Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: 093j4dUDlfMzhbVpnA2uqb9DwZYlLxMWZbsLaFtx7gU=
Subject key identifier: 2B:22:4C:7C:92:52:F7:31:62:8D:BF:0C:04:1F:98:B7:0E:F1:26:E6
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019D27E01B30156B34C9545F0AEC3F8E4A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 16A7
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: jgghghzx2XA4HfCdOMZaAXzX8GDVB18hPbKdC8uG2t4=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1b:30:15:6b:34:c9:54:5f:0a:ec:3f:8e:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=2b224c7c9252f731628dbf0c041f98b70ef126e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:a7:5e:ac:59:88:93:8c:98:a5:da:25:7d:
57:07:31:08:70:6d:60:1b:90:35:c6:04:e0:d2:6a:
e2:eb:4d:bd:0f:ea:07:c8:c9:e0:f6:32:2e:57:2d:
9c:12:87:a5:e5:cf:6a:31:63:f5:6a:fc:94:bf:27:
a1:08:03:a2:86:05:a7:6e:09:b0:98:48:3d:60:6e:
a9:f0:b8:ca:05:03:c5:a1:5c:3d:7c:52:87:1f:af:
a1:12:a2:c9:35:3b:d7:a7:07:1c:33:d3:b8:e8:2a:
a8:3c:4a:d5:7a:8b:25:2f:d9:d4:57:f3:b9:cc:16:
17:0a:b3:a5:ed:51:f3:6e:4e:2c:de:a1:b7:a6:a6:
bf:35:68:36:d6:18:fe:f6:8b:e2:37:c2:8e:51:eb:
37:0f:5e:e7:35:86:8f:6a:10:d4:cb:42:61:ed:b3:
9d:51:31:27:c4:63:4d:83:68:75:7e:2c:f4:32:db:
2d:69:3e:c8:85:ea:6a:ce:6a:d0:b9:e1:6f:45:7c:
2a:1e:3c:ca:88:c4:82:cc:22:5e:c1:8e:83:ee:1a:
23:4f:d3:80:c6:bd:ab:4d:dd:ba:1e:96:80:c8:a3:
e7:6f:bb:d7:1c:05:9d:13:30:de:04:eb:21:f6:44:
23:34:c0:88:c5:9e:d2:f2:b7:c6:25:22:61:5f:f3:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:4C:7C:92:52:F7:31:62:8D:BF:0C:04:1F:98:B7:0E:F1:26:E6
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:2c:af:48:b4:91:60:10:fe:40:39:4b:b9:0b:ed:b5:d3:
d3:76:8b:c6:9a:b2:7d:fb:e6:f9:52:8f:87:57:ac:fb:4d:9c:
e4:01:a2:3e:cc:3f:ff:87:f7:52:bb:61:b5:15:a7:1d:22:f3:
42:85:57:19:84:9a:0d:3d:7d:fd:e8:6d:74:43:9e:1a:d8:e1:
19:b1:4e:6e:76:ba:8a:d2:1d:65:e5:71:f2:fa:c2:f2:c7:5e:
5a:fb:5a:a1:08:b3:7e:e9:70:1a:a2:1b:c1:63:eb:92:e4:78:
75:8d:ab:bc:ce:f7:be:02:64:54:78:bf:b7:13:3e:7c:1e:07:
a1:13:cd:28:b0:2a:f0:1a:2b:4d:82:7e:4e:99:51:dc:34:3a:
9b:ad:fc:de:32:1d:92:2c:d0:5c:41:c6:66:23:ad:b1:12:85:
f0:09:71:07:8b:aa:c6:39:cf:25:f1:8e:47:a5:33:f5:78:a7:
99:02:65:02:21:20:ad:3c:47:9b:01:4a:7f:81:97:9e:f0:15:
68:f9:dc:3f:df:82:06:ec:af:a5:47:07:f2:fe:7c:a9:93:eb:
58:a3:dd:7c:07:24:d9:77:fa:ef:a7:ba:67:66:cd:fa:cf:34:
ff:b5:89:a4:9b:c5:bb:f3:9f:8f:c3:0d:2f:d2:a5:fe:91:f3:
bc:f5:03:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BswFWs0yVRfCuw/jkqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5
MTk3NTYwHhcNMjYwMzI2MDIwMTMxWhcNMjYwMzI3MDIwMTMxWjAzMTEwLwYDVQQD
EygyYjIyNGM3YzkyNTJmNzMxNjI4ZGJmMGMwNDFmOThiNzBlZjEyNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbKnXqxZiJOMmKXaJX1XBzEIcG1g
G5A1xgTg0mri6029D+oHyMng9jIuVy2cEoel5c9qMWP1avyUvyehCAOihgWnbgmw
mEg9YG6p8LjKBQPFoVw9fFKHH6+hEqLJNTvXpwccM9O46CqoPErVeoslL9nUV/O5
zBYXCrOl7VHzbk4s3qG3pqa/NWg21hj+9oviN8KOUes3D17nNYaPahDUy0Jh7bOd
UTEnxGNNg2h1fiz0MtstaT7IhepqzmrQueFvRXwqHjzKiMSCzCJewY6D7hojT9OA
xr2rTd26HpaAyKPnb7vXHAWdEzDeBOsh9kQjNMCIxZ7S8rfGJSJhX/PzRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsiTHySUvcxYo2/DAQfmLcO8SbmMB8GA1UdIwQY
MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt
OGFhNTBkNjcwMzdjLzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj
LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ8sr0i0
kWAQ/kA5S7kL7bXT03aLxpqyffvm+VKPh1es+02c5AGiPsw//4f3UrthtRWnHSLz
QoVXGYSaDT19/ehtdEOeGtjhGbFObna6itIdZeVx8vrC8sdeWvtaoQizfulwGqIb
wWPrkuR4dY2rvM73vgJkVHi/txM+fB4HoRPNKLAq8BorTYJ+TplR3DQ6m6383jId
kizQXEHGZiOtsRKF8AlxB4uqxjnPJfGOR6Uz9XinmQJlAiEgrTxHmwFKf4GXnvAV
aPncP9+CBuyvpUcH8v58qZPrWKPdfAck2Xf676e6Z2bN+s80/7WJpJvFu/Ofj8MN
L9Kl/pHzvPUD8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:41 2026 by rpki-client