Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: mq/oZ+ExKpe77ErYIdHtfgqjnxoWn6I7K5Bu7531Ux0=
Subject key identifier: D4:89:8E:A4:3D:7B:C8:B9:84:E9:90:44:3E:B3:D7:20:C5:1C:87:A9
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019CA9B39684833D526414E60B2B7F1B1F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0638
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: WQvy26B7eDSG6n2KgW1UK7jIrMxZhA1agiIEY6otv6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:96:84:83:3d:52:64:14:e6:0b:2b:7f:1b:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=d4898ea43d7bc8b984e990443eb3d720c51c87a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:18:01:8f:7a:9b:53:50:cc:44:c5:4a:56:
7e:37:e5:9c:69:09:b0:92:ad:25:24:e5:bb:8e:e1:
38:07:27:77:b6:08:9d:38:33:fa:0a:98:48:aa:14:
96:90:6b:8c:a0:69:f6:a7:9d:7c:e7:63:14:3b:47:
28:d7:99:3c:6b:44:32:3a:1b:72:20:3b:f3:83:86:
fc:aa:8b:76:7b:87:08:f9:0e:c3:de:12:48:04:9a:
73:97:5d:67:8f:25:09:ea:e1:28:59:5f:bb:74:94:
fe:5a:1c:6f:83:4e:8d:46:5b:33:be:14:20:a2:cf:
46:ff:42:c7:23:fb:2e:7c:a3:ab:d8:f6:5d:ff:a6:
74:02:f9:d9:42:f8:f8:25:03:95:4e:f0:e8:8d:6d:
9a:44:a2:a1:7d:2b:1c:d4:93:0e:40:1d:ed:b4:0c:
67:b5:34:7d:30:75:31:f7:f9:7f:5b:57:f4:77:57:
eb:55:a9:66:ec:57:5b:b8:49:4e:d5:a2:d1:56:6e:
b2:b9:65:f8:07:25:f2:ab:41:40:0d:d8:aa:2a:f9:
74:5f:f0:35:f8:cb:c5:fd:0c:25:d6:8d:e6:6c:79:
03:b9:6a:bf:04:c6:45:0b:e3:14:a1:a1:2e:4a:e7:
4b:62:ef:c5:a4:00:ea:0d:6f:07:99:c9:a9:1b:d8:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:8E:A4:3D:7B:C8:B9:84:E9:90:44:3E:B3:D7:20:C5:1C:87:A9
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:45:ee:c8:79:28:d1:f6:9a:25:5e:8d:1d:a8:8a:61:17:aa:
dd:e3:4b:ab:d4:df:7d:fa:d6:2c:ff:5f:a0:ba:0e:8a:27:fc:
d0:59:2b:68:e6:68:03:b8:88:0e:ab:db:de:37:46:f7:04:6c:
5e:ff:f7:31:dd:e7:a3:17:a1:08:28:ea:68:43:d0:da:32:e2:
3e:f9:b6:25:06:50:0f:b9:19:1f:60:a2:d6:00:68:ac:e2:ee:
e5:54:74:3a:bf:7b:2b:a5:d0:62:80:84:31:51:85:95:4d:7d:
64:89:ea:ff:81:00:00:52:cf:10:da:c9:2f:81:2b:9b:68:af:
09:55:a1:0c:6c:ad:b1:ac:91:0e:41:1a:b3:87:ef:d6:d1:97:
1a:8b:8a:44:23:5e:57:e8:47:05:34:eb:75:6a:e9:b2:0b:3e:
50:ea:be:c6:e4:0d:1b:f5:2a:b0:b0:03:4a:0b:33:d1:88:cd:
2f:3d:e7:86:9b:ca:c3:e4:35:91:10:8d:23:9b:d8:9a:08:bd:
16:b0:87:43:2b:c0:75:4a:d7:f9:35:01:0c:96:92:27:54:2d:
6b:c7:d5:e4:e3:02:00:07:64:f0:c2:8d:39:0c:98:72:df:4b:
8f:ac:a2:24:b9:2a:07:a4:92:ab:2b:83:47:85:c7:69:06:7c:
5c:b3:7b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps5aEgz1SZBTmCyt/Gx9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjYwMzAxMTQwMDQ0WhcNMjYwMzAyMTQwMDQ0WjAzMTEwLwYDVQQD
EyhkNDg5OGVhNDNkN2JjOGI5ODRlOTkwNDQzZWIzZDcyMGM1MWM4N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrwYAY96m1NQzETFSlZ+N+WcaQmw
kq0lJOW7juE4Byd3tgidODP6CphIqhSWkGuMoGn2p51852MUO0co15k8a0QyOhty
IDvzg4b8qot2e4cI+Q7D3hJIBJpzl11njyUJ6uEoWV+7dJT+Whxvg06NRlszvhQg
os9G/0LHI/sufKOr2PZd/6Z0AvnZQvj4JQOVTvDojW2aRKKhfSsc1JMOQB3ttAxn
tTR9MHUx9/l/W1f0d1frValm7FdbuElO1aLRVm6yuWX4ByXyq0FADdiqKvl0X/A1
+MvF/Qwl1o3mbHkDuWq/BMZFC+MUoaEuSudLYu/FpADqDW8HmcmpG9h33QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSJjqQ9e8i5hOmQRD6z1yDFHIepMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEXuyHko
0faaJV6NHaiKYReq3eNLq9TfffrWLP9foLoOiif80FkraOZoA7iIDqvb3jdG9wRs
Xv/3Md3noxehCCjqaEPQ2jLiPvm2JQZQD7kZH2Ci1gBorOLu5VR0Or97K6XQYoCE
MVGFlU19ZInq/4EAAFLPENrJL4Erm2ivCVWhDGytsayRDkEas4fv1tGXGouKRCNe
V+hHBTTrdWrpsgs+UOq+xuQNG/UqsLADSgsz0YjNLz3nhpvKw+Q1kRCNI5vYmgi9
FrCHQyvAdUrX+TUBDJaSJ1Qta8fV5OMCAAdk8MKNOQyYct9Lj6yiJLkqB6SSqyuD
R4XHaQZ8XLN7Aw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:23 2026 by rpki-client