Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
File: bE6tk3_29mwLFfItDUn5N243154.mft (raw, json)
Hash identifier: r+SgxBlgYvYcZ1N4QjAinpEpeSdoR8vtrJgwx7eco+I=
Subject key identifier: 0F:6D:99:80:C3:48:5B:F3:4C:93:D1:53:D6:5C:AF:39:BF:89:CC:6C
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 01A1DFBA378C7EB5E622FEC126A514608457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
Manifest number: 015C
Signing time: Sun 15 Nov 2026 15:01:25 +0000
Manifest this update: Sun 15 Nov 2026 15:01:25 +0000
Manifest next update: Mon 16 Nov 2026 15:01:25 +0000
Files and hashes: 1: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (hash: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=)
2: bE6tk3_29mwLFfItDUn5N243154.crl (hash: LoL/rLA5iKOOK1SMXV+hASZDzazDD83+TCzK2bP/XwA=)
3: vTlhAenRPSZUNMMxyWS0DXwQ5N8.asa (hash: PklvSNrA+pjY5wXK2t56S6nxPO2i6UZMi9BUxQ6a3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:37:8c:7e:b5:e6:22:fe:c1:26:a5:14:60:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Nov 15 15:01:25 2026 GMT
Not After : Nov 16 15:01:25 2026 GMT
Subject: CN=0f6d9980c3485bf34c93d153d65caf39bf89cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:f9:fc:99:b0:51:f0:21:25:7f:c3:2c:8c:
d4:ad:61:4d:bd:6d:d1:ea:fb:2d:da:1c:6d:76:3c:
13:61:03:12:1b:15:5b:ba:52:92:a7:b6:44:0f:ba:
96:f5:61:86:67:d7:70:6c:fa:97:82:8b:30:9d:f5:
ae:89:fa:f4:84:82:fe:02:e1:fb:c5:d3:9a:dc:31:
e7:50:06:02:14:bd:6c:ae:2e:12:a7:16:c5:d2:bc:
ac:cf:1b:a7:ee:a3:f3:63:33:e4:e5:4d:ad:6e:ca:
0c:90:69:7a:d2:4a:14:dc:eb:17:db:1d:3e:15:d7:
0e:2c:8f:81:2b:f1:3a:0a:72:73:1e:d5:9c:38:b8:
5b:17:cc:24:e3:92:8c:80:8e:e7:6c:2e:f2:07:bb:
35:9f:9f:eb:ce:d4:dd:fe:db:36:5d:1e:bc:63:8c:
6d:20:00:ef:77:0b:62:a1:29:a2:bc:34:0a:dd:2b:
d0:ae:74:15:af:49:3e:75:d4:63:3a:7a:e8:0b:24:
79:5a:ad:32:13:37:7b:0e:f8:24:0b:46:bb:fa:2c:
eb:76:3e:0a:47:51:20:5f:5f:f7:a6:69:04:99:63:
a8:54:0d:c1:dd:d4:31:ff:fe:4c:d8:3e:f9:e3:e6:
1d:d4:cd:37:a4:16:69:1f:44:d1:c0:a4:1e:df:d4:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:99:80:C3:48:5B:F3:4C:93:D1:53:D6:5C:AF:39:BF:89:CC:6C
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:c4:c3:1c:9a:53:9e:92:4d:05:44:52:7d:49:d0:4f:f9:
97:ab:64:6c:33:89:10:06:5b:31:5f:92:2f:b6:2e:71:70:c3:
e8:84:1a:21:44:3f:d3:63:8a:56:95:d4:d7:2f:3a:f3:dc:01:
