Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: fCmss7IoVbOlb9WqPwtwOZ1a+sISlYSYYROfXAxtWZg=
Subject key identifier: C7:31:A8:D0:2C:27:75:AB:56:3E:7C:80:AE:10:92:65:6A:C2:1E:0F
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 019D9886CD6D1FF55CEDCE23675D46F26756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 175E
Signing time: Thu 16 Apr 2026 23:01:04 +0000
Manifest this update: Thu 16 Apr 2026 23:01:04 +0000
Manifest next update: Fri 17 Apr 2026 23:01:04 +0000
Files and hashes: 1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: gZu1tpQeQsUnZLuFlsyxvWjyswK6F8nCoa5tMzEixkQ=)
3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:cd:6d:1f:f5:5c:ed:ce:23:67:5d:46:f2:67:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Apr 16 23:01:04 2026 GMT
Not After : Apr 17 23:01:04 2026 GMT
Subject: CN=c731a8d02c2775ab563e7c80ae1092656ac21e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:30:36:81:20:37:79:ac:7a:6b:4a:08:26:68:
b8:fe:82:6b:17:32:6b:79:8c:34:7b:24:da:03:df:
7e:f4:cc:d9:d1:f8:17:a6:d1:eb:f6:6e:23:02:3e:
55:53:20:d5:d7:17:ac:8e:47:1b:c5:ea:42:fe:50:
86:aa:a2:fa:f8:3d:1f:2e:73:34:3a:7b:70:21:e5:
65:d1:ec:a3:dc:a3:1b:56:bf:f7:a5:56:b3:f8:27:
63:ff:e8:a5:c9:73:91:26:c2:f0:0d:42:b1:60:54:
6e:4a:6f:69:d5:1f:6a:a0:f7:34:bf:08:85:db:4a:
c4:b1:2d:86:03:b0:ab:bb:b8:24:b0:7f:d6:04:28:
38:6e:f4:16:da:b2:52:79:3f:b5:d9:63:6e:ba:34:
77:ae:2b:27:e7:90:3f:74:18:31:ba:0c:db:e3:25:
79:06:79:01:95:b8:f0:10:bf:f5:4b:36:6b:f4:b2:
46:e6:a1:a7:b2:0c:16:3f:73:42:5e:94:fd:75:2e:
9b:b0:cd:b8:9c:a0:eb:3d:20:ec:19:43:01:b3:ce:
05:f2:59:12:b9:d7:a1:47:54:f8:e7:3e:9d:c0:20:
9a:b6:79:53:ab:f7:69:d0:8b:69:26:d1:6f:4b:f9:
8e:61:d3:eb:86:93:a4:27:7f:26:66:9c:9a:93:41:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:31:A8:D0:2C:27:75:AB:56:3E:7C:80:AE:10:92:65:6A:C2:1E:0F
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:7a:2e:6d:86:65:3c:37:1f:38:fa:b5:a6:13:fd:6a:2a:e3:
e3:69:50:35:83:10:b5:7e:32:24:60:4a:50:34:2f:ba:00:e5:
ab:b5:86:1a:31:0f:47:f7:fb:47:cb:87:82:ee:1a:80:3a:2d:
1b:45:a4:9c:44:5c:c1:cf:ab:d3:06:7e:48:c4:d0:2f:4d:ff:
34:e3:11:9e:51:03:0f:a2:a2:f1:c8:7e:fb:fb:f0:dc:3d:09:
23:57:43:18:0d:5c:b3:c9:9c:fa:a4:06:a1:b1:0f:c1:c6:17:
f9:3f:50:25:3f:72:45:2f:39:bd:84:fa:60:59:82:76:85:e0:
98:f2:32:c8:1f:04:40:65:78:0f:23:51:3d:24:3e:8f:d9:c5:
53:26:e0:1d:0d:0f:64:96:7e:23:67:6c:d8:03:6e:17:8c:4d:
b9:29:5d:99:b3:ca:37:ab:fd:18:32:b9:b4:4c:e4:d0:b7:22:
7e:ee:e0:d4:ed:97:83:d7:be:54:3c:4e:45:ca:5b:24:db:1f:
2b:e7:40:51:20:cb:b6:5c:79:d6:84:1f:c8:d3:a1:ed:3e:59:
3b:09:49:ca:61:8e:37:f4:fa:af:0f:2f:87:4b:2f:3f:c5:51:
d1:99:ce:08:68:ce:5a:63:51:f8:ee:b6:4c:9b:4e:1a:85:4d:
99:79:f5:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhs1tH/Vc7c4jZ11G8mdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTM5M2JkZmY2MDE0NjJhNTU1OTFkMjZhY2IzZDhjOTIz
ZmYyNmQwHhcNMjYwNDE2MjMwMTA0WhcNMjYwNDE3MjMwMTA0WjAzMTEwLwYDVQQD
EyhjNzMxYThkMDJjMjc3NWFiNTYzZTdjODBhZTEwOTI2NTZhYzIxZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zA2gSA3eax6a0oIJmi4/oJrFzJr
eYw0eyTaA99+9MzZ0fgXptHr9m4jAj5VUyDV1xesjkcbxepC/lCGqqL6+D0fLnM0
OntwIeVl0eyj3KMbVr/3pVaz+Cdj/+ilyXORJsLwDUKxYFRuSm9p1R9qoPc0vwiF
20rEsS2GA7Cru7gksH/WBCg4bvQW2rJSeT+12WNuujR3risn55A/dBgxugzb4yV5
BnkBlbjwEL/1SzZr9LJG5qGnsgwWP3NCXpT9dS6bsM24nKDrPSDsGUMBs84F8lkS
udehR1T45z6dwCCatnlTq/dp0ItpJtFvS/mOYdPrhpOkJ38mZpyak0GUQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcxqNAsJ3WrVj58gK4QkmVqwh4PMB8GA1UdIwQY
MBaAFOgTk73/YBRipVWR0mrLPYySP/JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDkt
M2MxNDYyMWVjZmM1LzEvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDktM2MxNDYyMWVjZmM1
LzEvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynoubYZl
PDcfOPq1phP9airj42lQNYMQtX4yJGBKUDQvugDlq7WGGjEPR/f7R8uHgu4agDot
G0WknERcwc+r0wZ+SMTQL03/NOMRnlEDD6Ki8ch++/vw3D0JI1dDGA1cs8mc+qQG
obEPwcYX+T9QJT9yRS85vYT6YFmCdoXgmPIyyB8EQGV4DyNRPSQ+j9nFUybgHQ0P
ZJZ+I2ds2ANuF4xNuSldmbPKN6v9GDK5tEzk0Lcifu7g1O2Xg9e+VDxORcpbJNsf
K+dAUSDLtlx51oQfyNOh7T5ZOwlJymGON/T6rw8vh0svP8VR0ZnOCGjOWmNR+O62
TJtOGoVNmXn1mQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:52 2026 by rpki-client