Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
File: b6U11TlSoTJ99CLvgOuXvABDRn4.mft (raw, json)
Hash identifier: gQCFz6+pYKXe26kyN0S7GyYtfRvUxVE/OhFITfWWMWQ=
Subject key identifier: 0D:F8:B4:F1:4D:0E:44:97:B0:66:A1:E6:B7:6B:2A:8C:C7:9B:AB:C6
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Certificate issuer: /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial: 019CA8A15E0E153D542A27AA3B7488F2AAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
Manifest number: 71
Signing time: Sun 01 Mar 2026 09:01:13 +0000
Manifest this update: Sun 01 Mar 2026 09:01:13 +0000
Manifest next update: Mon 02 Mar 2026 09:01:13 +0000
Files and hashes: 1: b6U11TlSoTJ99CLvgOuXvABDRn4.crl (hash: nQaCrVDYDj6giWwjzZlA/axC18SjaiCBM1N+5kLTD8k=)
2: zrKXyDB5KIGu9jSU2Ln5_ZOjrDA.asa (hash: b1Gxe7i+E+LsBFBBErsacO58baGZs9KPGIPt1suvc04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:5e:0e:15:3d:54:2a:27:aa:3b:74:88:f2:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
Validity
Not Before: Mar 1 09:01:13 2026 GMT
Not After : Mar 2 09:01:13 2026 GMT
Subject: CN=0df8b4f14d0e4497b066a1e6b76b2a8cc79babc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:43:59:3a:47:0f:16:19:f7:10:74:1d:60:
40:a6:9d:d7:71:75:d7:e1:55:93:33:df:c0:a3:12:
97:14:7d:93:d3:05:c7:75:62:e1:b1:f3:44:cb:3d:
cf:d2:30:f6:ce:9b:06:4b:c6:0b:c2:64:28:c6:89:
aa:97:5c:66:1a:dd:5a:6a:05:5f:0a:e0:e4:24:38:
6e:7b:c3:c6:ac:97:41:d1:97:e9:28:fc:0e:79:01:
79:de:ca:23:eb:e9:30:ae:c5:ca:a9:46:6b:40:cd:
34:e9:97:5a:3d:4f:84:12:44:6a:85:19:06:7d:2d:
74:d1:49:03:b4:16:8f:3d:a1:4f:49:cf:0c:13:97:
e6:a9:c7:fd:f1:7b:da:8f:57:0d:c7:d6:1c:46:d1:
5b:5b:f8:ef:f5:14:bb:d5:eb:d0:d3:5c:06:fc:2d:
42:ff:0b:ea:bc:85:76:30:73:3f:fa:c4:44:5a:23:
38:c6:e4:62:d8:c0:83:b4:ab:07:d8:04:c1:06:db:
09:b1:db:eb:68:87:1c:cf:a4:07:65:e2:d2:61:3c:
3d:be:54:40:ed:c8:93:91:ce:ab:44:77:50:6f:36:
f4:21:cc:10:7d:d9:44:95:9f:41:b3:f7:c0:35:a1:
bc:a3:97:e3:b6:76:be:0b:78:b1:f7:68:16:02:b9:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F8:B4:F1:4D:0E:44:97:B0:66:A1:E6:B7:6B:2A:8C:C7:9B:AB:C6
X509v3 Authority Key Identifier:
keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:e9:98:ed:b3:7f:36:9c:4c:64:df:13:ea:f8:b5:36:23:
2d:da:82:86:e7:03:df:28:21:00:53:ff:f7:3e:3c:62:d6:06:
c1:ab:39:4d:4b:8c:0c:2b:b2:0e:60:05:38:a6:b8:14:cf:4f:
