Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: kE+K7kyTOKPx1s9ocjnUszZMoeIpanYd0BJSkviJtV8=
Subject key identifier: CF:6A:FC:7C:E3:99:97:E4:38:1D:53:92:CF:12:7C:5F:04:E1:9E:DD
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019D284E09F13050DCF0104467ADE6E656BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: //7JysTp8r+/RpFV62zzJ2NQHX0eV5fnIhrpgpqkwmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:09:f1:30:50:dc:f0:10:44:67:ad:e6:e6:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=cf6afc7ce39997e4381d5392cf127c5f04e19edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:ba:26:c7:69:e4:72:55:2e:ad:48:2c:86:
17:db:bb:00:29:7d:d1:7e:ab:cb:59:c9:80:da:9e:
33:03:f6:6f:1c:49:60:ca:6b:ea:d8:1a:ad:78:8b:
d0:30:ec:02:24:1c:22:95:fe:98:40:9a:d3:b7:96:
46:2f:f1:14:af:47:fc:ee:74:72:12:a7:bc:7e:48:
71:9e:9e:9d:1a:c9:e6:e1:78:ee:a6:06:1e:55:37:
2f:1f:64:0d:73:6a:e5:d2:a2:07:5e:73:b0:75:c9:
a4:0c:a8:f9:af:fa:ae:8b:40:8a:00:29:1f:a6:51:
b0:cb:44:1f:8b:93:61:ca:8a:91:76:59:54:65:f1:
93:8f:f5:66:88:41:f5:bd:81:74:56:7f:54:a6:ad:
3c:96:de:fa:8f:cc:cf:85:21:9a:1b:16:51:b8:0d:
18:55:c8:22:90:19:95:a1:6f:27:a8:0b:ee:e8:71:
f9:56:82:08:fd:11:b6:ae:d5:d6:ad:01:cf:53:4f:
33:4e:23:d3:50:dd:b5:fe:56:a4:30:9d:1b:0d:6f:
dc:f6:b7:10:e8:51:0e:b9:41:48:47:2b:1d:99:09:
36:ac:27:fa:b1:b5:c6:ef:26:5c:4b:93:6b:15:4c:
8f:6c:b5:19:9d:be:bb:84:de:ac:fe:7c:cf:20:b9:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6A:FC:7C:E3:99:97:E4:38:1D:53:92:CF:12:7C:5F:04:E1:9E:DD
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:4a:f5:ff:17:e8:6b:78:36:d7:c8:d7:c4:ab:7f:08:a2:
2b:70:96:5e:87:95:3a:ee:a3:68:45:59:47:7b:ce:6e:8b:dd:
96:5c:5c:60:da:4a:c7:b8:1d:a8:c9:b2:2e:18:25:c1:81:cd:
ca:ff:5d:5a:87:5e:db:43:72:4e:59:e7:0f:61:4e:35:4c:2e:
96:5d:a8:4e:ba:5e:82:07:e2:82:2a:0f:2e:c4:3e:cc:bc:7a:
3c:ce:c6:34:08:c6:29:e6:75:48:f0:1b:f8:28:ec:cc:9e:82:
9b:ad:0f:47:5a:27:17:71:bf:80:a6:48:f9:07:4e:d1:54:ab:
7c:f4:60:64:cc:62:ef:14:7f:14:4b:59:a3:00:81:7c:c5:33:
1e:00:80:f5:3e:01:71:9d:4e:9c:c5:f5:36:88:9c:22:86:ad:
ca:b3:bc:fb:ce:fa:c1:1a:11:10:4d:93:ae:50:cb:e0:5f:b8:
b3:61:06:28:ef:fa:2d:19:2c:08:73:ff:25:96:59:46:ae:55:
11:73:f4:73:0b:af:d2:aa:ec:45:d7:55:b4:63:69:7a:4a:2d:
87:f7:8a:dc:ea:da:ee:9b:d3:c7:dc:62:22:62:ba:93:7d:d0:
0a:f0:d0:7e:4a:47:39:0b:33:13:55:91:93:03:ac:98:70:b3:
f4:67:bf:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTgnxMFDc8BBEZ63m5la+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTkwZDY2ZDJkZGViNjQ2YTYxNDA2OTEyZmZkZGZhMTRl
Mzk5MTAwHhcNMjYwMzI2MDQwMTM2WhcNMjYwMzI3MDQwMTM2WjAzMTEwLwYDVQQD
EyhjZjZhZmM3Y2UzOTk5N2U0MzgxZDUzOTJjZjEyN2M1ZjA0ZTE5ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTC6Jsdp5HJVLq1ILIYX27sAKX3R
fqvLWcmA2p4zA/ZvHElgymvq2BqteIvQMOwCJBwilf6YQJrTt5ZGL/EUr0f87nRy
Eqe8fkhxnp6dGsnm4XjupgYeVTcvH2QNc2rl0qIHXnOwdcmkDKj5r/qui0CKACkf
plGwy0Qfi5NhyoqRdllUZfGTj/VmiEH1vYF0Vn9Upq08lt76j8zPhSGaGxZRuA0Y
VcgikBmVoW8nqAvu6HH5VoII/RG2rtXWrQHPU08zTiPTUN21/lakMJ0bDW/c9rcQ
6FEOuUFIRysdmQk2rCf6sbXG7yZcS5NrFUyPbLUZnb67hN6s/nzPILmn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9q/HzjmZfkOB1Tks8SfF8E4Z7dMB8GA1UdIwQY
MBaAFJupDWbS3etkamFAaRL/3foU45kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAt
ODlmYjhmZTY5NjMzLzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAtODlmYjhmZTY5NjMz
LzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVxK9f8X
6Gt4NtfI18SrfwiiK3CWXoeVOu6jaEVZR3vObovdllxcYNpKx7gdqMmyLhglwYHN
yv9dWode20NyTlnnD2FONUwull2oTrpeggfigioPLsQ+zLx6PM7GNAjGKeZ1SPAb
+CjszJ6Cm60PR1onF3G/gKZI+QdO0VSrfPRgZMxi7xR/FEtZowCBfMUzHgCA9T4B
cZ1OnMX1NoicIoatyrO8+876wRoREE2TrlDL4F+4s2EGKO/6LRksCHP/JZZZRq5V
EXP0cwuv0qrsRddVtGNpekoth/eK3Ora7pvTx9xiImK6k33QCvDQfkpHOQszE1WR
kwOsmHCz9Ge/8A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:41 2026 by rpki-client