
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: QYJuPIOCkcxoheNrWNVuCBpxfspvPzwqeBU6gi7Tf5Q=
Subject key identifier: 66:8C:96:02:38:73:76:57:86:C2:A4:E2:A2:CC:17:C3:F6:06:26:FD
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019EC1490C06B6B6FE054D391FC8B5C5FB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0C64
Signing time: Sat 13 Jun 2026 14:00:50 +0000
Manifest this update: Sat 13 Jun 2026 14:00:50 +0000
Manifest next update: Sun 14 Jun 2026 14:00:50 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: 5Pvgdar7Yq9VbJecHbs/pqO0QVbbixgboUC23J3nRJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:0c:06:b6:b6:fe:05:4d:39:1f:c8:b5:c5:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Jun 13 14:00:50 2026 GMT
Not After : Jun 14 14:00:50 2026 GMT
Subject: CN=668c96023873765786c2a4e2a2cc17c3f60626fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:38:ce:f0:9f:44:83:40:a8:34:80:5c:c6:
0e:e9:d4:dd:0d:3c:28:2c:9e:b6:34:80:e4:a0:73:
34:c8:a7:30:1c:2a:37:b0:69:ae:f3:e1:77:65:a3:
1a:ff:8b:9e:d7:4b:06:15:93:35:dd:6e:14:a4:f3:
d9:f3:51:02:b7:58:f2:c9:52:77:db:b4:28:c2:2e:
24:8e:18:8a:51:a9:f7:5c:0b:83:2c:16:a5:7c:f3:
cd:43:fc:1f:4f:48:36:33:bd:a9:8f:1d:da:64:71:
55:a4:8f:2d:70:85:f0:b0:38:13:92:09:48:1b:37:
d8:66:79:de:93:3a:ad:22:4e:45:de:3c:20:e3:e8:
7c:66:84:1f:a5:4c:cc:40:c6:36:db:47:fd:35:87:
d4:11:2d:a7:36:fb:5e:33:8d:b2:4f:f9:0f:77:04:
91:f2:be:70:03:bc:00:06:44:e6:36:89:21:1a:19:
63:70:f4:87:ad:2c:b3:2e:8b:fa:fd:7d:f6:64:e8:
8b:2b:62:e4:66:55:c7:01:ca:46:54:42:98:8f:19:
cf:6a:c9:1b:17:85:fa:9c:36:36:d9:8a:02:68:d1:
a6:9e:c7:05:d7:06:32:b6:8d:26:e9:04:06:31:2a:
ea:25:53:2d:34:e0:73:39:42:1c:de:61:a8:d9:d0:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:96:02:38:73:76:57:86:C2:A4:E2:A2:CC:17:C3:F6:06:26:FD
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:1e:3b:2d:ed:9b:ff:ce:dd:a7:0a:a9:7d:26:40:74:a2:
b3:2a:ad:58:94:6f:40:40:50:83:c1:cf:1d:c5:f1:c8:e6:5d:
40:9b:93:55:ac:02:b8:72:b9:77:8a:51:54:a3:1a:71:10:fc:
8f:df:49:15:8a:a9:25:1c:a6:62:23:58:bd:23:74:55:92:53:
af:d5:f6:11:0a:c8:7c:a8:0d:3f:00:63:c9:20:44:47:3c:c6:
0a:da:ea:b4:f5:c0:a3:11:f2:46:3f:cd:89:0f:66:56:d4:b3:
2d:f8:f7:fc:fe:b4:f6:97:82:4f:ad:3c:83:4c:38:d9:90:3f:
29:43:60:1e:cd:b4:51:76:3c:ea:65:22:b0:ce:6d:5e:49:6f:
85:29:f8:6d:ca:ea:26:07:7a:81:34:bc:bb:db:2f:73:5f:6d:
55:19:7b:25:51:60:85:6c:ec:ff:9d:cd:be:cb:bd:c0:c4:6b:
65:87:1d:b6:0c:8f:ca:87:61:19:1d:53:17:dd:12:57:8d:a6:
72:80:82:08:b6:39:49:d7:fb:0a:39:44:93:6a:fc:8b:6d:07:
7e:21:48:f3:bc:8d:86:9a:7a:82:b9:de:96:2c:3d:72:06:8a:
d2:9e:c4:00:c1:3a:47:28:72:84:93:df:06:7a:df:28:a0:f1:
ce:43:01:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSQwGtrb+BU05H8i1xftCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjYwNjEzMTQwMDUwWhcNMjYwNjE0MTQwMDUwWjAzMTEwLwYDVQQD
Eyg2NjhjOTYwMjM4NzM3NjU3ODZjMmE0ZTJhMmNjMTdjM2Y2MDYyNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbE4zvCfRINAqDSAXMYO6dTdDTwo
LJ62NIDkoHM0yKcwHCo3sGmu8+F3ZaMa/4ue10sGFZM13W4UpPPZ81ECt1jyyVJ3
27Qowi4kjhiKUan3XAuDLBalfPPNQ/wfT0g2M72pjx3aZHFVpI8tcIXwsDgTkglI
GzfYZnnekzqtIk5F3jwg4+h8ZoQfpUzMQMY220f9NYfUES2nNvteM42yT/kPdwSR
8r5wA7wABkTmNokhGhljcPSHrSyzLov6/X32ZOiLK2LkZlXHAcpGVEKYjxnPaskb
F4X6nDY22YoCaNGmnscF1wYyto0m6QQGMSrqJVMtNOBzOUIc3mGo2dA/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaMlgI4c3ZXhsKk4qLMF8P2Bib9MB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU0eOy3t
m//O3acKqX0mQHSisyqtWJRvQEBQg8HPHcXxyOZdQJuTVawCuHK5d4pRVKMacRD8
j99JFYqpJRymYiNYvSN0VZJTr9X2EQrIfKgNPwBjySBERzzGCtrqtPXAoxHyRj/N
iQ9mVtSzLfj3/P609peCT608g0w42ZA/KUNgHs20UXY86mUisM5tXklvhSn4bcrq
Jgd6gTS8u9svc19tVRl7JVFghWzs/53Nvsu9wMRrZYcdtgyPyodhGR1TF90SV42m
coCCCLY5Sdf7CjlEk2r8i20HfiFI87yNhpp6grneliw9cgaK0p7EAME6RyhyhJPf
BnrfKKDxzkMBTg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:43 2026 by rpki-client