Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: OJRH0JgV1Cm1iLeoEOhZX1Z2lYh4QfwY8IibDNpDpCE=
Subject key identifier: AF:45:BA:D8:B4:60:8A:54:CA:3E:F0:C2:A7:0D:96:F0:78:D0:89:0A
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 019D254CC7ABBA0434A08A2C91F91D076F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0B43
Signing time: Wed 25 Mar 2026 14:01:21 +0000
Manifest this update: Wed 25 Mar 2026 14:01:21 +0000
Manifest next update: Thu 26 Mar 2026 14:01:21 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: IzxmDnnywJlNSivXfO3hR/Tt9bWLlt//Br2ARVDqYmo=)
2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:c7:ab:ba:04:34:a0:8a:2c:91:f9:1d:07:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Mar 25 14:01:21 2026 GMT
Not After : Mar 26 14:01:21 2026 GMT
Subject: CN=af45bad8b4608a54ca3ef0c2a70d96f078d0890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:03:d4:73:51:6c:10:b9:b7:32:15:67:b5:
55:2b:63:9a:62:8a:80:2f:b6:a6:5c:8c:1a:1f:8b:
c1:ba:b6:fb:e4:a1:05:32:24:03:22:7f:c1:ff:68:
77:f5:d6:c8:0f:3f:35:c9:6b:46:f8:cc:75:df:27:
cd:13:dc:fc:66:5d:4b:85:51:c1:3d:ff:99:3e:5a:
d2:9b:ac:8c:11:51:53:7f:3a:98:3d:5b:8a:48:5d:
21:2b:60:f6:f7:ee:da:e2:ad:57:47:ff:a0:0e:11:
a1:dd:b0:8a:61:74:8d:c8:96:c5:f2:3c:ff:f9:6d:
18:69:10:1c:ae:30:4b:e8:5d:12:26:f3:d7:1a:2b:
b6:1f:f6:ec:92:ff:8c:7a:3c:91:a2:e8:4a:f6:0b:
d2:17:b0:20:a4:cb:cf:fd:94:45:97:90:3c:92:e0:
a4:0d:ce:a4:43:00:bb:7f:ad:64:b3:2c:75:49:c3:
25:1f:96:39:a6:de:d9:e2:f6:d2:35:76:5f:d8:50:
a6:bf:c1:01:00:94:df:bc:11:7d:37:e3:95:6d:a6:
a4:23:e3:70:e9:9a:5d:f2:f8:eb:a5:6a:d8:d0:d3:
91:77:97:bc:32:39:2d:4a:75:d8:f3:94:04:f2:42:
0f:41:65:54:4e:3c:7f:c8:55:83:88:35:66:d0:64:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:BA:D8:B4:60:8A:54:CA:3E:F0:C2:A7:0D:96:F0:78:D0:89:0A
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:bc:49:4b:6a:5f:6f:e1:de:3d:57:c8:c9:d1:5a:17:9d:
2d:23:78:73:24:ac:76:1c:4a:ce:cc:5f:e2:a2:1d:6e:84:8f:
75:02:62:dd:e3:bd:29:f9:c2:54:d1:5f:87:e7:3e:a7:5e:20:
2f:0b:d0:e1:e8:2c:a7:56:21:e1:9e:3b:5c:bd:d1:e7:d2:bc:
9f:eb:be:50:22:0d:c1:31:83:62:66:01:e7:4e:e5:7c:32:aa:
46:52:94:50:67:79:9d:63:87:65:71:12:b6:3d:c7:64:95:98:
0f:56:d5:15:2e:71:3d:dd:41:45:ef:40:f5:67:53:f2:67:8d:
3e:9a:da:43:10:dd:5a:86:8b:d0:d3:9a:29:20:ea:f9:6d:8e:
64:07:14:b9:e7:fb:5b:a5:1a:e6:cc:e2:7e:5a:a9:11:42:8e:
fa:a6:04:c1:b3:3f:01:53:39:32:6b:9e:39:2b:32:93:25:c1:
6c:12:c2:dd:f3:45:ec:cb:d7:16:96:26:31:41:67:67:e0:ff:
2c:e1:d0:a1:cc:e8:18:0d:19:35:73:f3:c7:15:40:9c:47:35:
b3:82:ee:5d:db:18:54:c4:9a:67:e6:8b:08:fa:4c:70:71:21:
cd:d5:6d:87:2d:9d:e2:6f:d0:25:7b:f8:df:54:14:4b:25:76:
2a:4a:a3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTMerugQ0oIoskfkdB28VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1
YTQxODgwHhcNMjYwMzI1MTQwMTIxWhcNMjYwMzI2MTQwMTIxWjAzMTEwLwYDVQQD
EyhhZjQ1YmFkOGI0NjA4YTU0Y2EzZWYwYzJhNzBkOTZmMDc4ZDA4OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIwD1HNRbBC5tzIVZ7VVK2OaYoqA
L7amXIwaH4vBurb75KEFMiQDIn/B/2h39dbIDz81yWtG+Mx13yfNE9z8Zl1LhVHB
Pf+ZPlrSm6yMEVFTfzqYPVuKSF0hK2D29+7a4q1XR/+gDhGh3bCKYXSNyJbF8jz/
+W0YaRAcrjBL6F0SJvPXGiu2H/bskv+MejyRouhK9gvSF7AgpMvP/ZRFl5A8kuCk
Dc6kQwC7f61ksyx1ScMlH5Y5pt7Z4vbSNXZf2FCmv8EBAJTfvBF9N+OVbaakI+Nw
6Zpd8vjrpWrY0NORd5e8MjktSnXY85QE8kIPQWVUTjx/yFWDiDVm0GSwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9Futi0YIpUyj7wwqcNlvB40IkKMB8GA1UdIwQY
MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt
NzViNjg0Zjg5MGI0LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0
LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9K8SUtq
X2/h3j1XyMnRWhedLSN4cySsdhxKzsxf4qIdboSPdQJi3eO9KfnCVNFfh+c+p14g
LwvQ4egsp1Yh4Z47XL3R59K8n+u+UCINwTGDYmYB507lfDKqRlKUUGd5nWOHZXES
tj3HZJWYD1bVFS5xPd1BRe9A9WdT8meNPpraQxDdWoaL0NOaKSDq+W2OZAcUuef7
W6Ua5sziflqpEUKO+qYEwbM/AVM5MmueOSsykyXBbBLC3fNF7MvXFpYmMUFnZ+D/
LOHQoczoGA0ZNXPzxxVAnEc1s4LuXdsYVMSaZ+aLCPpMcHEhzdVthy2d4m/QJXv4
31QUSyV2KkqjxQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:40 2026 by rpki-client