Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: GOq9EqidWFCbPu3tWZN2WGNdmYZhBatWXD9mWrs8O64=
Subject key identifier: 8F:04:38:70:03:5E:E8:E0:E0:BB:4A:4B:AF:06:42:55:27:5A:6D:82
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 019D26CD2C384DB5C6277259137AB72DB833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0CC1
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: K+9m6JkWFpLKfHrERykcDV4NMPD3GAWPkbqXVw94i1M=)
2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2c:38:4d:b5:c6:27:72:59:13:7a:b7:2d:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=8f043870035ee8e0e0bb4a4baf064255275a6d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:e6:d6:f9:a2:04:8b:97:3f:c1:32:60:f5:
0c:e3:13:70:21:80:e1:5c:9d:7c:09:8d:6e:93:69:
7f:f1:cb:f3:58:ff:5b:f4:e0:9b:60:c9:dd:00:f8:
4c:80:0c:fc:19:6c:ff:b9:5c:06:51:d7:9b:7f:cd:
7f:c5:78:b7:cc:72:77:59:cc:31:7c:4d:f4:2b:0a:
9f:83:d1:ec:a2:b3:68:7b:0f:24:80:50:e3:5b:f0:
33:fa:d7:91:28:6d:b9:21:9e:af:71:36:18:7c:00:
20:8a:de:46:2c:dd:de:21:6c:5e:6b:63:8f:01:2d:
42:2f:82:eb:5a:4c:33:d4:b0:7f:47:cf:96:6f:16:
f1:34:76:bf:84:ce:7f:a9:3d:b9:95:0d:de:90:f3:
6d:aa:92:a3:1a:33:b0:45:ed:95:1c:02:b3:9c:5e:
57:27:84:a0:ad:5b:49:17:32:42:0a:8f:c0:b6:10:
d2:b0:e7:73:47:92:94:10:27:28:03:72:ed:d3:60:
e1:f5:2c:95:32:96:f0:d5:ca:5c:b9:86:33:55:b6:
50:1e:f1:ee:8e:7b:5f:8a:6a:7f:8c:d2:84:25:a5:
5b:3d:1c:eb:c6:4f:fa:a9:8b:3b:af:be:86:97:60:
cc:24:38:41:99:fd:b4:77:7e:01:60:d6:fc:4c:a0:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:38:70:03:5E:E8:E0:E0:BB:4A:4B:AF:06:42:55:27:5A:6D:82
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c4:80:14:8a:9e:45:93:37:9d:2f:fe:8d:bf:a7:97:3c:f9:
3c:17:f3:5d:a6:cc:03:a4:02:52:93:1e:d7:59:ad:f0:5c:c9:
27:ed:f8:cd:26:52:7d:21:f6:dd:4a:52:b5:58:fe:dc:a9:d6:
c0:9f:b7:e0:a6:6b:e5:45:c9:c4:47:2d:a0:17:b6:0e:8e:30:
eb:ba:30:3e:af:47:80:4c:2e:19:7b:f5:5c:cb:69:a6:29:f8:
b2:b9:ad:a2:9c:ed:ff:fe:e3:bd:af:c7:86:3a:e9:bd:d1:5d:
08:32:48:ed:73:42:46:9a:c7:ab:f9:36:a6:3f:1b:50:b8:2b:
8a:8f:88:e7:50:19:39:9b:09:a2:35:db:7e:67:61:17:af:f3:
b8:5b:f1:ab:af:2e:9f:a1:43:2c:0b:e0:b4:25:cb:a2:5a:c6:
fd:80:01:12:e5:ef:1b:a0:4f:72:61:9d:d6:4d:57:f2:73:b4:
c1:5d:a9:f2:a0:3c:62:9f:4d:03:d7:4e:9d:38:a4:78:25:ab:
cb:74:2f:32:d9:69:9e:b9:e1:a8:a9:92:b3:08:4b:ae:47:d7:
65:02:2e:b9:a5:7b:db:29:36:4d:ee:55:96:42:0a:c9:cd:a9:
e0:32:ce:22:54:89:2b:21:05:35:48:91:b4:86:2a:cc:46:bd:
38:82:b7:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSw4TbXGJ3JZE3q3LbgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzM0NjlkMWU3MzVhZTRkNjA4MzdiNzcwOWMzM2ZmNDI3
YzhlODQwHhcNMjYwMzI1MjEwMTEzWhcNMjYwMzI2MjEwMTEzWjAzMTEwLwYDVQQD
Eyg4ZjA0Mzg3MDAzNWVlOGUwZTBiYjRhNGJhZjA2NDI1NTI3NWE2ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50Hm1vmiBIuXP8EyYPUM4xNwIYDh
XJ18CY1uk2l/8cvzWP9b9OCbYMndAPhMgAz8GWz/uVwGUdebf81/xXi3zHJ3Wcwx
fE30Kwqfg9HsorNoew8kgFDjW/Az+teRKG25IZ6vcTYYfAAgit5GLN3eIWxea2OP
AS1CL4LrWkwz1LB/R8+WbxbxNHa/hM5/qT25lQ3ekPNtqpKjGjOwRe2VHAKznF5X
J4SgrVtJFzJCCo/AthDSsOdzR5KUECcoA3Lt02Dh9SyVMpbw1cpcuYYzVbZQHvHu
jntfimp/jNKEJaVbPRzrxk/6qYs7r76Gl2DMJDhBmf20d34BYNb8TKCX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8EOHADXujg4LtKS68GQlUnWm2CMB8GA1UdIwQY
MBaAFOjDRp0ec1rk1gg3t3CcM/9CfI6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEt
ODkyNDg1MGQ5NWQ2LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEtODkyNDg1MGQ5NWQ2
LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMSAFIqe
RZM3nS/+jb+nlzz5PBfzXabMA6QCUpMe11mt8FzJJ+34zSZSfSH23UpStVj+3KnW
wJ+34KZr5UXJxEctoBe2Do4w67owPq9HgEwuGXv1XMtppin4srmtopzt//7jva/H
hjrpvdFdCDJI7XNCRprHq/k2pj8bULgrio+I51AZOZsJojXbfmdhF6/zuFvxq68u
n6FDLAvgtCXLolrG/YABEuXvG6BPcmGd1k1X8nO0wV2p8qA8Yp9NA9dOnTikeCWr
y3QvMtlpnrnhqKmSswhLrkfXZQIuuaV72yk2Te5VlkIKyc2p4DLOIlSJKyEFNUiR
tIYqzEa9OIK3Ug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:44 2026 by rpki-client