Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: a64/ebIAKetCI36h/EVZ6cKVyKxk44EpG6j4AxSGFPo=
Subject key identifier: 60:7C:B7:67:B5:6F:CF:06:3C:67:68:54:E2:A1:14:62:AF:13:F1:96
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019D273ABE962592EF1ADFE438B9B8CD734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0FBF
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: BvXJ8++OaBVhCMLOc+AXwXUl9u/ve1QqhVVSNUc/0+A=)
2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:be:96:25:92:ef:1a:df:e4:38:b9:b8:cd:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=607cb767b56fcf063c676854e2a11462af13f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:21:d6:52:86:1b:2b:c5:54:f8:3c:44:fc:
f7:16:4d:fa:b6:fa:34:32:01:af:6d:3c:5a:a1:7d:
a2:89:1c:3c:b3:7c:36:ad:ae:26:28:4a:6c:ab:d3:
e4:b3:38:94:d0:4c:ef:83:02:8f:51:40:2b:f8:0c:
8c:a1:c3:22:35:ba:7c:82:4b:ee:22:39:1f:cb:72:
61:5b:78:3d:4a:aa:42:52:b8:ec:30:c6:a8:65:86:
2a:53:57:76:76:b9:d2:ce:d0:18:b3:aa:ac:6d:2c:
5d:be:2f:d7:3e:e0:9a:43:b7:37:a4:b5:68:8f:5d:
32:91:53:26:c4:a7:24:77:e4:33:53:ec:76:f1:76:
dd:e8:88:f4:c7:11:64:e0:68:80:03:43:de:a4:9c:
35:1c:8e:5e:7b:23:d0:a2:3d:58:a2:9a:bb:13:30:
fc:f9:18:fa:9f:30:2d:91:8b:df:a2:e3:d3:51:f9:
2c:f1:62:c1:5f:c2:fb:c5:d1:4e:98:dd:ae:f8:15:
22:19:0c:0d:fb:31:30:b8:40:e5:b8:ef:76:38:f5:
6a:cb:4c:09:92:c8:5f:0b:28:0f:a2:67:49:0e:f1:
75:86:c0:f0:33:af:d7:65:13:5b:dd:8a:39:16:d4:
e5:5e:97:cd:04:aa:de:5d:29:a2:98:6f:29:4d:8f:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:B7:67:B5:6F:CF:06:3C:67:68:54:E2:A1:14:62:AF:13:F1:96
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:ed:1f:a8:b3:c7:88:57:7e:de:68:a6:46:b1:7e:cb:4f:
f2:6b:12:6e:62:18:d1:e8:98:93:5c:04:42:47:5c:e0:9b:49:
dd:81:60:2a:ad:0b:a4:19:fb:8b:15:05:55:9f:f3:1b:ed:97:
cf:76:0a:d8:e8:43:a9:35:e5:a2:f1:8c:e3:3d:37:92:af:0d:
07:25:95:e5:5f:db:d3:53:c6:65:00:51:ff:bc:b4:a1:b2:17:
e2:2a:f7:21:c5:ce:a6:09:11:23:cf:a9:01:25:3b:ea:76:40:
53:e2:03:8b:a4:50:74:08:3b:f2:99:08:40:3e:08:3b:b4:23:
b8:b4:48:14:a7:61:fb:19:4b:b6:86:91:99:2b:25:8f:25:dd:
20:d6:83:37:9a:7d:ba:d3:2e:12:40:e2:16:8f:65:81:c9:48:
f5:ca:0e:ea:2d:5b:96:f3:4d:f2:27:70:2f:7e:19:64:3b:27:
4e:9f:52:76:c1:bd:30:40:e3:5a:27:cd:6b:17:84:51:9a:3e:
bb:c5:20:a3:ab:6c:37:b9:ca:36:21:25:45:e8:29:3d:66:82:
a2:13:48:1d:58:a7:ac:95:02:e8:93:70:c6:43:33:53:c1:31:
05:31:74:83:ab:79:c1:88:1b:0b:79:71:5a:57:89:c7:ad:98:
3a:23:cb:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOr6WJZLvGt/kOLm4zXNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjYwMzI1MjMwMDU0WhcNMjYwMzI2MjMwMDU0WjAzMTEwLwYDVQQD
Eyg2MDdjYjc2N2I1NmZjZjA2M2M2NzY4NTRlMmExMTQ2MmFmMTNmMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG0h1lKGGyvFVPg8RPz3Fk36tvo0
MgGvbTxaoX2iiRw8s3w2ra4mKEpsq9PksziU0EzvgwKPUUAr+AyMocMiNbp8gkvu
Ijkfy3JhW3g9SqpCUrjsMMaoZYYqU1d2drnSztAYs6qsbSxdvi/XPuCaQ7c3pLVo
j10ykVMmxKckd+QzU+x28Xbd6Ij0xxFk4GiAA0PepJw1HI5eeyPQoj1Yopq7EzD8
+Rj6nzAtkYvfouPTUfks8WLBX8L7xdFOmN2u+BUiGQwN+zEwuEDluO92OPVqy0wJ
kshfCygPomdJDvF1hsDwM6/XZRNb3Yo5FtTlXpfNBKreXSmimG8pTY/oCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB8t2e1b88GPGdoVOKhFGKvE/GWMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaftH6iz
x4hXft5opkaxfstP8msSbmIY0eiYk1wEQkdc4JtJ3YFgKq0LpBn7ixUFVZ/zG+2X
z3YK2OhDqTXlovGM4z03kq8NByWV5V/b01PGZQBR/7y0obIX4ir3IcXOpgkRI8+p
ASU76nZAU+IDi6RQdAg78pkIQD4IO7QjuLRIFKdh+xlLtoaRmSsljyXdINaDN5p9
utMuEkDiFo9lgclI9coO6i1blvNN8idwL34ZZDsnTp9SdsG9MEDjWifNaxeEUZo+
u8Ugo6tsN7nKNiElRegpPWaCohNIHVinrJUC6JNwxkMzU8ExBTF0g6t5wYgbC3lx
WleJx62YOiPLLg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:46 2026 by rpki-client