Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier: ffcQMjSGy2ECygR46XCFEqbt+pJv3OzfyYsaN8zKwLQ=
Subject key identifier: 32:8F:10:83:C5:D0:21:4A:8B:40:A9:E0:63:08:A2:04:A5:87:C7:CC
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial: 019D29CEDC77AA32F80227F1DE67571D9128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number: 02A1
Signing time: Thu 26 Mar 2026 11:01:55 +0000
Manifest this update: Thu 26 Mar 2026 11:01:55 +0000
Manifest next update: Fri 27 Mar 2026 11:01:55 +0000
Files and hashes: 1: 40mGcXCMHPuRla1zKGXyXZBVzvs.roa (hash: WfYQcn+9zI1kuNsKzotUcFlUBcLcTv4/3QyWYbcWs7o=)
2: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: P3TtfXBYCPZFfs04T4TqNkfCkwYhbVJbmrwUX/mpYlE=)
3: OtBfd7lwBBx9oZDAv86N0_1cG1M.roa (hash: mYV8iF1/FRjdO4p86cpzPjgZ6mNMXzTtT3N1Gdwv9LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:dc:77:aa:32:f8:02:27:f1:de:67:57:1d:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Validity
Not Before: Mar 26 11:01:55 2026 GMT
Not After : Mar 27 11:01:55 2026 GMT
Subject: CN=328f1083c5d0214a8b40a9e06308a204a587c7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:9c:a4:ee:c1:b4:47:b6:4f:46:b2:f3:4e:
d9:5c:04:82:20:21:ed:69:10:04:c0:07:65:11:72:
57:c7:00:62:a1:31:58:3a:e4:9f:e5:20:7a:1e:2f:
df:cf:f9:ac:f9:db:5c:de:24:c8:e4:2b:ee:35:66:
cb:5e:08:a1:04:64:80:fb:5d:7f:e3:16:70:2f:52:
dc:3b:93:09:d3:b9:5a:2a:d0:8c:e7:f6:1c:37:ca:
d7:81:91:e5:9f:d5:72:d3:26:05:95:96:83:41:02:
e5:e9:f3:25:cf:99:c1:9b:6f:c7:11:57:0d:f4:d4:
c2:4f:e9:26:e5:86:ee:1b:97:a6:13:aa:a0:5a:39:
73:12:85:f5:db:1a:f8:06:a2:15:de:8d:43:de:b3:
fc:1a:5d:67:54:30:0c:3c:3c:e8:ec:87:ab:f7:1b:
1a:42:73:d1:38:3a:13:41:64:55:46:f9:0a:0a:04:
e6:8a:90:32:43:a0:5f:ad:0f:b0:73:8b:6a:c8:0b:
52:6b:89:f4:71:35:97:25:0f:9e:a9:c3:42:96:bb:
87:f6:f0:d3:d7:b9:dc:06:33:79:31:50:d4:4e:83:
80:03:0b:20:6e:d8:e9:0b:06:e2:b9:11:69:4a:d2:
cc:46:58:3c:c5:5f:2e:1b:9e:0d:ff:a5:ef:c0:4b:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:10:83:C5:D0:21:4A:8B:40:A9:E0:63:08:A2:04:A5:87:C7:CC
X509v3 Authority Key Identifier:
keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:36:2e:37:63:35:6d:87:2f:44:58:2b:6b:ab:74:0e:d9:d9:
10:d6:3f:14:b8:8b:6c:75:c6:a8:1c:4e:31:99:b4:73:49:d5:
d5:45:0a:0a:34:19:77:cd:5d:7f:6c:44:ef:02:7b:1b:3b:3b:
9a:2c:5f:76:7e:57:c9:7c:68:b1:e1:50:cf:15:87:46:6e:d2:
27:91:5e:4a:cb:a9:86:1a:33:35:f1:cb:98:02:04:2e:f8:ee:
f3:85:c3:18:a3:c7:2f:3b:93:5c:32:c8:ee:9f:de:65:a2:bf:
a3:1a:c4:00:fa:30:0e:60:f4:ee:62:4d:a2:bf:eb:fa:93:a3:
66:e1:b1:7a:bd:ad:06:a9:de:32:57:14:71:08:cd:3e:da:e5:
b3:35:90:72:39:56:de:98:06:8b:4b:12:d7:e4:35:0d:76:f4:
ca:f6:95:c7:f5:79:9a:72:15:e9:6f:d8:d4:7a:b4:35:f4:2c:
71:de:a9:fb:af:5e:66:09:91:26:0e:fa:f7:4a:14:c3:66:27:
e7:ad:74:d9:83:21:e0:68:3f:16:8c:cf:f9:94:0d:a5:c4:3e:
2e:df:43:c6:5b:e9:94:c9:16:6a:6c:10:ac:ef:42:47:1f:0e:
2b:64:be:39:c9:34:9f:fc:cd:c7:02:93:36:c3:d7:d6:19:0b:
fe:33:06:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztx3qjL4Aifx3mdXHZEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2ZhYmIyYjVkNzhmZjlmYmJkYzFlMzdkZDM3YjZmYzM0
ZjExZDkwHhcNMjYwMzI2MTEwMTU1WhcNMjYwMzI3MTEwMTU1WjAzMTEwLwYDVQQD
EygzMjhmMTA4M2M1ZDAyMTRhOGI0MGE5ZTA2MzA4YTIwNGE1ODdjN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QScpO7BtEe2T0ay807ZXASCICHt
aRAEwAdlEXJXxwBioTFYOuSf5SB6Hi/fz/ms+dtc3iTI5CvuNWbLXgihBGSA+11/
4xZwL1LcO5MJ07laKtCM5/YcN8rXgZHln9Vy0yYFlZaDQQLl6fMlz5nBm2/HEVcN
9NTCT+km5YbuG5emE6qgWjlzEoX12xr4BqIV3o1D3rP8Gl1nVDAMPDzo7Ier9xsa
QnPRODoTQWRVRvkKCgTmipAyQ6BfrQ+wc4tqyAtSa4n0cTWXJQ+eqcNClruH9vDT
17ncBjN5MVDUToOAAwsgbtjpCwbiuRFpStLMRlg8xV8uG54N/6XvwEv69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKPEIPF0CFKi0Cp4GMIogSlh8fMMB8GA1UdIwQY
MBaAFOjPq7K114/5+73B433Te2/DTxHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgt
YjM3MDA4NGEyN2Y3LzEvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgtYjM3MDA4NGEyN2Y3
LzEvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTYuN2M1
bYcvRFgra6t0DtnZENY/FLiLbHXGqBxOMZm0c0nV1UUKCjQZd81df2xE7wJ7Gzs7
mixfdn5XyXxoseFQzxWHRm7SJ5FeSsuphhozNfHLmAIELvju84XDGKPHLzuTXDLI
7p/eZaK/oxrEAPowDmD07mJNor/r+pOjZuGxer2tBqneMlcUcQjNPtrlszWQcjlW
3pgGi0sS1+Q1DXb0yvaVx/V5mnIV6W/Y1Hq0NfQscd6p+69eZgmRJg7690oUw2Yn
56102YMh4Gg/FozP+ZQNpcQ+Lt9DxlvplMkWamwQrO9CRx8OK2S+Ock0n/zNxwKT
NsPX1hkL/jMGBA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:04 2026 by rpki-client