Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft (raw, json)
Hash identifier: qzrNaI0imAIfNHWvIBKGr5g/b6zXmqe32yNISV0O1ts=
Subject key identifier: 0A:6B:FD:AD:C2:51:F8:38:67:CE:FE:B6:EF:8B:CC:A9:ED:81:D1:C2
Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
Certificate issuer: /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Certificate serial: 019D2816E0652A268CCE7E5EA631CEC30785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
Manifest number: 01B1
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl (hash: idO0/2S78e6PRaKjSI3ZgfzKkB8yApbVdGwRqGmpr4E=)
2: nNA82N_hjVXNM_yczV3h8R-2MFg.roa (hash: O4Af+6D81H3k5D2s05YzXco56fg23wfzXj6Epvc/dd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e0:65:2a:26:8c:ce:7e:5e:a6:31:ce:c3:07:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=0a6bfdadc251f83867cefeb6ef8bcca9ed81d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:88:e7:3d:3e:2d:db:a6:3d:3f:2b:14:d7:
9a:a7:a2:ba:2b:b6:88:86:6a:23:3a:18:8e:42:11:
69:d6:f1:97:51:b1:d6:4f:0d:55:56:f3:1f:9f:1d:
ec:e4:85:34:63:0e:fa:32:c0:65:1a:8d:45:2a:55:
6d:39:d1:71:34:57:ab:89:81:51:8e:fd:0f:64:4b:
fc:f6:3e:2e:48:ed:57:f8:ba:41:5a:a3:72:34:27:
57:a7:a4:5c:08:02:dd:08:3e:57:7b:95:5b:d6:8f:
ad:ca:09:d8:3b:8b:3b:0b:32:02:e0:d4:e4:b1:24:
d1:89:1d:15:32:76:0b:72:11:ad:ca:bc:93:38:e9:
c9:21:c7:c8:e7:6f:20:85:5d:b3:4c:9b:b8:21:9c:
2d:3f:88:d8:62:f4:77:23:dc:5e:d1:b7:ca:10:2b:
bf:97:db:2b:94:40:45:c6:6b:ff:85:75:d4:a2:17:
ea:b7:4c:46:00:2c:73:80:61:5c:0f:78:41:65:02:
4a:75:b1:69:47:a8:af:98:33:b1:f2:0d:11:87:54:
fe:f0:4b:50:07:c3:f3:e1:fb:c2:6b:eb:94:fa:49:
b5:1d:2c:28:e8:5a:34:2b:f5:af:2f:ff:08:f5:ab:
b1:2c:4d:0b:15:99:cd:85:e6:c8:76:32:c1:15:53:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:FD:AD:C2:51:F8:38:67:CE:FE:B6:EF:8B:CC:A9:ED:81:D1:C2
X509v3 Authority Key Identifier:
keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:19:fd:8b:c0:c5:10:ef:f1:b1:c1:1a:0c:20:94:69:e5:
e9:64:cd:80:52:8e:51:f5:e8:97:dd:7f:aa:48:48:3c:ff:71:
b6:e3:31:85:f1:da:da:f0:da:a3:2c:49:b6:cb:fd:d3:8d:84:
35:23:da:50:38:fb:32:2a:68:ef:0c:54:06:72:34:98:74:35:
64:c8:68:d1:4f:1b:fe:eb:84:65:d5:c6:92:2b:e8:ea:ee:e3:
ae:dd:e0:74:9c:c0:ab:cf:3a:10:40:ef:59:a3:6d:da:03:1c:
5e:da:08:4f:51:cc:6d:3a:93:bb:fd:bc:b6:d2:e4:9a:fe:5c:
f9:c4:f6:91:cd:92:34:a7:05:2d:2a:ab:ce:55:e6:bd:e9:c2:
4f:9f:54:e6:1d:0d:68:3b:68:05:ec:78:64:af:7c:7e:0c:3e:
02:05:8f:6d:42:9a:e2:ca:44:99:ff:41:11:d1:0f:2c:42:a3:
0e:56:49:97:52:4c:0a:e5:1a:21:39:46:53:01:16:27:9c:23:
7d:ea:b0:39:68:cb:2f:ec:9f:e5:d1:3c:ab:a5:36:87:ff:4c:
14:07:68:ff:40:e5:3a:7c:ea:9c:12:98:e7:39:7d:a4:a1:80:
ca:b9:7a:52:16:36:dd:f7:2e:07:27:e8:bc:72:3e:c8:48:07:
c3:5c:31:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFuBlKiaMzn5epjHOwweFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTNmYTRiNzhlNTBmNGFmOTdiZTI4NWUyZTkxMGE1ZDFl
ZGM2MzkwHhcNMjYwMzI2MDMwMTIwWhcNMjYwMzI3MDMwMTIwWjAzMTEwLwYDVQQD
EygwYTZiZmRhZGMyNTFmODM4NjdjZWZlYjZlZjhiY2NhOWVkODFkMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlyI5z0+LdumPT8rFNeap6K6K7aI
hmojOhiOQhFp1vGXUbHWTw1VVvMfnx3s5IU0Yw76MsBlGo1FKlVtOdFxNFeriYFR
jv0PZEv89j4uSO1X+LpBWqNyNCdXp6RcCALdCD5Xe5Vb1o+tygnYO4s7CzIC4NTk
sSTRiR0VMnYLchGtyryTOOnJIcfI528ghV2zTJu4IZwtP4jYYvR3I9xe0bfKECu/
l9srlEBFxmv/hXXUohfqt0xGACxzgGFcD3hBZQJKdbFpR6ivmDOx8g0Rh1T+8EtQ
B8Pz4fvCa+uU+km1HSwo6Fo0K/WvL/8I9auxLE0LFZnNhebIdjLBFVPnNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApr/a3CUfg4Z87+tu+LzKntgdHCMB8GA1UdIwQY
MBaAFJOj+kt45Q9K+XviheLpEKXR7cY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNTJhZTEtMDlhNi00NDU4LTlkMDYt
MGI2OTA4NzM3ZDdmLzEvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNTJhZTEtMDlhNi00NDU4LTlkMDYtMGI2OTA4NzM3ZDdm
LzEvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCYZ/YvA
xRDv8bHBGgwglGnl6WTNgFKOUfXol91/qkhIPP9xtuMxhfHa2vDaoyxJtsv9042E
NSPaUDj7Mipo7wxUBnI0mHQ1ZMho0U8b/uuEZdXGkivo6u7jrt3gdJzAq886EEDv
WaNt2gMcXtoIT1HMbTqTu/28ttLkmv5c+cT2kc2SNKcFLSqrzlXmvenCT59U5h0N
aDtoBex4ZK98fgw+AgWPbUKa4spEmf9BEdEPLEKjDlZJl1JMCuUaITlGUwEWJ5wj
feqwOWjLL+yf5dE8q6U2h/9MFAdo/0DlOnzqnBKY5zl9pKGAyrl6UhY23fcuByfo
vHI+yEgHw1wxUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:25 2026 by rpki-client