Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: Fnb2MBqmIgtlgAAME9j5RUl6+cdZ7QugW8Mh1K4NjcM=
Subject key identifier: BD:24:4F:43:81:67:1F:87:24:66:7A:66:7D:F0:7C:F4:89:D7:25:44
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019D28F22A6804C0D9D85A3F06BAB7A95EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0DE7
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: rahHlEyF0AgG6gHiYGtWywBsRgAWdmyMVAEdKIbF/aY=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2a:68:04:c0:d9:d8:5a:3f:06:ba:b7:a9:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=bd244f4381671f8724667a667df07cf489d72544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:96:c8:21:cd:c9:76:3d:aa:9a:09:df:7f:
d1:24:b8:5e:90:e4:f9:fa:83:93:6a:96:f9:73:1b:
b9:b4:e0:82:01:78:d9:e2:80:20:c5:2e:33:15:e8:
1e:0d:d8:38:e1:7b:85:86:15:2d:5e:3a:7d:1a:24:
fd:37:40:c3:44:d3:6b:bf:d3:71:13:d0:b3:1b:8a:
86:de:bb:2a:5c:fa:6c:dc:00:05:e9:49:2e:7c:8a:
d4:9e:7a:d4:77:77:2a:cc:da:e4:ed:31:9d:46:dc:
d2:6b:f7:10:af:82:75:f0:9d:71:b8:d6:b8:27:06:
3f:de:fb:51:aa:6d:b8:c2:5f:80:bf:b6:ee:e5:ef:
d9:5f:85:52:f3:99:d4:6f:77:7f:05:b6:b0:aa:e5:
23:b8:31:5f:6d:88:3a:e4:55:ff:aa:54:3f:a9:a0:
86:ac:14:5e:5a:ae:2c:e4:a5:60:25:53:d9:4d:ac:
29:e8:e5:44:a9:fe:a4:5c:0c:b7:f0:5f:db:00:a5:
18:7f:75:94:3b:a5:62:f4:35:5c:12:2a:ce:35:9c:
22:23:24:3e:ea:b5:d0:7a:ae:f5:5d:90:3b:04:df:
c7:d1:b8:7a:8d:eb:44:06:07:cd:fe:78:30:11:74:
14:ce:47:0c:85:6e:6d:a5:0a:03:0e:b4:8e:53:09:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:4F:43:81:67:1F:87:24:66:7A:66:7D:F0:7C:F4:89:D7:25:44
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f9:5a:bb:68:ce:5f:f4:2c:20:b2:d5:08:48:9e:6f:86:81:
8b:51:d1:16:62:f3:c9:c2:4c:ac:97:a5:9f:51:31:66:65:65:
a6:7e:4a:0a:a3:1d:46:af:31:1d:15:a7:cd:6b:35:d5:9b:cf:
04:13:e1:74:1c:90:03:4f:69:8f:48:64:19:ba:f0:9f:1c:bd:
ee:32:8e:cf:45:69:18:b4:91:f6:a3:72:8f:4e:b6:aa:3c:7e:
1a:26:80:90:27:8d:4c:e2:52:45:e8:de:ed:c9:4a:d0:dd:ef:
c6:bd:51:eb:52:b0:6c:50:68:4f:59:44:d4:3c:18:57:72:16:
1b:97:e3:1b:c0:fe:d5:24:3b:e9:98:ad:7f:ae:96:ef:81:09:
1d:e9:5c:4b:c7:fd:2f:ac:24:0f:81:2a:97:25:10:93:d3:7e:
2a:68:bd:0d:20:98:f5:de:78:ec:74:0b:c6:25:4a:27:aa:29:
94:8d:3a:08:5e:d9:5c:4a:fa:57:ca:87:c4:e8:62:2e:c9:d0:
22:cb:ff:db:31:e5:42:ff:1d:ff:44:b0:92:cf:6c:dc:11:e4:
72:2e:f4:8a:0d:7a:85:55:b3:7d:cf:fd:6d:1a:c4:2b:b3:b7:
a2:6a:4a:d0:2f:5c:58:46:1b:42:c8:2d:82:9b:f2:80:e9:43:
ec:a4:fb:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8ipoBMDZ2Fo/Brq3qV7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh
YzZlMDcwHhcNMjYwMzI2MDcwMDUyWhcNMjYwMzI3MDcwMDUyWjAzMTEwLwYDVQQD
EyhiZDI0NGY0MzgxNjcxZjg3MjQ2NjdhNjY3ZGYwN2NmNDg5ZDcyNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUWWyCHNyXY9qpoJ33/RJLhekOT5
+oOTapb5cxu5tOCCAXjZ4oAgxS4zFegeDdg44XuFhhUtXjp9GiT9N0DDRNNrv9Nx
E9CzG4qG3rsqXPps3AAF6UkufIrUnnrUd3cqzNrk7TGdRtzSa/cQr4J18J1xuNa4
JwY/3vtRqm24wl+Av7bu5e/ZX4VS85nUb3d/BbawquUjuDFfbYg65FX/qlQ/qaCG
rBReWq4s5KVgJVPZTawp6OVEqf6kXAy38F/bAKUYf3WUO6Vi9DVcEirONZwiIyQ+
6rXQeq71XZA7BN/H0bh6jetEBgfN/ngwEXQUzkcMhW5tpQoDDrSOUwnocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0kT0OBZx+HJGZ6Zn3wfPSJ1yVEMB8GA1UdIwQY
MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt
NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1
LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/lau2jO
X/QsILLVCEieb4aBi1HRFmLzycJMrJeln1ExZmVlpn5KCqMdRq8xHRWnzWs11ZvP
BBPhdByQA09pj0hkGbrwnxy97jKOz0VpGLSR9qNyj062qjx+GiaAkCeNTOJSReje
7clK0N3vxr1R61KwbFBoT1lE1DwYV3IWG5fjG8D+1SQ76Zitf66W74EJHelcS8f9
L6wkD4EqlyUQk9N+Kmi9DSCY9d547HQLxiVKJ6oplI06CF7ZXEr6V8qHxOhiLsnQ
Isv/2zHlQv8d/0Swks9s3BHkci70ig16hVWzfc/9bRrEK7O3ompK0C9cWEYbQsgt
gpvygOlD7KT7zQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:19 2026 by rpki-client