Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: I+d6L72GjB2zXaisBNKWNzSNfn1HsvRZdpCZ3aVy6gQ=
Subject key identifier: 6C:13:F7:B4:DA:89:04:98:CD:75:1F:E3:49:FB:6F:D4:78:99:18:A9
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 019CAC1005EE0A1F2FC27A3F46E2DCDC41C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: hQ1/tvB1U0nYRrLpD4hTqmaE9bRH14yZQ9YQgc1b23o=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:05:ee:0a:1f:2f:c2:7a:3f:46:e2:dc:dc:41:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=6c13f7b4da890498cd751fe349fb6fd4789918a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:f2:5e:84:c1:2b:75:1a:79:dd:ac:52:2c:
0f:8c:0f:bb:8c:83:b2:e8:d5:84:cd:4f:42:8b:fd:
b9:8b:35:a6:9b:e1:93:20:63:a2:8e:b1:fa:22:fc:
e3:89:76:93:44:99:ee:c8:4b:8e:ee:35:08:54:b7:
c5:e6:54:18:60:a0:8a:f8:30:db:0e:73:ba:8c:fb:
53:bb:0f:ae:11:9a:16:91:be:19:e0:fb:70:c6:61:
91:86:ca:ce:ae:62:e3:9d:38:3b:38:02:04:de:2c:
99:7b:4e:6c:10:35:0b:f0:54:86:c3:94:7a:77:0f:
54:56:c2:76:c8:9a:16:3f:59:64:14:f3:07:c9:a1:
64:61:3c:e0:e5:e2:60:b2:1a:da:e7:09:5b:a0:5f:
79:be:16:cb:f6:35:34:cb:d9:fe:41:fd:a2:69:28:
81:50:aa:0d:a2:f5:2d:3a:20:91:bd:87:c5:1d:e3:
65:aa:1e:41:41:4e:d9:b8:6b:04:73:ca:2b:60:80:
d7:a2:9e:76:c8:cc:51:a9:5d:aa:4d:da:ba:c8:1b:
41:cc:38:dd:32:65:a8:76:ca:59:54:80:e8:9a:3e:
a0:84:05:9e:59:d6:b5:ad:20:53:0e:77:47:09:fe:
5f:79:9e:46:fe:87:13:85:25:5d:04:4b:ae:96:d5:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:F7:B4:DA:89:04:98:CD:75:1F:E3:49:FB:6F:D4:78:99:18:A9
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:0f:ac:a2:10:9c:dd:4a:be:9d:46:91:77:26:b4:45:d5:
5b:a6:1b:61:d5:2b:9b:44:f2:19:43:06:a9:4a:0a:6e:ea:de:
e6:35:0a:cb:a1:5d:6d:1a:60:a1:8e:b1:3f:4c:c6:39:14:0f:
fc:95:ea:2e:e2:68:af:a7:72:df:cf:b1:c9:e4:b8:17:07:46:
51:bb:fc:75:b9:cd:32:ce:a0:45:fb:71:a2:f5:f3:2c:20:22:
2f:ec:e0:76:ac:6a:7d:ff:3d:6e:69:18:5a:4c:2a:2e:94:05:
9b:77:ba:de:5b:f2:1e:5b:6d:df:4e:0f:23:c5:1e:4b:38:50:
ae:4d:c8:ee:17:2d:6f:1b:03:d8:d7:aa:f3:66:03:0c:9f:74:
45:fa:71:9c:be:6c:0a:f5:ed:22:43:27:08:89:c0:11:f0:f9:
3a:5d:af:38:66:e0:f0:00:dd:da:fc:fd:83:ac:31:cd:c3:d5:
6b:cb:ad:cd:29:83:88:97:66:2c:c3:a0:e7:87:34:0c:b6:22:
66:00:2d:0a:aa:88:65:d3:4c:0f:9d:b6:58:92:ae:c4:1f:43:
0e:a3:96:71:47:9a:15:23:61:c8:58:68:35:ac:99:de:3e:7b:
30:ba:f4:a4:52:da:0a:5e:e9:71:39:c8:c0:c6:2e:fa:4b:0e:
af:81:cc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEAXuCh8vwno/RuLc3EHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5
YjQ4OGEwHhcNMjYwMzAyMDEwMDU2WhcNMjYwMzAzMDEwMDU2WjAzMTEwLwYDVQQD
Eyg2YzEzZjdiNGRhODkwNDk4Y2Q3NTFmZTM0OWZiNmZkNDc4OTkxOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0TyXoTBK3Uaed2sUiwPjA+7jIOy
6NWEzU9Ci/25izWmm+GTIGOijrH6IvzjiXaTRJnuyEuO7jUIVLfF5lQYYKCK+DDb
DnO6jPtTuw+uEZoWkb4Z4PtwxmGRhsrOrmLjnTg7OAIE3iyZe05sEDUL8FSGw5R6
dw9UVsJ2yJoWP1lkFPMHyaFkYTzg5eJgshra5wlboF95vhbL9jU0y9n+Qf2iaSiB
UKoNovUtOiCRvYfFHeNlqh5BQU7ZuGsEc8orYIDXop52yMxRqV2qTdq6yBtBzDjd
MmWodspZVIDomj6ghAWeWda1rSBTDndHCf5feZ5G/ocThSVdBEuultVZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwT97TaiQSYzXUf40n7b9R4mRipMB8GA1UdIwQY
MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt
ODJlMmQ1ZWU5YzkwLzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw
LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrAPrKIQ
nN1Kvp1GkXcmtEXVW6YbYdUrm0TyGUMGqUoKbure5jUKy6FdbRpgoY6xP0zGORQP
/JXqLuJor6dy38+xyeS4FwdGUbv8dbnNMs6gRftxovXzLCAiL+zgdqxqff89bmkY
WkwqLpQFm3e63lvyHltt304PI8UeSzhQrk3I7hctbxsD2Neq82YDDJ90RfpxnL5s
CvXtIkMnCInAEfD5Ol2vOGbg8ADd2vz9g6wxzcPVa8utzSmDiJdmLMOg54c0DLYi
ZgAtCqqIZdNMD522WJKuxB9DDqOWcUeaFSNhyFhoNayZ3j57MLr0pFLaCl7pcTnI
wMYu+ksOr4HMoA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:32 2026 by rpki-client