Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: oDH5MMjLfjEsb5Qahwe5AepP/yUYB4K/A9RWjNDOV7k=
Subject key identifier: 05:30:26:60:E4:E5:A2:08:B8:6E:58:0A:DA:79:77:B3:51:31:BA:70
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019D25BA415F0828E4886094A03788472237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 108A
Signing time: Wed 25 Mar 2026 16:00:56 +0000
Manifest this update: Wed 25 Mar 2026 16:00:56 +0000
Manifest next update: Thu 26 Mar 2026 16:00:56 +0000
Files and hashes: 1: 2bvqhGwQ0lPcBuBDG9_LfRJJmS0.roa (hash: CH2b5UD+d3clq2chE/+n6piPoX52uVJBt2iOc7QC1hY=)
2: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: LhxyungtnF7/DNmi4IhSJSQSZ/tg4AbETL4a+epHnro=)
3: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
4: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:41:5f:08:28:e4:88:60:94:a0:37:88:47:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Mar 25 16:00:56 2026 GMT
Not After : Mar 26 16:00:56 2026 GMT
Subject: CN=05302660e4e5a208b86e580ada7977b35131ba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:65:f4:a9:09:40:97:97:d2:ac:95:43:0f:
5c:76:1a:ef:7c:c8:df:fd:7b:d0:17:79:94:1f:b0:
3c:eb:3e:87:07:83:65:1e:56:84:77:34:dc:39:95:
72:96:54:24:4b:ae:68:d8:da:34:17:75:16:61:dd:
87:7f:47:a7:ea:0c:38:de:91:f3:a9:33:9f:5e:f9:
04:22:f7:fc:64:3a:5d:46:78:31:f3:0b:67:2b:d2:
56:e4:34:d0:ab:7f:96:2f:79:73:fe:6f:4a:7a:93:
cb:d7:4c:06:65:cc:6b:e3:fc:ad:41:88:43:e8:13:
51:08:85:66:e1:68:e0:8b:48:2c:d8:3e:81:c6:91:
9f:ab:20:9c:02:fb:3d:47:f5:69:dd:20:83:06:d8:
e5:5f:34:e4:7a:ce:97:03:53:5a:19:4c:c9:32:83:
b8:7b:3a:29:8d:4a:bc:62:ab:cc:51:ba:fc:52:42:
c4:8b:8e:5b:38:4f:d6:b3:a7:cb:c4:88:b6:18:99:
32:17:7c:ef:e8:12:4f:c6:0a:43:f0:69:59:ac:2c:
d5:4d:dc:f3:43:b7:0f:ec:b8:e7:95:96:ec:3d:96:
cf:d4:f0:09:c2:54:3e:30:da:7b:20:d5:56:95:56:
47:4d:03:ab:bb:3b:65:89:a0:2a:4e:80:97:9a:17:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:30:26:60:E4:E5:A2:08:B8:6E:58:0A:DA:79:77:B3:51:31:BA:70
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d8:c9:68:c2:73:0f:41:44:15:eb:55:c7:44:77:cc:82:f9:
76:a1:37:c5:ff:65:3b:67:80:fd:11:80:b3:cc:75:c4:35:9a:
41:c4:52:06:d8:bd:b2:23:be:25:09:6e:e1:6b:de:e8:4a:bc:
98:af:71:1e:ac:57:56:3e:a6:39:d4:1c:54:70:dd:54:a2:55:
c1:1f:2c:58:4f:1f:36:26:3e:80:d3:06:62:8f:05:26:26:45:
ba:aa:b0:1d:1c:be:1d:4a:63:c1:6b:13:d5:de:2b:73:bf:62:
ea:7e:26:26:1c:04:14:38:76:af:b2:e4:49:da:9b:19:88:98:
73:54:73:05:60:ea:22:7b:e4:17:d7:b0:b0:9c:c8:93:14:df:
2c:97:d9:69:52:05:f2:7a:da:a0:f2:b5:9b:f7:06:ef:8b:50:
c0:b5:bb:cb:e3:32:f8:6b:55:39:66:c4:a5:4e:bf:ce:aa:0f:
01:58:d4:35:26:69:3d:c2:43:07:dd:8d:e8:72:ad:8e:db:77:
36:ea:c7:66:76:66:32:a5:d0:6d:35:37:69:32:de:14:9f:42:
df:12:78:34:c7:5e:97:6c:c2:a6:2e:7d:51:fd:28:1b:db:9d:
ab:52:1f:9a:b7:7e:ad:e4:1a:73:65:c1:e3:4f:c6:c7:f8:3b:
25:16:7d:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lukFfCCjkiGCUoDeIRyI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj
YzExMzYwHhcNMjYwMzI1MTYwMDU2WhcNMjYwMzI2MTYwMDU2WjAzMTEwLwYDVQQD
EygwNTMwMjY2MGU0ZTVhMjA4Yjg2ZTU4MGFkYTc5NzdiMzUxMzFiYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ll9KkJQJeX0qyVQw9cdhrvfMjf
/XvQF3mUH7A86z6HB4NlHlaEdzTcOZVyllQkS65o2No0F3UWYd2Hf0en6gw43pHz
qTOfXvkEIvf8ZDpdRngx8wtnK9JW5DTQq3+WL3lz/m9KepPL10wGZcxr4/ytQYhD
6BNRCIVm4Wjgi0gs2D6BxpGfqyCcAvs9R/Vp3SCDBtjlXzTkes6XA1NaGUzJMoO4
ezopjUq8YqvMUbr8UkLEi45bOE/Ws6fLxIi2GJkyF3zv6BJPxgpD8GlZrCzVTdzz
Q7cP7LjnlZbsPZbP1PAJwlQ+MNp7INVWlVZHTQOruztliaAqToCXmhdLkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUwJmDk5aIIuG5YCtp5d7NRMbpwMB8GA1UdIwQY
MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt
Zjc0Y2NjYzRlMGExLzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx
LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNjJaMJz
D0FEFetVx0R3zIL5dqE3xf9lO2eA/RGAs8x1xDWaQcRSBti9siO+JQlu4Wve6Eq8
mK9xHqxXVj6mOdQcVHDdVKJVwR8sWE8fNiY+gNMGYo8FJiZFuqqwHRy+HUpjwWsT
1d4rc79i6n4mJhwEFDh2r7LkSdqbGYiYc1RzBWDqInvkF9ewsJzIkxTfLJfZaVIF
8nraoPK1m/cG74tQwLW7y+My+GtVOWbEpU6/zqoPAVjUNSZpPcJDB92N6HKtjtt3
NurHZnZmMqXQbTU3aTLeFJ9C3xJ4NMdel2zCpi59Uf0oG9udq1Ifmrd+reQac2XB
40/Gx/g7JRZ99Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:17 2026 by rpki-client