Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
File: k61uOZkaLowJwa3lO-WV-LipQl4.mft (raw, json)
Hash identifier: XamdCXrx0qUyTCZiMAguKgqv28yJuDiYs5LFMMgGn3E=
Subject key identifier: C6:C0:97:66:53:A7:DF:D5:25:0C:FF:02:68:52:84:7A:0B:AF:35:48
Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Certificate serial: 019D2A3C1BC7B92EFD2B492F9A19008ACED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
Manifest number: 068A
Signing time: Thu 26 Mar 2026 13:01:15 +0000
Manifest this update: Thu 26 Mar 2026 13:01:15 +0000
Manifest next update: Fri 27 Mar 2026 13:01:15 +0000
Files and hashes: 1: XZK8ESeU017UcTyLosKrMbmvFu4.roa (hash: QOupiUPzPs9rkbCndSp1pJv9yzcYmDSFdBLs7abwVV0=)
2: k61uOZkaLowJwa3lO-WV-LipQl4.crl (hash: 2XLTIngJVVwBjFxefduia+DGX2GfJ/oyFm+KR/MGaOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:1b:c7:b9:2e:fd:2b:49:2f:9a:19:00:8a:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Validity
Not Before: Mar 26 13:01:15 2026 GMT
Not After : Mar 27 13:01:15 2026 GMT
Subject: CN=c6c0976653a7dfd5250cff026852847a0baf3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:a3:c1:11:58:39:ba:f3:e0:31:4b:a5:ca:
6b:3d:46:6b:df:c6:97:54:d5:c6:62:fc:a5:77:05:
2c:dc:1b:e9:bd:94:f0:0c:43:73:0e:6f:af:bd:cc:
e7:8b:25:4e:93:a6:c9:98:35:1d:46:1f:2a:01:a4:
60:3e:cb:50:a0:bb:28:08:bf:17:ea:2d:26:27:4d:
0b:ba:10:c9:8c:5a:cd:7d:1a:25:33:60:3c:28:12:
f0:77:aa:94:47:5c:b1:b3:42:b7:54:91:7b:be:5c:
8b:44:54:73:1a:ba:e4:c1:80:72:b2:37:9f:01:11:
01:61:ea:a4:6f:ef:c4:07:6a:3e:74:29:d3:03:e0:
02:34:bc:15:c2:c4:c5:c7:21:c3:84:dc:36:a4:5b:
5e:04:9f:6b:6c:96:d4:ba:6a:3d:10:95:93:e4:56:
a3:17:aa:af:3a:df:b3:86:17:91:3b:d0:74:df:1c:
75:58:51:30:47:09:5a:60:53:5b:85:77:fe:52:19:
d5:33:d1:b7:06:bc:5d:e8:8a:56:41:ce:e0:b2:02:
91:29:36:4a:79:08:a4:fe:8c:7e:29:36:3c:9c:cc:
03:19:dd:b7:fd:7c:50:5e:2c:23:54:99:f4:56:8b:
c0:97:8d:71:c8:28:fd:ff:1e:92:2e:f2:44:59:e0:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C0:97:66:53:A7:DF:D5:25:0C:FF:02:68:52:84:7A:0B:AF:35:48
X509v3 Authority Key Identifier:
keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f5:03:89:5e:63:bd:07:78:21:20:da:a3:0a:dd:a2:52:d5:
45:fd:90:c9:16:df:60:48:f8:51:9e:53:35:c5:52:91:3f:cc:
f5:91:aa:59:71:e1:a8:01:e7:5c:02:a4:d7:15:3a:73:7e:0a:
8d:c7:c2:8d:a8:a5:f0:78:85:3e:f8:b2:7e:a5:6a:3e:3a:54:
cb:d1:c0:86:3a:26:56:b4:df:22:0c:70:55:1d:df:28:63:cb:
ea:d2:e9:d9:d1:a1:a1:88:eb:ad:64:84:71:a4:86:b9:7a:79:
ea:78:ee:c7:b2:03:58:2d:78:3e:0b:51:89:77:8d:b6:5c:c9:
de:92:7d:6f:1c:58:9e:88:8b:e5:e1:ac:e8:40:40:90:9e:f8:
e0:3b:bd:27:ae:dc:46:2a:e0:28:65:33:81:c6:73:26:75:33:
6f:fb:56:be:f2:02:2e:f4:78:de:40:dd:03:89:6e:12:30:cd:
b0:dc:c5:2b:18:01:aa:c8:c4:46:c8:be:14:ec:47:39:03:ee:
86:3e:2a:7d:21:d8:ad:c4:d7:3a:63:f4:c2:32:5b:8e:fb:a4:
79:21:bb:30:24:34:f5:4b:2e:ec:14:64:32:aa:34:ff:f7:be:
ea:84:c8:c5:81:87:1e:bf:e5:5b:9f:ba:ce:62:b7:11:82:6e:
f9:1a:50:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPBvHuS79K0kvmhkAis7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWQ2ZTM5OTkxYTJlOGMwOWMxYWRlNTNiZTU5NWY4Yjhh
OTQyNWUwHhcNMjYwMzI2MTMwMTE1WhcNMjYwMzI3MTMwMTE1WjAzMTEwLwYDVQQD
EyhjNmMwOTc2NjUzYTdkZmQ1MjUwY2ZmMDI2ODUyODQ3YTBiYWYzNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCjwRFYObrz4DFLpcprPUZr38aX
VNXGYvyldwUs3BvpvZTwDENzDm+vvczniyVOk6bJmDUdRh8qAaRgPstQoLsoCL8X
6i0mJ00LuhDJjFrNfRolM2A8KBLwd6qUR1yxs0K3VJF7vlyLRFRzGrrkwYBysjef
AREBYeqkb+/EB2o+dCnTA+ACNLwVwsTFxyHDhNw2pFteBJ9rbJbUumo9EJWT5Faj
F6qvOt+zhheRO9B03xx1WFEwRwlaYFNbhXf+UhnVM9G3Brxd6IpWQc7gsgKRKTZK
eQik/ox+KTY8nMwDGd23/XxQXiwjVJn0VovAl41xyCj9/x6SLvJEWeAqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbAl2ZTp9/VJQz/AmhShHoLrzVIMB8GA1UdIwQY
MBaAFJOtbjmZGi6MCcGt5Tvllfi4qUJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQt
Zjc3NmM5MjIwN2I3LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQtZjc3NmM5MjIwN2I3
LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfUDiV5j
vQd4ISDaowrdolLVRf2QyRbfYEj4UZ5TNcVSkT/M9ZGqWXHhqAHnXAKk1xU6c34K
jcfCjail8HiFPviyfqVqPjpUy9HAhjomVrTfIgxwVR3fKGPL6tLp2dGhoYjrrWSE
caSGuXp56njux7IDWC14PgtRiXeNtlzJ3pJ9bxxYnoiL5eGs6EBAkJ744Du9J67c
RirgKGUzgcZzJnUzb/tWvvICLvR43kDdA4luEjDNsNzFKxgBqsjERsi+FOxHOQPu
hj4qfSHYrcTXOmP0wjJbjvukeSG7MCQ09Usu7BRkMqo0//e+6oTIxYGHHr/lW5+6
zmK3EYJu+RpQ+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:34 2026 by rpki-client