Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: SLS4tEybzdTIxIftyDOetGMmZzM4QSFKr/ktBvmZZSc=
Subject key identifier: 63:8E:FB:A8:59:CE:DC:6E:3D:71:12:F5:2E:32:00:ED:2E:D6:46:F9
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 019D296194520E5563A74B3A0E4CB826850F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 140C
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: fZsgDEIzN7R3p2pu38CCl4Z28m8njh78X6W6ZU0q61I=)
2: pyuMnNg45Imlk2H0jl_EMiwNCJY.roa (hash: Du2wmMU/s9sp+p6yThJQ53vWQyfYeVO+yB5tdkmnkw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:94:52:0e:55:63:a7:4b:3a:0e:4c:b8:26:85:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=638efba859cedc6e3d7112f52e3200ed2ed646f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:7e:32:29:15:41:47:ad:e1:9c:9c:47:43:
03:53:dd:b0:88:47:dc:ee:f4:db:12:82:42:c8:c4:
af:68:f9:ee:60:dc:be:75:4a:ff:f2:cb:ab:de:11:
4b:ad:9c:d8:cd:86:ff:0c:ac:3e:3a:ae:d4:ef:d6:
59:83:d8:1e:f3:31:13:e5:63:ff:cb:67:c5:13:a4:
da:ea:98:ef:73:09:0c:5b:29:e4:d1:e6:bc:59:0a:
56:0b:f9:78:5b:55:81:a6:00:55:4f:d3:35:cc:5d:
79:05:57:89:f0:cb:14:ca:81:d8:21:b6:7c:72:4c:
30:64:93:65:04:ec:00:33:4a:4d:fb:35:91:0c:90:
4d:29:39:52:0a:06:d3:c6:c1:eb:1b:d0:e7:88:05:
44:d1:92:a2:38:03:a7:4f:91:7a:e4:1a:bd:95:26:
28:28:57:64:48:20:b4:c0:c8:e1:b7:f8:01:73:99:
e0:56:2e:d9:67:8e:18:2b:3f:e4:5b:61:e2:ef:43:
67:0e:28:49:f5:b9:d4:f6:17:12:68:79:e0:b1:07:
92:56:04:ab:72:24:86:7c:28:5c:2d:59:b1:c0:c2:
98:1d:fd:0d:e4:35:c6:45:e7:b7:57:c7:35:32:ac:
44:6d:bc:18:76:f6:40:0f:d1:db:fe:91:a5:69:21:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:FB:A8:59:CE:DC:6E:3D:71:12:F5:2E:32:00:ED:2E:D6:46:F9
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:29:d7:90:92:24:5b:48:7e:da:99:bb:e3:f4:14:5a:b0:
98:da:20:da:fd:71:6e:58:21:cf:8c:b7:0f:e1:ef:b3:99:d1:
66:1f:e9:c8:6f:a6:04:26:f4:82:49:27:c1:e2:f2:80:df:ea:
f5:e9:65:27:1a:09:98:59:fa:56:7d:30:44:24:33:db:28:d4:
51:86:f7:35:93:8f:e1:fc:19:51:2e:cc:a6:f3:3d:69:04:ab:
7a:00:b7:fe:95:b0:aa:01:5a:d6:c2:fc:43:45:cd:c5:9d:1a:
d7:01:ac:ea:fe:c0:86:fa:8e:0f:bc:06:a9:ed:ae:1e:e2:fa:
47:e0:ce:65:43:a6:21:f1:d3:9f:6f:1a:97:70:77:83:fb:0c:
bb:a0:7c:0f:4e:2c:09:5f:42:62:14:6b:bc:54:17:f5:66:e3:
79:8d:20:ca:39:98:c4:5b:98:4f:0e:4e:18:ed:d6:8d:80:08:
b6:be:0d:09:a0:0b:57:b4:64:32:0d:f4:39:fb:25:a7:be:b4:
7b:6d:da:40:fd:81:2b:39:f7:30:62:54:38:90:a1:9a:91:9b:
34:a7:e3:78:ea:1b:6b:fe:36:f2:68:7a:e4:73:f3:60:c7:a7:
56:d5:ef:1c:fa:39:4a:4d:3e:9c:37:da:74:f6:be:80:e5:78:
f0:f1:0b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYZRSDlVjp0s6Dky4JoUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5
MDgyMzkwHhcNMjYwMzI2MDkwMjMzWhcNMjYwMzI3MDkwMjMzWjAzMTEwLwYDVQQD
Eyg2MzhlZmJhODU5Y2VkYzZlM2Q3MTEyZjUyZTMyMDBlZDJlZDY0NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmB+MikVQUet4ZycR0MDU92wiEfc
7vTbEoJCyMSvaPnuYNy+dUr/8sur3hFLrZzYzYb/DKw+Oq7U79ZZg9ge8zET5WP/
y2fFE6Ta6pjvcwkMWynk0ea8WQpWC/l4W1WBpgBVT9M1zF15BVeJ8MsUyoHYIbZ8
ckwwZJNlBOwAM0pN+zWRDJBNKTlSCgbTxsHrG9DniAVE0ZKiOAOnT5F65Bq9lSYo
KFdkSCC0wMjht/gBc5ngVi7ZZ44YKz/kW2Hi70NnDihJ9bnU9hcSaHngsQeSVgSr
ciSGfChcLVmxwMKYHf0N5DXGRee3V8c1MqxEbbwYdvZAD9Hb/pGlaSEz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOO+6hZztxuPXES9S4yAO0u1kb5MB8GA1UdIwQY
MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt
MGZjNThlNThjYWM5LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5
LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjK4p15CS
JFtIftqZu+P0FFqwmNog2v1xblghz4y3D+Hvs5nRZh/pyG+mBCb0gkknweLygN/q
9ellJxoJmFn6Vn0wRCQz2yjUUYb3NZOP4fwZUS7MpvM9aQSregC3/pWwqgFa1sL8
Q0XNxZ0a1wGs6v7AhvqOD7wGqe2uHuL6R+DOZUOmIfHTn28al3B3g/sMu6B8D04s
CV9CYhRrvFQX9WbjeY0gyjmYxFuYTw5OGO3WjYAItr4NCaALV7RkMg30Ofslp760
e23aQP2BKzn3MGJUOJChmpGbNKfjeOoba/428mh65HPzYMenVtXvHPo5Sk0+nDfa
dPa+gOV48PELRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:53:13 2026 by rpki-client