Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier: 6Rk4MsPWzFC1OnMvl8qjz/USF6OEOluerPT7dqAEwbE=
Subject key identifier: 8A:98:0F:82:50:8A:CD:88:81:25:4F:B5:52:3E:46:58:2C:B9:49:45
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 019D2960E4E6FE15D672CC763B15A080D08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number: 1685
Signing time: Thu 26 Mar 2026 09:01:49 +0000
Manifest this update: Thu 26 Mar 2026 09:01:49 +0000
Manifest next update: Fri 27 Mar 2026 09:01:49 +0000
Files and hashes: 1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: FDE1zclr7Q4ti/fHdMYcLjs0YUEAtLFe32fzawH0v5o=)
2: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (hash: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e4:e6:fe:15:d6:72:cc:76:3b:15:a0:80:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Mar 26 09:01:49 2026 GMT
Not After : Mar 27 09:01:49 2026 GMT
Subject: CN=8a980f82508acd8881254fb5523e46582cb94945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:be:f0:db:83:c8:da:ab:fe:73:11:aa:cb:
eb:76:52:d9:69:39:30:55:7d:ba:df:80:29:78:2d:
e9:6f:4c:72:4d:6d:54:20:9b:82:26:56:ab:d2:a5:
4a:8a:51:f5:53:14:50:79:cf:1f:5b:73:b4:63:73:
58:01:4d:2f:aa:d7:70:17:f1:5b:4c:22:cc:40:e9:
98:a2:29:98:3c:61:60:bf:64:93:b6:64:22:2c:48:
36:6a:96:dc:b4:80:d2:c6:e3:9c:52:77:3e:8b:bb:
ea:ec:e9:54:61:02:45:a0:0e:8b:99:43:cf:70:b2:
b4:c4:ab:26:36:95:73:77:84:45:a0:29:1a:9f:e6:
be:5f:f9:f5:d2:f3:79:4b:a5:3c:86:b7:dd:26:7c:
e2:89:36:2a:65:64:3c:82:10:2f:14:9b:eb:55:f0:
46:b6:d2:40:50:68:8b:40:b0:dd:7e:ee:42:3a:b7:
a0:d4:f9:2b:28:bd:fd:6e:24:0f:e8:bc:45:d5:b4:
6d:a7:0b:d3:1f:00:39:1c:cd:8c:e4:fa:ac:0f:8d:
48:49:fe:3b:68:23:87:69:52:ed:4e:c3:09:23:e6:
04:fb:27:32:c6:f8:b6:62:b2:95:8b:c3:89:8a:49:
b4:f5:70:04:f1:55:3e:d9:eb:43:93:1f:66:10:75:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:0F:82:50:8A:CD:88:81:25:4F:B5:52:3E:46:58:2C:B9:49:45
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:bc:26:f3:72:78:a3:a3:97:30:d6:87:a5:7f:d4:93:10:
a9:e5:68:15:34:2c:8a:60:28:0e:84:da:67:c3:fd:e2:1a:4a:
b4:5d:be:f7:6b:6b:38:89:a3:1f:cf:73:8b:a3:fd:47:87:8d:
3e:24:8a:37:05:18:e2:83:b5:d9:ce:4c:da:a0:70:a8:24:a6:
cc:17:ba:20:9b:82:47:8d:df:0e:1f:ea:e9:3b:45:e3:b3:88:
19:d6:bf:17:b1:12:ef:2e:f1:8d:1f:87:dc:24:09:08:8e:25:
29:97:29:b3:62:fa:09:15:25:ac:96:8b:2c:aa:dd:a7:3f:0c:
5c:eb:0c:58:23:0a:f6:a4:8c:f9:11:92:fc:43:ea:44:6d:de:
ac:ec:5b:9f:d1:29:46:ff:74:d7:2f:65:66:0b:52:12:15:af:
91:e1:24:1d:d1:e7:1a:76:52:b5:1b:d2:a7:3b:07:c7:95:98:
d3:da:e1:2d:ec:57:1e:41:71:1a:32:82:9d:c8:dd:9d:95:22:
24:db:80:a9:78:1c:7b:6d:9e:3d:e2:75:b5:8e:ba:4c:3e:7f:
3d:cb:d0:ba:97:bd:a7:08:ad:0c:15:14:16:0f:e7:27:82:f3:
9a:60:38:a8:76:56:55:a9:68:64:9f:ac:69:e3:c5:d2:a8:89:
8d:2f:47:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYOTm/hXWcsx2OxWggNCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjFhNmMwNjE0NTVjMDhlOTE0N2IyODFmYzc0MjRjYmM1
NDVmNDEwHhcNMjYwMzI2MDkwMTQ5WhcNMjYwMzI3MDkwMTQ5WjAzMTEwLwYDVQQD
Eyg4YTk4MGY4MjUwOGFjZDg4ODEyNTRmYjU1MjNlNDY1ODJjYjk0OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC6+8NuDyNqr/nMRqsvrdlLZaTkw
VX2634ApeC3pb0xyTW1UIJuCJlar0qVKilH1UxRQec8fW3O0Y3NYAU0vqtdwF/Fb
TCLMQOmYoimYPGFgv2STtmQiLEg2apbctIDSxuOcUnc+i7vq7OlUYQJFoA6LmUPP
cLK0xKsmNpVzd4RFoCkan+a+X/n10vN5S6U8hrfdJnziiTYqZWQ8ghAvFJvrVfBG
ttJAUGiLQLDdfu5COreg1PkrKL39biQP6LxF1bRtpwvTHwA5HM2M5PqsD41ISf47
aCOHaVLtTsMJI+YE+ycyxvi2YrKVi8OJikm09XAE8VU+2etDkx9mEHVuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqYD4JQis2IgSVPtVI+RlgsuUlFMB8GA1UdIwQY
MBaAFOmxpsBhRVwI6RR7KB/HQky8VF9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQt
M2Y5ZjI2NGNlYjIwLzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQtM2Y5ZjI2NGNlYjIw
LzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASji8JvNy
eKOjlzDWh6V/1JMQqeVoFTQsimAoDoTaZ8P94hpKtF2+92trOImjH89zi6P9R4eN
PiSKNwUY4oO12c5M2qBwqCSmzBe6IJuCR43fDh/q6TtF47OIGda/F7ES7y7xjR+H
3CQJCI4lKZcps2L6CRUlrJaLLKrdpz8MXOsMWCMK9qSM+RGS/EPqRG3erOxbn9Ep
Rv901y9lZgtSEhWvkeEkHdHnGnZStRvSpzsHx5WY09rhLexXHkFxGjKCncjdnZUi
JNuAqXgce22ePeJ1tY66TD5/PcvQupe9pwitDBUUFg/nJ4LzmmA4qHZWValoZJ+s
aePF0qiJjS9HYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:20 2026 by rpki-client