Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: lHZKjusGlD6kA8PtkCaIiwZtRdL/vdEE/xvZ5Kwfph0=
Subject key identifier: 14:38:B2:D8:53:0A:D0:9E:EC:A9:8B:23:6A:66:23:78:4D:65:2A:A7
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019CAA2184AF5CE9772FD8298117EEA15407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 185B
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
2: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
3: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: o7Jk6YYAKEclkV3Jz1gOH61wg3CEGkeUyf1huSxVtqc=)
4: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
5: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
6: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
7: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
8: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
9: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:84:af:5c:e9:77:2f:d8:29:81:17:ee:a1:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=1438b2d8530ad09eeca98b236a6623784d652aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:2f:0f:c2:51:99:f8:09:59:1d:bd:2a:5e:
64:df:6b:10:91:b4:b7:31:93:01:16:cd:83:de:8e:
60:2e:cb:cd:04:9d:20:cb:41:18:e0:d7:42:45:92:
1b:82:56:fa:1d:cb:56:9b:e0:f5:3e:b6:30:1a:8a:
99:9c:9f:73:5b:5a:31:b6:a6:2e:df:27:00:19:77:
68:4c:ed:5a:f8:ec:f2:fe:5c:bb:fb:56:1e:c3:2e:
5c:e5:5b:e5:90:84:26:de:d4:9e:0a:40:5e:f3:4d:
a7:f2:72:56:60:1b:fc:d5:cd:ea:76:a5:cb:9f:74:
27:04:75:d3:42:06:68:56:cd:94:59:6d:25:6b:31:
4c:86:c7:1f:95:69:20:ba:bf:a5:8f:70:48:77:a3:
17:4d:7e:0c:18:fb:fa:ef:25:58:e2:33:df:9f:b8:
fd:c0:bb:d9:30:5b:b0:c1:13:38:d8:68:49:1f:c4:
79:0a:5c:9e:29:6e:f3:cf:9e:0b:89:a0:7f:b6:3a:
1c:75:8f:35:1c:46:ba:c0:71:53:31:ad:be:c4:a8:
0b:58:d3:01:96:0c:f3:36:54:03:ff:2c:55:90:a5:
eb:87:60:96:8b:40:2c:87:f7:e2:fa:04:78:62:70:
5f:8c:31:5c:b9:49:f7:06:30:3d:ae:6d:b1:05:d1:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:B2:D8:53:0A:D0:9E:EC:A9:8B:23:6A:66:23:78:4D:65:2A:A7
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fb:ec:8c:eb:4e:b7:ff:b2:7b:02:8e:74:3e:e1:d5:38:01:
04:96:17:8d:cc:59:b5:fe:49:8c:1f:b1:60:80:5d:34:2f:4b:
d2:20:78:fd:54:5b:0f:bd:c7:6c:ad:98:86:0d:8d:72:ef:94:
1f:cb:ca:91:71:fb:40:f0:17:54:81:1a:99:85:43:55:92:73:
86:d9:1e:f9:cb:55:98:87:45:ac:39:4e:b9:a9:e5:25:2f:8e:
eb:63:4f:c3:91:32:1b:35:37:7d:66:19:c5:60:61:f6:53:92:
9c:01:6d:1a:ab:49:76:f5:e1:a5:9e:23:70:6c:42:8f:0e:c1:
30:9a:6d:7e:bf:ca:3b:d5:e9:7f:11:67:30:8a:54:58:b8:ad:
e3:96:9c:ae:90:f5:3b:25:32:ec:3f:97:61:1c:2d:ed:bc:2d:
74:43:15:f1:a9:6c:6e:e4:a9:c0:43:de:4b:84:1c:37:46:e5:
12:64:f0:5e:eb:6d:b2:ed:e1:37:87:f5:f5:6c:3e:bc:f2:73:
5e:0a:71:a3:e7:af:43:74:41:b9:ab:f1:00:06:87:78:51:46:
d5:fb:8c:98:d0:b4:d4:20:97:4a:9a:ae:3c:cf:ce:66:81:ab:
71:3f:5b:cd:77:ce:d9:11:86:2e:1f:4e:75:7f:92:6f:f8:9d:
41:ed:53:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIYSvXOl3L9gpgRfuoVQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjYwMzAxMTYwMDQ5WhcNMjYwMzAyMTYwMDQ5WjAzMTEwLwYDVQQD
EygxNDM4YjJkODUzMGFkMDllZWNhOThiMjM2YTY2MjM3ODRkNjUyYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCkvD8JRmfgJWR29Kl5k32sQkbS3
MZMBFs2D3o5gLsvNBJ0gy0EY4NdCRZIbglb6HctWm+D1PrYwGoqZnJ9zW1oxtqYu
3ycAGXdoTO1a+Ozy/ly7+1Yewy5c5VvlkIQm3tSeCkBe802n8nJWYBv81c3qdqXL
n3QnBHXTQgZoVs2UWW0lazFMhscflWkgur+lj3BId6MXTX4MGPv67yVY4jPfn7j9
wLvZMFuwwRM42GhJH8R5ClyeKW7zz54LiaB/tjocdY81HEa6wHFTMa2+xKgLWNMB
lgzzNlQD/yxVkKXrh2CWi0Ash/fi+gR4YnBfjDFcuUn3BjA9rm2xBdHRHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ4sthTCtCe7KmLI2pmI3hNZSqnMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/vsjOtO
t/+yewKOdD7h1TgBBJYXjcxZtf5JjB+xYIBdNC9L0iB4/VRbD73HbK2Yhg2Ncu+U
H8vKkXH7QPAXVIEamYVDVZJzhtke+ctVmIdFrDlOuanlJS+O62NPw5EyGzU3fWYZ
xWBh9lOSnAFtGqtJdvXhpZ4jcGxCjw7BMJptfr/KO9XpfxFnMIpUWLit45acrpD1
OyUy7D+XYRwt7bwtdEMV8alsbuSpwEPeS4QcN0blEmTwXuttsu3hN4f19Ww+vPJz
Xgpxo+evQ3RBuavxAAaHeFFG1fuMmNC01CCXSpquPM/OZoGrcT9bzXfO2RGGLh9O
dX+Sb/idQe1TTA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:08 2026 by rpki-client