c9:b5:cf:a7:32:e1:3d:f8:89:17:7f:db:33:3e:ce:7e:a9:c8:
26:b4:0e:25:a2:4c:d4:07:e0:d1:4e:30:9e:f6:74:dc:a6:2f:
91:53:b1:e9:90:9e:23:d4:0e:7d:fc:4a:b6:5d:0f:39:3a:a4:
53:e1:21:94:63:7b:b5:da:0e:56:31:82:c9:7f:df:56:df:79:
42:c4:23:91:5d:4b:ac:c0:a0:74:1d:80:6d:a0:5c:2e:10:b7:
e2:ff:00:8d:4e:16:55:87:81:6a:2d:5f:d6:58:a3:51:49:9c:
ae:4c:10:d8:eb:90:a4:34:56:54:de:d4:8b:32:63:31:b4:4b:
c2:b6:25:30:83:5d:b4:52:69:35:5b:ea:09:26:66:90:9e:5c:
73:09:37:0b:88:9c:86:ad:9d:53:a2:02:e3:0d:f8:40:d0:e2:
4f:3d:41:ac:d7:a0:6d:54:8f:af:3a:01:61:df:12:7c:7e:5f:
41:61:6a:bc:ef:cb:4c:2d:65:65:7c:b9:30:a2:d0:83:82:fa:
44:ea:d1:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfujeMfrXmIv7BJqUUYIRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGVhZDkzN2ZmNmY2NmMwYjE1ZjIyZDBkNDlmOTM3NmUz
N2Q3OWUwHhcNMjYxMTE1MTUwMTI1WhcNMjYxMTE2MTUwMTI1WjAzMTEwLwYDVQQD
EygwZjZkOTk4MGMzNDg1YmYzNGM5M2QxNTNkNjVjYWYzOWJmODljYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfr5/JmwUfAhJX/DLIzUrWFNvW3R
6vst2hxtdjwTYQMSGxVbulKSp7ZED7qW9WGGZ9dwbPqXgoswnfWuifr0hIL+AuH7
xdOa3DHnUAYCFL1sri4SpxbF0ryszxun7qPzYzPk5U2tbsoMkGl60koU3OsX2x0+
FdcOLI+BK/E6CnJzHtWcOLhbF8wk45KMgI7nbC7yB7s1n5/rztTd/ts2XR68Y4xt
IADvdwtioSmivDQK3SvQrnQVr0k+ddRjOnroCyR5Wq0yEzd7DvgkC0a7+izrdj4K
R1EgX1/3pmkEmWOoVA3B3dQx//5M2D754+Yd1M03pBZpH0TRwKQe39QUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9tmYDDSFvzTJPRU9Zcrzm/icxsMB8GA1UdIwQY
MBaAFGxOrZN/9vZsCxXyLQ1J+TduN9eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkU2dGszXzI5bXdMRmZJdERVbjVOMjQzMTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMWYwNmQtYWVlMi00MDU3LWI4NzUt
MTUzYTVmM2ZjMzNiLzEvYkU2dGszXzI5bXdMRmZJdERVbjVOMjQzMTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hMWYwNmQtYWVlMi00MDU3LWI4NzUtMTUzYTVmM2ZjMzNi
LzEvYkU2dGszXzI5bXdMRmZJdERVbjVOMjQzMTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt7Ewxya
U56STQVEUn1J0E/5l6tkbDOJEAZbMV+SL7YucXDD6IQaIUQ/02OKVpXU1y8689wB
ybXPpzLhPfiJF3/bMz7OfqnIJrQOJaJM1Afg0U4wnvZ03KYvkVOx6ZCeI9QOffxK
tl0POTqkU+EhlGN7tdoOVjGCyX/fVt95QsQjkV1LrMCgdB2AbaBcLhC34v8AjU4W
VYeBai1f1lijUUmcrkwQ2OuQpDRWVN7UizJjMbRLwrYlMINdtFJpNVvqCSZmkJ5c
cwk3C4ichq2dU6IC4w34QNDiTz1BrNegbVSPrzoBYd8SfH5fQWFqvO/LTC1lZXy5
MKLQg4L6ROrRxw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:17:55 2026 by rpki-client