81:30:ca:b0:b5:49:24:5a:e5:14:27:e0:b5:bf:87:0a:19:3b:
44:cc:58:fc:88:69:0c:6e:7a:59:f0:c1:6c:c6:2e:58:67:67:
ff:94:fe:eb:0c:9a:00:ab:ab:e3:0a:6b:1f:90:15:2e:bf:83:
30:e9:4c:f3:3e:76:de:9d:50:5e:e9:c0:bf:30:0c:46:c8:40:
2c:e6:7e:01:7d:35:75:55:82:8e:e4:68:a5:3a:48:56:69:2e:
3d:0b:6d:df:27:3e:66:a6:6c:cd:8e:8d:4e:e1:2d:85:21:1d:
d8:34:9c:3a:66:40:1f:c0:ee:02:81:c2:81:06:9c:be:8a:30:
cc:84:3f:2a:29:35:b3:f2:f8:ac:24:c1:54:5a:ab:c2:c1:fa:
3c:42:6f:50:fd:f7:63:49:8c:be:0c:e8:dd:c7:2c:f7:ce:d3:
c2:29:81:06:b8:01:9e:cd:1f:3b:c1:82:96:88:02:e5:9e:e6:
46:5e:fc:51:6a:ad:cd:70:91:3b:47:10:1c:05:9a:fb:82:70:
2d:55:7f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooV4OFT1UKieqO3SI8qr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTUzNWQ1Mzk1MmExMzI3ZGY0MjJlZjgwZWI5N2JjMDA0
MzQ2N2UwHhcNMjYwMzAxMDkwMTEzWhcNMjYwMzAyMDkwMTEzWjAzMTEwLwYDVQQD
EygwZGY4YjRmMTRkMGU0NDk3YjA2NmExZTZiNzZiMmE4Y2M3OWJhYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA285DWTpHDxYZ9xB0HWBApp3XcXXX
4VWTM9/AoxKXFH2T0wXHdWLhsfNEyz3P0jD2zpsGS8YLwmQoxomql1xmGt1aagVf
CuDkJDhue8PGrJdB0ZfpKPwOeQF53soj6+kwrsXKqUZrQM006ZdaPU+EEkRqhRkG
fS100UkDtBaPPaFPSc8ME5fmqcf98Xvaj1cNx9YcRtFbW/jv9RS71evQ01wG/C1C
/wvqvIV2MHM/+sREWiM4xuRi2MCDtKsH2ATBBtsJsdvraIccz6QHZeLSYTw9vlRA
7ciTkc6rRHdQbzb0IcwQfdlElZ9Bs/fANaG8o5fjtna+C3ix92gWArlFkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA34tPFNDkSXsGah5rdrKozHm6vGMB8GA1UdIwQY
MBaAFG+lNdU5UqEyffQi74Drl7wAQ0Z+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZVMTFUbFNvVEo5OUNMdmdPdVh2QUJEUm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MjFkMzQtMzYzMC00MTUwLTk0MzIt
NmQ5NmNkYWVjZGZkLzEvYjZVMTFUbFNvVEo5OUNMdmdPdVh2QUJEUm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81MjFkMzQtMzYzMC00MTUwLTk0MzItNmQ5NmNkYWVjZGZk
LzEvYjZVMTFUbFNvVEo5OUNMdmdPdVh2QUJEUm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPXpmO2z
fzacTGTfE+r4tTYjLdqChucD3yghAFP/9z48YtYGwas5TUuMDCuyDmAFOKa4FM9P
gTDKsLVJJFrlFCfgtb+HChk7RMxY/IhpDG56WfDBbMYuWGdn/5T+6wyaAKur4wpr
H5AVLr+DMOlM8z523p1QXunAvzAMRshALOZ+AX01dVWCjuRopTpIVmkuPQtt3yc+
ZqZszY6NTuEthSEd2DScOmZAH8DuAoHCgQacvoowzIQ/Kik1s/L4rCTBVFqrwsH6
PEJvUP33Y0mMvgzo3ccs987TwimBBrgBns0fO8GClogC5Z7mRl78UWqtzXCRO0cQ
HAWa+4JwLVV/Zg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:24 2026 by rpki-client