Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: MO02/vcBAsad78jt3wejSdJut3w9qD7rPBpw3W3DdvI=
Subject key identifier: 9C:5A:CF:BB:39:D6:53:43:5A:60:35:1D:C1:31:B2:D6:82:25:6B:38
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019D25F1A1E5E6A54D7BA81D0F473FD62BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 0611
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: 4syW6gzgKewejP+Y/xMVhDKoXoL8UcWOR70IPalat1Q=)
2: vatD6IyOJfXLFso-oQNdkHZ0B5A.roa (hash: CF8afvvRrtxwksEOb+htGDBoa1bLNCvDnWuii8t0Lrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a1:e5:e6:a5:4d:7b:a8:1d:0f:47:3f:d6:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=9c5acfbb39d653435a60351dc131b2d682256b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:1f:5a:04:43:f3:8d:2b:4a:99:72:b2:8d:
89:60:2a:2c:2e:1d:8f:bb:8d:de:d2:76:48:3f:3d:
fb:d0:41:66:e1:ad:4c:85:a1:c9:92:95:0f:1a:a4:
9b:29:52:b3:01:57:c8:62:bc:b2:ca:57:1e:cf:5e:
c7:f3:6d:f0:b6:98:cb:ec:73:01:f8:35:09:6b:22:
34:df:10:96:e8:e1:2a:b4:ed:5b:7b:8e:c0:d1:35:
91:13:ee:ec:1f:b2:9c:c2:8c:ad:e3:63:ac:14:f6:
14:60:e4:0f:d8:91:74:92:c8:f8:12:36:86:ab:db:
4e:d0:b8:87:e9:3e:19:fd:0b:fd:d9:1e:1f:a9:a0:
8c:2e:1f:f4:fc:fc:f8:08:67:78:28:07:b9:01:b8:
f1:89:c3:c6:72:92:5d:5f:b7:71:d9:57:ec:47:55:
9c:43:d6:28:38:23:82:34:4c:76:eb:15:e2:aa:c3:
60:f4:64:ae:28:1e:38:e9:15:dd:83:da:7f:65:b6:
b7:8a:8e:12:fc:12:0c:2b:a6:7a:3a:d4:be:d1:08:
dd:7a:aa:88:b6:b4:4b:8e:16:ce:c7:86:bd:6a:2e:
60:2e:79:f3:bb:14:03:49:75:a0:1c:37:ff:52:5d:
2d:84:67:92:59:35:46:4c:ed:88:f0:5c:fa:1e:0f:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:CF:BB:39:D6:53:43:5A:60:35:1D:C1:31:B2:D6:82:25:6B:38
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:93:71:67:5e:2e:53:37:f9:fe:06:3d:a9:5e:01:1f:6c:27:
9d:03:ca:65:40:24:b2:e9:15:90:71:c2:af:36:00:78:7f:26:
7f:f4:ff:c6:96:53:80:57:6e:df:2f:8b:4e:da:52:2b:d0:61:
66:24:17:fa:84:1e:f6:1d:43:b5:3a:79:b4:48:8a:f0:2a:aa:
fd:bf:a2:e1:30:ce:40:64:9e:8f:4c:4a:6f:65:12:b3:e0:98:
cc:1f:38:6b:d0:82:12:22:97:a7:dc:42:ae:1a:e6:5d:5d:ad:
e6:c2:60:3c:7f:4d:06:ab:f2:c5:f7:99:90:3a:16:1b:a2:f5:
96:b8:43:32:2b:84:7d:66:30:e7:37:db:a4:2d:59:cc:f8:ed:
4d:9f:24:4e:07:27:fe:07:f7:12:6f:37:60:03:b3:a3:3c:55:
94:e1:85:6f:78:64:e7:56:9a:fe:ee:bc:82:24:65:54:c5:a3:
ab:dc:9c:df:30:2c:5a:08:d2:43:28:45:16:78:a2:fe:9f:cd:
7c:a6:db:5b:fb:9f:4e:1c:9c:33:af:c4:be:1d:5a:97:57:c9:
4e:54:75:00:ba:c1:2f:0d:47:7a:e1:c7:67:3c:52:97:fb:45:
63:87:ec:fd:c3:53:3c:54:a2:16:6e:3c:8a:30:f7:1b:7d:92:
6f:c3:b7:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8aHl5qVNe6gdD0c/1ivtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZmM2YzgxNjYzY2Y2ZmNlOTJlODNlNWQ2NjI4YmMwZWI2
YTk0ZDIwHhcNMjYwMzI1MTcwMTI1WhcNMjYwMzI2MTcwMTI1WjAzMTEwLwYDVQQD
Eyg5YzVhY2ZiYjM5ZDY1MzQzNWE2MDM1MWRjMTMxYjJkNjgyMjU2YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8EfWgRD840rSplyso2JYCosLh2P
u43e0nZIPz370EFm4a1MhaHJkpUPGqSbKVKzAVfIYryyylcez17H823wtpjL7HMB
+DUJayI03xCW6OEqtO1be47A0TWRE+7sH7Kcwoyt42OsFPYUYOQP2JF0ksj4EjaG
q9tO0LiH6T4Z/Qv92R4fqaCMLh/0/Pz4CGd4KAe5AbjxicPGcpJdX7dx2VfsR1Wc
Q9YoOCOCNEx26xXiqsNg9GSuKB446RXdg9p/Zba3io4S/BIMK6Z6OtS+0QjdeqqI
trRLjhbOx4a9ai5gLnnzuxQDSXWgHDf/Ul0thGeSWTVGTO2I8Fz6Hg81IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxaz7s51lNDWmA1HcExstaCJWs4MB8GA1UdIwQY
MBaAFOn8bIFmPPb86S6D5dZii8DrapTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUt
NTBlZjcyNmE5MTM2LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUtNTBlZjcyNmE5MTM2
LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZNxZ14u
Uzf5/gY9qV4BH2wnnQPKZUAksukVkHHCrzYAeH8mf/T/xpZTgFdu3y+LTtpSK9Bh
ZiQX+oQe9h1DtTp5tEiK8Cqq/b+i4TDOQGSej0xKb2USs+CYzB84a9CCEiKXp9xC
rhrmXV2t5sJgPH9NBqvyxfeZkDoWG6L1lrhDMiuEfWYw5zfbpC1ZzPjtTZ8kTgcn
/gf3Em83YAOzozxVlOGFb3hk51aa/u68giRlVMWjq9yc3zAsWgjSQyhFFnii/p/N
fKbbW/ufThycM6/Evh1al1fJTlR1ALrBLw1HeuHHZzxSl/tFY4fs/cNTPFSiFm48
ijD3G32Sb8O30w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client