4:72:50:27:da:0f:5f:f3:e4:11:63:7d:03:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:86:D3:CD:D1:39:25:B0:13:8C:2D:E4:8D:D3:2E:4D:DC:8C:AB
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e1:1c:d6:e3:2e:05:e7:f5:56:05:e4:07:a8:1a:e4:f2:3e:
e0:a8:01:9d:e6:b7:6c:22:88:50:ce:c9:24:cc:02:0d:83:b5:
01:1e:d6:2e:58:62:bc:68:9b:05:1e:5c:49:e4:fd:8f:e2:53:
24:51:d2:85:e5:4a:c5:bf:a8:88:85:dd:82:3e:63:6a:da:53:
b5:7e:c4:d0:54:87:bc:cb:1d:c1:12:c0:38:a4:ca:92:0e:c6:
f6:aa:a7:db:98:d2:9c:93:a7:6f:72:67:5e:bd:c6:64:9d:82:
11:e7:aa:12:4b:f1:12:ee:57:dd:4d:36:0e:41:00:82:de:72:
f2:6d:32:d0:2b:21:54:c7:c3:68:0f:b5:dc:73:29:db:09:94:
41:93:96:2c:fd:28:31:99:2a:ff:21:e3:f9:ec:bb:19:0a:e5:
48:8e:30:86:fa:6e:61:2e:f8:8b:af:b9:4c:d4:95:50:a2:1e:
07:5c:01:e4:8e:a7:5e:c5:28:a3:fb:73:fd:13:fd:4e:58:73:
12:57:48:b9:08:86:5a:34:b4:14:d5:79:72:87:1b:c6:d7:24:
34:79:5f:b8:65:ee:c7:7a:81:2e:88:36:79:5c:03:cd:29:a4:
45:c9:bd:e9:f0:6a:fe:2b:4a:a9:fa:79:57:66:06:50:0d:13:
fd:6c:92:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0SnESTn6rIOi5Ixv+IsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjYwNDE3MDIwMDQyWhcNMjYwNDE4MDIwMDQyWjAzMTEwLwYDVQQD
Eyg4MjU0ODZkM2NkZDEzOTI1YjAxMzhjMmRlNDhkZDMyZTRkZGM4Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDGvbTRn/jrctFXvEUuu7SW3gEXK
4XoeNU1Z67/20umNzUFVuSONwpXpG+3cIETb7JXBFZXvYWk04txDMeF9o/27air4
+6p7cgfWhgrT5xJJoBluyK/tm6qRlurGS9Pc3dEjikP4ljJXCQu9VkVTYF0OJn/W
ru5ywvKVks+DX9+39tc4fiNE0QZha1SEk6sxirJuJKlArKp8kc8OPBC5LbN2fYcm
QIPJqV5e3OMdcdIbiEYbXN5NjZprqXU0Oe3kDMWNVreZg3lVLTmL4JhsCGSI6j68
2BRAk2mY9VtAnOWsgGd52y1ItpPxQRmI7UPFc8RyUCfaD1/z5BFjfQMuhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJUhtPN0TklsBOMLeSN0y5N3IyrMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+Ec1uMu
Bef1VgXkB6ga5PI+4KgBnea3bCKIUM7JJMwCDYO1AR7WLlhivGibBR5cSeT9j+JT
JFHSheVKxb+oiIXdgj5jatpTtX7E0FSHvMsdwRLAOKTKkg7G9qqn25jSnJOnb3Jn
Xr3GZJ2CEeeqEkvxEu5X3U02DkEAgt5y8m0y0CshVMfDaA+13HMp2wmUQZOWLP0o
MZkq/yHj+ey7GQrlSI4whvpuYS74i6+5TNSVUKIeB1wB5I6nXsUoo/tz/RP9Tlhz
EldIuQiGWjS0FNV5cocbxtckNHlfuGXux3qBLog2eVwDzSmkRcm96fBq/itKqfp5
V2YGUA0T/WyS7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:31 2026 by rpki-client