Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier: YxNdktUMPeMPkHfr9Zt0I8WP09Iwi+GqBDv/0/LXPU8=
Subject key identifier: 8C:9E:5E:F8:0D:57:C1:65:7E:2C:8C:61:09:62:07:A3:FF:78:3E:BA
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 019D2B4E4C396B62A772B72C732BBCAC19EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number: 1335
Signing time: Thu 26 Mar 2026 18:00:44 +0000
Manifest this update: Thu 26 Mar 2026 18:00:44 +0000
Manifest next update: Fri 27 Mar 2026 18:00:44 +0000
Files and hashes: 1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: rXOycxisUNoob12fQx0YQSC851GNJ5JfRdZq9StKy9o=)
2: geUvZA4ewTlG88hTMf-uSmrWhDQ.roa (hash: 2pWVSfUZrGtWyoII6+WIJ6jWbQPbI427Ph6KkMpwer0=)
3: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (hash: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:4c:39:6b:62:a7:72:b7:2c:73:2b:bc:ac:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Mar 26 18:00:44 2026 GMT
Not After : Mar 27 18:00:44 2026 GMT
Subject: CN=8c9e5ef80d57c1657e2c8c61096207a3ff783eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:e1:f3:84:27:95:2c:70:93:eb:da:f3:08:
32:5a:d6:98:a4:8b:5f:83:d0:18:58:8b:db:42:46:
ee:09:7c:68:df:51:41:20:b2:59:e5:a2:47:34:36:
81:ab:74:71:28:7d:21:8c:fc:74:a3:2f:a4:ca:61:
ee:cb:c9:36:e0:be:b3:58:07:4c:f9:13:4a:9b:97:
11:02:e6:ae:e5:a7:51:23:dd:6b:ba:e1:cb:78:3f:
dc:a8:30:da:ac:0d:d4:25:8b:84:0e:34:19:ab:ca:
fc:08:17:6e:e5:59:19:00:4e:92:22:68:e2:df:62:
09:2f:ca:99:9b:b1:9a:cc:0d:e3:b6:d0:8f:c5:9f:
15:a3:ba:39:6e:d8:2c:0c:3a:a9:56:09:99:80:d7:
20:fc:31:29:6a:67:14:7c:1c:01:3f:19:8f:93:86:
73:33:9a:0f:3f:10:9f:89:98:de:58:76:3f:c2:0a:
80:f1:16:b5:b4:d1:11:33:a3:00:9e:a9:6a:8e:32:
91:a1:f1:e5:81:c5:54:66:e6:a0:47:f8:b3:b8:f0:
ba:49:94:57:fc:3e:ff:ca:a9:be:88:c9:ca:88:b9:
68:5a:89:73:1d:eb:63:84:54:28:28:6f:32:bb:e9:
98:e5:2e:59:14:63:8b:fa:77:f8:25:22:09:08:73:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:5E:F8:0D:57:C1:65:7E:2C:8C:61:09:62:07:A3:FF:78:3E:BA
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:72:94:80:5d:db:2d:95:7c:7b:a6:6e:1d:54:b3:a1:7a:db:
fa:6f:0e:33:a5:23:78:15:41:81:4e:6c:91:76:89:46:04:fe:
c1:05:8e:3f:bc:60:e4:05:b8:c5:0e:18:35:39:7b:ee:ca:06:
d8:d0:e0:06:68:f2:76:26:81:51:05:48:66:87:90:ed:26:0b:
cb:1c:e9:7e:ae:9d:d1:32:2e:a2:13:28:00:9b:2c:6f:5d:24:
9c:c2:f5:3e:c4:55:3b:fc:b7:22:8a:98:74:c1:38:f5:1f:09:
ac:bb:16:ac:ba:9a:bb:81:f7:1f:5f:a0:1b:14:0c:24:e8:03:
40:f9:2f:b7:81:32:ed:b6:e2:14:8e:ae:ef:72:02:c2:96:1d:
e4:2a:a5:7a:f1:bc:fe:e2:e9:df:07:4e:ac:df:68:75:fa:05:
8c:ed:81:30:66:5a:93:4e:4d:90:09:c4:6a:40:92:78:5f:21:
00:e2:60:5b:c4:f6:71:fa:6e:5a:da:22:17:98:eb:16:a9:02:
32:c3:39:8b:1d:68:73:c6:ea:98:33:2f:04:c1:2a:aa:3d:65:
b7:ad:56:c1:72:16:aa:e6:74:f5:11:3f:ee:cd:26:46:67:17:
a0:9c:f9:04:1a:bc:b6:8a:30:68:6c:23:42:36:d3:b7:83:c8:
93:44:eb:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTkw5a2Kncrcscyu8rBnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTU5YjY4Y2U0MTM2OGE5OWZlMTA3OWVjNTRjMzZjOWJi
MWJmOTQwHhcNMjYwMzI2MTgwMDQ0WhcNMjYwMzI3MTgwMDQ0WjAzMTEwLwYDVQQD
Eyg4YzllNWVmODBkNTdjMTY1N2UyYzhjNjEwOTYyMDdhM2ZmNzgzZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwObh84QnlSxwk+va8wgyWtaYpItf
g9AYWIvbQkbuCXxo31FBILJZ5aJHNDaBq3RxKH0hjPx0oy+kymHuy8k24L6zWAdM
+RNKm5cRAuau5adRI91ruuHLeD/cqDDarA3UJYuEDjQZq8r8CBdu5VkZAE6SImji
32IJL8qZm7GazA3jttCPxZ8Vo7o5btgsDDqpVgmZgNcg/DEpamcUfBwBPxmPk4Zz
M5oPPxCfiZjeWHY/wgqA8Ra1tNERM6MAnqlqjjKRofHlgcVUZuagR/izuPC6SZRX
/D7/yqm+iMnKiLloWolzHetjhFQoKG8yu+mY5S5ZFGOL+nf4JSIJCHPInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyeXvgNV8FlfiyMYQliB6P/eD66MB8GA1UdIwQY
MBaAFOgVm2jOQTaKmf4QeexUw2ybsb+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt
MGYzYjZmOTY5OTBiLzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi
LzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHKUgF3b
LZV8e6ZuHVSzoXrb+m8OM6UjeBVBgU5skXaJRgT+wQWOP7xg5AW4xQ4YNTl77soG
2NDgBmjydiaBUQVIZoeQ7SYLyxzpfq6d0TIuohMoAJssb10knML1PsRVO/y3IoqY
dME49R8JrLsWrLqau4H3H1+gGxQMJOgDQPkvt4Ey7bbiFI6u73ICwpYd5CqlevG8
/uLp3wdOrN9odfoFjO2BMGZak05NkAnEakCSeF8hAOJgW8T2cfpuWtoiF5jrFqkC
MsM5ix1oc8bqmDMvBMEqqj1lt61WwXIWquZ09RE/7s0mRmcXoJz5BBq8toowaGwj
QjbTt4PIk0Trww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:23 2026 by rpki-client