Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
File: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json)
Hash identifier: rcQQTupRBrIET5VfyHliErOPjI7y9aE/DjF7LuDpAz0=
Subject key identifier: BD:38:2B:AB:FF:1B:4E:26:A6:E7:8E:7A:1B:04:5D:C4:83:34:95:1D
Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
Certificate issuer: /CN=e8a247598cc32160328417a1b10db67fdf59f10f
Certificate serial: 019D28842826D45387B7F9C27DC0AA7F1EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
Manifest number: 0163
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: l8W0zIVvaWftPwzhVZcA/DT26V7XRYWngPeNc4xUzfM=)
2: yGHbr2ivA9pRP9yvd8p4VSdt5fE.roa (hash: HjBy12YC1Gx1u2mMvJAV9cdmHNtVXZmrkIO3OMSXlIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:28:26:d4:53:87:b7:f9:c2:7d:c0:aa:7f:1e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=bd382babff1b4e26a6e78e7a1b045dc48334951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:af:2b:e0:e2:6c:97:75:2b:0a:76:a8:ce:
9e:fa:99:25:89:89:04:08:bd:de:4b:57:58:c2:a9:
c7:65:2f:36:11:b1:67:28:6c:d6:65:9e:d4:c7:79:
75:18:a4:c1:ef:04:c6:0f:45:f3:28:d3:7f:39:9b:
df:5c:9c:5f:10:86:1f:06:25:5c:56:d1:f3:77:bf:
86:34:c5:3b:36:d7:81:cf:61:0e:47:99:ed:36:ac:
74:a7:7b:51:77:04:86:ec:1c:e5:4e:49:33:6a:b6:
4b:50:60:50:ca:30:0c:4e:b5:21:cd:c2:ef:be:fa:
f4:0c:d1:bd:b8:12:13:eb:91:14:5a:7d:d4:58:2d:
a3:83:0d:ff:91:1a:23:ac:5c:1a:7e:2c:7a:63:52:
cf:95:d6:c7:53:c8:8b:fa:30:0d:6d:e3:1b:6f:ff:
4a:b5:b3:1e:69:3b:35:5a:ad:9d:eb:3a:93:12:95:
8b:17:f9:cb:f0:ea:df:16:32:73:39:8f:90:9e:3c:
b2:1c:e5:92:d6:0c:0c:24:25:59:80:83:12:d1:65:
5a:17:09:d8:3e:bf:02:c0:43:30:b3:c7:86:92:52:
e3:53:09:b7:a9:fc:8a:b5:20:ee:8a:9f:17:9f:91:
44:38:7e:1e:39:0e:db:03:17:d3:d9:b3:02:be:a3:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:2B:AB:FF:1B:4E:26:A6:E7:8E:7A:1B:04:5D:C4:83:34:95:1D
X509v3 Authority Key Identifier:
keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:aa:b7:73:f6:d7:7f:f6:de:8a:2c:52:2c:5b:3f:38:fa:3c:
3a:b5:59:c1:6f:24:68:81:ab:62:5d:25:65:3f:69:27:93:02:
3f:27:02:af:df:16:ed:eb:4a:60:7f:be:6d:0c:ca:e5:e0:dc:
6a:b8:1b:1f:85:b5:78:79:62:e2:8f:de:5e:67:a8:fc:af:25:
ab:c0:55:3a:d6:f2:41:69:b5:4d:0e:ae:0e:3b:04:1c:f7:71:
65:4b:51:12:f3:38:ee:e5:c4:c7:f6:c0:46:1a:35:95:2e:1b:
92:04:26:16:2c:81:0e:bf:e9:88:01:37:83:47:6a:fb:53:31:
0a:9d:51:c9:6a:e0:b9:f5:f4:6a:0c:2d:92:7e:74:13:ac:d3:
01:2d:40:b3:54:54:1f:41:c6:12:6c:e8:9a:33:70:ee:f5:3b:
41:2b:c7:a6:e3:30:cf:52:d7:d1:e9:52:d7:41:d0:ca:b6:31:
e1:50:26:30:59:a8:ae:37:2a:e8:75:d8:93:87:25:31:3b:77:
6b:23:aa:37:e1:1e:07:6b:12:31:50:40:8c:1c:d0:22:f7:85:
2b:27:0d:84:65:b6:a9:38:2c:f6:2a:00:0d:fc:1f:e8:4e:f4:
ba:34:6a:4b:6e:22:02:f1:2f:94:ac:1a:50:d6:08:d9:6c:7b:
99:74:cf:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohCgm1FOHt/nCfcCqfx6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTI0NzU5OGNjMzIxNjAzMjg0MTdhMWIxMGRiNjdmZGY1
OWYxMGYwHhcNMjYwMzI2MDUwMDQyWhcNMjYwMzI3MDUwMDQyWjAzMTEwLwYDVQQD
EyhiZDM4MmJhYmZmMWI0ZTI2YTZlNzhlN2ExYjA0NWRjNDgzMzQ5NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04evK+DibJd1Kwp2qM6e+pkliYkE
CL3eS1dYwqnHZS82EbFnKGzWZZ7Ux3l1GKTB7wTGD0XzKNN/OZvfXJxfEIYfBiVc
VtHzd7+GNMU7NteBz2EOR5ntNqx0p3tRdwSG7BzlTkkzarZLUGBQyjAMTrUhzcLv
vvr0DNG9uBIT65EUWn3UWC2jgw3/kRojrFwafix6Y1LPldbHU8iL+jANbeMbb/9K
tbMeaTs1Wq2d6zqTEpWLF/nL8OrfFjJzOY+QnjyyHOWS1gwMJCVZgIMS0WVaFwnY
Pr8CwEMws8eGklLjUwm3qfyKtSDuip8Xn5FEOH4eOQ7bAxfT2bMCvqNUUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL04K6v/G04mpueOehsEXcSDNJUdMB8GA1UdIwQY
MBaAFOiiR1mMwyFgMoQXobENtn/fWfEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt
ODE5NjgwZGI0MzU4LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4
LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqq3c/bX
f/beiixSLFs/OPo8OrVZwW8kaIGrYl0lZT9pJ5MCPycCr98W7etKYH++bQzK5eDc
argbH4W1eHli4o/eXmeo/K8lq8BVOtbyQWm1TQ6uDjsEHPdxZUtREvM47uXEx/bA
Rho1lS4bkgQmFiyBDr/piAE3g0dq+1MxCp1RyWrgufX0agwtkn50E6zTAS1As1RU
H0HGEmzomjNw7vU7QSvHpuMwz1LX0elS10HQyrYx4VAmMFmorjcq6HXYk4clMTt3
ayOqN+EeB2sSMVBAjBzQIveFKycNhGW2qTgs9ioADfwf6E70ujRqS24iAvEvlKwa
UNYI2Wx7mXTPFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:21 2026 by rpki-client