Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: 7Oc4LTpsmXhxkR19vRtF1fvItWOvN/rTiCasLcesjUQ=
Subject key identifier: B5:D8:5A:51:DD:B9:78:4A:C7:DB:EA:06:DD:B2:BF:B2:5A:6B:9D:9F
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019E1CEBA952A25CA4F198653D60F2626CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0CF1
Signing time: Tue 12 May 2026 16:01:06 +0000
Manifest this update: Tue 12 May 2026 16:01:06 +0000
Manifest next update: Wed 13 May 2026 16:01:06 +0000
Files and hashes: 1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: lb5l6IPMTcuJqU+/dn1/IHDudIPZbI2sjV2VRv6XcZk=)
2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:a9:52:a2:5c:a4:f1:98:65:3d:60:f2:62:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: May 12 16:01:06 2026 GMT
Not After : May 13 16:01:06 2026 GMT
Subject: CN=b5d85a51ddb9784ac7dbea06ddb2bfb25a6b9d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:e7:b3:9f:ae:95:7d:73:38:a0:28:f1:65:
5c:5f:6c:01:cd:91:7d:a6:52:f2:55:4e:87:81:48:
c3:af:93:51:be:e0:8f:84:b5:9d:7d:5b:af:09:8f:
23:c7:96:2e:b3:5e:77:d5:b7:08:2f:9a:a4:23:84:
72:00:42:f5:6f:86:59:fc:b1:61:86:9c:d7:8d:97:
c9:47:df:10:4b:00:13:2f:48:f4:ff:1d:70:07:e7:
93:0f:c4:1d:fc:4d:6c:32:bb:57:d6:99:08:54:f8:
ac:36:0c:ee:ad:0c:1e:2c:e9:dc:1f:3d:53:0c:b1:
5f:2f:93:d4:49:a3:8c:64:52:30:cd:e0:58:8c:7d:
e7:62:95:93:cb:97:b2:83:14:b5:8e:30:22:23:3e:
3f:4b:a7:2c:85:ed:07:99:f2:9e:f5:b4:28:9d:b2:
58:91:35:a1:4e:b5:a8:8f:58:4e:75:a4:2c:87:f2:
f4:a8:e3:c1:34:4b:fd:54:23:4e:8f:ee:54:de:e8:
b2:37:e5:f6:63:bd:18:10:ac:70:eb:31:f3:2e:d0:
69:42:0c:dd:2f:dd:7c:51:cd:31:b6:70:78:f4:23:
37:7d:1d:c5:57:2a:02:6d:80:f9:35:ec:d3:ef:fb:
6e:05:fe:00:aa:be:52:e5:c7:ab:d6:35:51:ad:10:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:5A:51:DD:B9:78:4A:C7:DB:EA:06:DD:B2:BF:B2:5A:6B:9D:9F
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:12:83:32:b8:e7:c1:8b:8f:7a:d1:1f:98:50:af:6c:8b:
00:42:14:36:6b:28:cf:e5:c4:92:c8:04:f9:f3:f2:85:76:8a:
a2:d0:2f:b7:1f:cb:02:da:cf:60:ec:18:74:32:89:c5:b1:12:
50:c4:24:c4:26:00:52:62:8a:6e:6e:9b:f9:ff:a8:46:84:c5:
17:b8:4d:70:64:42:53:77:95:a4:36:08:34:cb:c5:9c:f8:30:
0f:95:e9:48:48:47:89:a8:a2:0c:2c:49:23:ac:f3:43:d7:c3:
12:17:57:f4:98:25:56:b6:4b:97:0a:69:ee:87:0c:1e:99:85:
0e:2d:40:73:3e:a1:14:fe:bf:cc:94:41:5e:23:03:e5:16:c6:
73:cc:40:0a:b1:55:c3:41:31:7c:fb:c2:f7:42:c9:73:3c:c2:
51:f5:df:b8:e2:dc:23:70:1c:28:e9:47:8e:4f:46:3a:29:80:
3d:00:bc:7c:d3:a3:d3:37:3e:62:2a:6e:4e:7f:ad:b0:48:35:
87:a0:9c:6e:2d:e7:59:cf:18:9f:48:2c:2b:11:c7:fd:93:60:
36:85:2a:10:fa:ce:df:0e:10:75:6b:25:41:0f:71:7f:30:01:
5b:b1:c1:a6:0e:43:df:4d:48:cf:d2:79:70:7b:1c:f6:30:55:
46:ac:38:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66lSolyk8ZhlPWDyYmzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm
OGZkY2YwHhcNMjYwNTEyMTYwMTA2WhcNMjYwNTEzMTYwMTA2WjAzMTEwLwYDVQQD
EyhiNWQ4NWE1MWRkYjk3ODRhYzdkYmVhMDZkZGIyYmZiMjVhNmI5ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG3ns5+ulX1zOKAo8WVcX2wBzZF9
plLyVU6HgUjDr5NRvuCPhLWdfVuvCY8jx5Yus1531bcIL5qkI4RyAEL1b4ZZ/LFh
hpzXjZfJR98QSwATL0j0/x1wB+eTD8Qd/E1sMrtX1pkIVPisNgzurQweLOncHz1T
DLFfL5PUSaOMZFIwzeBYjH3nYpWTy5eygxS1jjAiIz4/S6cshe0HmfKe9bQonbJY
kTWhTrWoj1hOdaQsh/L0qOPBNEv9VCNOj+5U3uiyN+X2Y70YEKxw6zHzLtBpQgzd
L918Uc0xtnB49CM3fR3FVyoCbYD5NezT7/tuBf4Aqr5S5cer1jVRrRBqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXYWlHduXhKx9vqBt2yv7Jaa52fMB8GA1UdIwQY
MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt
NzEwZWY0NzczMmIwLzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw
LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEsSgzK4
58GLj3rRH5hQr2yLAEIUNmsoz+XEksgE+fPyhXaKotAvtx/LAtrPYOwYdDKJxbES
UMQkxCYAUmKKbm6b+f+oRoTFF7hNcGRCU3eVpDYINMvFnPgwD5XpSEhHiaiiDCxJ
I6zzQ9fDEhdX9JglVrZLlwpp7ocMHpmFDi1Acz6hFP6/zJRBXiMD5RbGc8xACrFV
w0ExfPvC90LJczzCUfXfuOLcI3AcKOlHjk9GOimAPQC8fNOj0zc+YipuTn+tsEg1
h6Ccbi3nWc8Yn0gsKxHH/ZNgNoUqEPrO3w4QdWslQQ9xfzABW7HBpg5D301Iz9J5
cHsc9jBVRqw4/A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:31:25 2026 by rpki-client