Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: qiJGuCGMx5TfXhsqvHOCBmkZsvhnE3ABZJ1ONv5Ooms=
Subject key identifier: 04:58:1C:7D:27:4E:CC:34:3D:B7:A1:17:BF:74:2E:2A:EF:87:17:4B
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019D265F645BD27023939E09D3A4F0CA6097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 18A4
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: 1-wPMlW3QZMEwXIavR2Z5jC4eg3k.roa (hash: NkpNm8Hi0eM4z4zMLpTQA7y21YX/UXYTQTZzRYCggcI=)
2: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: B30mUig+wb+fDn3TD+iNxftgcQU6x0HQzitb1CCF5WU=)
3: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
4: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (hash: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M=)
5: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:64:5b:d2:70:23:93:9e:09:d3:a4:f0:ca:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=04581c7d274ecc343db7a117bf742e2aef87174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:1f:6e:06:52:23:1f:73:14:e8:d5:f0:ca:
9b:a5:50:22:85:1c:2f:f9:f4:c6:a9:01:dd:16:e4:
de:fa:cc:2c:45:be:85:14:19:b8:5f:72:f9:1e:86:
8f:b8:8b:b6:81:c7:39:98:ef:c9:cf:60:96:35:46:
2d:7d:bb:e2:3f:33:18:21:58:1c:66:10:bb:00:47:
32:a3:85:10:20:09:2f:d8:10:13:be:10:e7:f8:b5:
b5:e2:a8:d8:0c:31:2c:aa:43:1b:cf:db:a3:85:a6:
da:a5:68:07:7e:67:9a:59:1b:0d:ff:08:b1:b8:68:
38:a6:71:d6:f7:db:e2:a8:27:67:76:f6:f8:4b:ac:
fc:12:5a:5a:8b:5e:b2:10:96:11:3b:da:98:73:f9:
30:61:67:9f:15:1e:89:eb:6e:0f:92:25:4f:af:40:
f2:ce:40:16:dd:5c:e3:92:13:53:4c:7c:25:89:a2:
ec:92:cc:3b:26:76:13:31:71:02:c6:9b:ea:d4:b5:
22:ca:bf:89:46:cb:0d:38:ca:a3:a6:72:68:af:39:
a5:3c:18:7a:50:18:c5:71:b8:d4:83:a1:43:a5:43:
ac:a3:37:92:98:6e:af:2b:fd:69:b4:62:f5:95:a8:
60:b4:25:28:6c:d6:c0:9a:1b:ef:f1:9d:74:2a:99:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:58:1C:7D:27:4E:CC:34:3D:B7:A1:17:BF:74:2E:2A:EF:87:17:4B
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e6:1c:9c:a8:18:2a:11:cf:a3:3c:30:82:19:86:8f:88:00:
58:98:a0:ae:3e:d4:c7:61:20:24:f5:3f:90:f9:e3:2c:85:3a:
8b:a8:0c:56:29:5b:72:8d:b9:fc:83:c2:1d:1c:5b:1f:37:ed:
98:47:62:5b:a3:4b:88:19:78:b3:f1:12:1e:df:d4:92:a8:98:
51:09:21:08:a9:95:b9:84:7b:c8:2d:22:82:b6:da:0c:11:14:
67:0e:0e:da:80:cc:e4:7d:4d:f4:e1:92:63:43:14:e5:e0:70:
dc:76:22:5f:88:0c:28:a6:4d:4b:57:cb:3f:cb:23:3a:37:2a:
01:71:61:53:12:c0:18:3d:43:2e:f4:f2:37:2f:80:94:a8:70:
cf:5c:de:8e:a1:0a:05:32:7b:6c:21:da:9b:48:10:f6:35:2f:
e5:31:0e:1e:0f:8b:5e:f1:40:39:b0:ff:80:59:38:b5:f3:c8:
ad:1e:21:a6:a8:9b:a9:5a:07:a1:ac:2a:d0:5b:96:48:3f:04:
e7:ae:ed:9f:8c:03:38:fd:44:cf:91:e1:d7:cb:ed:a3:64:c0:
42:05:51:e0:cf:15:a4:61:93:8f:ca:39:70:f3:71:8c:ef:64:
da:f0:32:67:72:2b:50:71:fa:bf:b2:eb:c0:5a:1e:4f:e9:23:
16:78:1e:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2Rb0nAjk54J06TwymCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjYwMzI1MTkwMTE4WhcNMjYwMzI2MTkwMTE4WjAzMTEwLwYDVQQD
EygwNDU4MWM3ZDI3NGVjYzM0M2RiN2ExMTdiZjc0MmUyYWVmODcxNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod8fbgZSIx9zFOjV8MqbpVAihRwv
+fTGqQHdFuTe+swsRb6FFBm4X3L5HoaPuIu2gcc5mO/Jz2CWNUYtfbviPzMYIVgc
ZhC7AEcyo4UQIAkv2BATvhDn+LW14qjYDDEsqkMbz9ujhabapWgHfmeaWRsN/wix
uGg4pnHW99viqCdndvb4S6z8Elpai16yEJYRO9qYc/kwYWefFR6J624PkiVPr0Dy
zkAW3VzjkhNTTHwliaLsksw7JnYTMXECxpvq1LUiyr+JRssNOMqjpnJorzmlPBh6
UBjFcbjUg6FDpUOsozeSmG6vK/1ptGL1lahgtCUobNbAmhvv8Z10KplyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARYHH0nTsw0PbehF790LirvhxdLMB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuYcnKgY
KhHPozwwghmGj4gAWJigrj7Ux2EgJPU/kPnjLIU6i6gMVilbco25/IPCHRxbHzft
mEdiW6NLiBl4s/ESHt/UkqiYUQkhCKmVuYR7yC0igrbaDBEUZw4O2oDM5H1N9OGS
Y0MU5eBw3HYiX4gMKKZNS1fLP8sjOjcqAXFhUxLAGD1DLvTyNy+AlKhwz1zejqEK
BTJ7bCHam0gQ9jUv5TEOHg+LXvFAObD/gFk4tfPIrR4hpqibqVoHoawq0FuWSD8E
567tn4wDOP1Ez5Hh18vto2TAQgVR4M8VpGGTj8o5cPNxjO9k2vAyZ3IrUHH6v7Lr
wFoeT+kjFngenQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:38 2026 by rpki-client