Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File: 6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier: gSQ8q7XvvUvWoxi27/pbfstYSevVyTk5hZJa3QIxrpE=
Subject key identifier: D0:C6:12:29:0C:95:FE:35:BC:EB:5C:26:F7:0F:16:7A:A7:17:4B:5D
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer: /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial: 019D2929A7D830F0BCD5B51B5B3D496E3A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number: 0BA1
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: wqTe+/sm03HC7pSUmKjDlXzfpaKsVW5moz9VBCy1g7w=)
2: H6-FSC2W-7MZwFLducWzxTiTk1Q.roa (hash: M01qYjr1lkeGo2Zh4TnE75ep6vS7RdnFiFA27dCWb7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a7:d8:30:f0:bc:d5:b5:1b:5b:3d:49:6e:3a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=d0c612290c95fe35bceb5c26f70f167aa7174b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:87:cd:3a:77:c8:dc:c0:ce:48:bd:b7:25:
a8:b9:c6:ee:77:df:07:e5:c8:42:ac:07:74:2e:8d:
97:85:20:ac:e6:25:c8:17:b6:9b:2a:fc:03:d2:c6:
ac:97:00:6d:43:03:57:42:fc:0e:a0:d1:df:3d:78:
03:9c:06:a5:fd:79:af:7a:c6:75:57:f4:43:d8:f8:
3c:c1:69:11:03:5c:ae:b1:2d:80:2a:ad:e9:a0:76:
8f:e9:e8:8f:62:fe:c1:f8:ea:62:80:df:ff:6c:84:
7b:9a:d6:3f:48:fe:72:55:73:e3:e6:c9:1c:4f:28:
9f:54:a8:c9:53:73:d8:68:15:c3:d0:db:30:94:bc:
c8:00:11:76:0c:3f:ee:11:47:fa:47:6e:2b:51:74:
88:d8:89:9b:5f:09:6d:64:d0:29:98:c1:f7:fc:61:
22:16:4e:57:77:e4:31:26:1c:bf:91:90:58:67:69:
45:68:9f:42:3e:b6:97:27:32:06:e7:19:df:78:2f:
10:ec:ab:ff:61:ba:e8:22:d3:20:50:0e:70:80:d8:
61:a8:57:9d:52:f1:5f:af:c0:3e:ec:a4:08:5a:df:
bb:5d:d6:ca:33:46:e0:81:27:ab:5d:9a:68:27:9f:
f8:a7:91:ed:a5:69:fa:32:8f:1d:01:d8:6e:f0:24:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:12:29:0C:95:FE:35:BC:EB:5C:26:F7:0F:16:7A:A7:17:4B:5D
X509v3 Authority Key Identifier:
keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6f:23:74:16:75:d8:22:51:08:1d:3e:43:c9:70:b3:60:6b:
1d:fb:12:76:37:fd:9d:bf:82:dd:cf:e5:da:32:3e:dc:1e:09:
b0:7c:46:a9:b1:1d:8a:2c:21:20:19:f2:92:9d:04:79:69:91:
72:94:ff:86:07:02:e2:2d:2d:99:71:29:16:cd:8d:ce:36:10:
52:db:a3:6b:a2:25:22:f0:1e:f5:22:ca:42:26:c1:ef:b5:16:
b8:cb:5c:a4:f4:c8:01:8a:76:db:81:c2:32:03:01:6b:38:ca:
65:db:13:bc:9b:01:3b:00:12:e6:e4:8c:76:93:c5:7d:66:c2:
b5:0a:36:c0:df:25:f8:74:97:6d:d2:50:20:cf:ae:c9:b8:46:
27:00:19:09:50:60:9c:d3:e6:f1:7f:15:e3:af:6e:3b:5a:91:
9c:5b:1b:b1:f8:7b:fc:1d:e2:9a:21:fb:b4:60:b9:ed:4c:d5:
7b:6e:bd:5d:50:7e:87:fc:89:f4:c2:2a:b8:ca:84:6c:d7:7f:
9b:4a:8e:f2:1c:43:52:5e:f3:16:27:c0:7a:5c:06:f4:4e:c5:
3b:20:73:5b:35:3a:30:05:66:a8:a9:00:4d:8c:a2:5f:c0:8a:
c1:41:3b:f5:6d:9f:9d:3f:48:f0:b0:79:70:ee:36:f6:51:8e:
65:4e:8c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKafYMPC81bUbWz1Jbjp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGE1MmRkNmYzY2RlYjQ3ODBiYjI5OThmNTAxNjYwY2M5
Yjg4ZmYwHhcNMjYwMzI2MDgwMTI4WhcNMjYwMzI3MDgwMTI4WjAzMTEwLwYDVQQD
EyhkMGM2MTIyOTBjOTVmZTM1YmNlYjVjMjZmNzBmMTY3YWE3MTc0YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPOHzTp3yNzAzki9tyWoucbud98H
5chCrAd0Lo2XhSCs5iXIF7abKvwD0saslwBtQwNXQvwOoNHfPXgDnAal/XmvesZ1
V/RD2Pg8wWkRA1yusS2AKq3poHaP6eiPYv7B+OpigN//bIR7mtY/SP5yVXPj5skc
TyifVKjJU3PYaBXD0NswlLzIABF2DD/uEUf6R24rUXSI2ImbXwltZNApmMH3/GEi
Fk5Xd+QxJhy/kZBYZ2lFaJ9CPraXJzIG5xnfeC8Q7Kv/YbroItMgUA5wgNhhqFed
UvFfr8A+7KQIWt+7XdbKM0bggSerXZpoJ5/4p5HtpWn6Mo8dAdhu8CQtlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDGEikMlf41vOtcJvcPFnqnF0tdMB8GA1UdIwQY
MBaAFOhKUt1vPN60eAuymY9QFmDMm4j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYt
YjI2OWY4OTVlN2Y3LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYtYjI2OWY4OTVlN2Y3
LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG8jdBZ1
2CJRCB0+Q8lws2BrHfsSdjf9nb+C3c/l2jI+3B4JsHxGqbEdiiwhIBnykp0EeWmR
cpT/hgcC4i0tmXEpFs2NzjYQUtuja6IlIvAe9SLKQibB77UWuMtcpPTIAYp224HC
MgMBazjKZdsTvJsBOwAS5uSMdpPFfWbCtQo2wN8l+HSXbdJQIM+uybhGJwAZCVBg
nNPm8X8V469uO1qRnFsbsfh7/B3imiH7tGC57UzVe269XVB+h/yJ9MIquMqEbNd/
m0qO8hxDUl7zFifAelwG9E7FOyBzWzU6MAVmqKkATYyiX8CKwUE79W2fnT9I8LB5
cO429lGOZU6MKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:34 2026 by rpki-client