
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: cl3VHZc/GgqPrC1VmQBQNJjhMkf02UvyycP2O9pkN3Q=
Subject key identifier: 7C:43:AC:F8:F9:2F:21:EC:FB:1E:24:44:C5:4C:44:3A:2E:A1:A8:C7
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019D2997A35180AAD6C17E5B9133F63BFD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 18FB
Signing time: Thu 26 Mar 2026 10:01:36 +0000
Manifest this update: Thu 26 Mar 2026 10:01:36 +0000
Manifest next update: Fri 27 Mar 2026 10:01:36 +0000
Files and hashes: 1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: ldLJSwuXXFT2KVlJiysABazJkTu6Xs4QHn/qlshffMw=)
2: 9qw7otosSIxdL3aCqQeP90SREjU.roa (hash: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=)
3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
4: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
8: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a3:51:80:aa:d6:c1:7e:5b:91:33:f6:3b:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Mar 26 10:01:36 2026 GMT
Not After : Mar 27 10:01:36 2026 GMT
Subject: CN=7c43acf8f92f21ecfb1e2444c54c443a2ea1a8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:81:83:0d:6d:f6:0b:12:cd:99:e1:c4:44:
ab:5d:aa:68:2f:2e:3c:2b:b6:30:6d:17:2f:09:8b:
9d:0d:02:83:15:99:39:1f:d4:07:ee:29:73:37:2c:
b0:44:f0:9d:16:9b:92:35:ec:91:28:76:71:e6:81:
f9:16:6c:5a:73:92:d6:c3:7d:85:99:e8:a4:eb:ee:
18:98:cb:68:e9:aa:c5:cf:ae:9a:9d:ca:5c:bb:ec:
bc:b6:0e:00:78:e1:5a:dd:96:6f:ec:10:f8:bb:02:
de:26:b5:df:95:b1:dc:98:1c:58:d9:4b:70:c1:8f:
89:4a:3d:d8:1b:4d:66:2f:59:30:84:07:46:90:4e:
cf:94:3c:27:3b:6a:ce:45:26:d5:64:39:d8:b3:ac:
da:60:fd:93:f7:87:e9:f1:f8:c5:e0:2d:2c:2e:61:
db:24:96:f8:80:ae:e0:b0:eb:71:f1:5b:6f:ed:e9:
ee:d0:51:00:3e:77:4f:74:08:57:dd:d0:1f:58:29:
10:d3:ab:6b:89:d4:7c:d6:23:2a:14:fe:58:48:69:
15:9f:3f:e5:11:06:db:d1:a7:27:58:ce:ac:71:77:
72:25:e7:b4:25:12:28:95:eb:69:b9:e7:42:f6:8b:
53:66:21:d1:64:ee:a2:b7:d5:6d:aa:c7:f2:eb:ae:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:43:AC:F8:F9:2F:21:EC:FB:1E:24:44:C5:4C:44:3A:2E:A1:A8:C7
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b3:6f:3f:3c:8a:f6:25:cf:ec:5c:61:19:5b:ef:b9:61:e8:
64:04:a2:5f:20:28:e9:e0:e3:8a:ce:89:c7:38:b7:3f:e2:cb:
aa:6e:49:92:b7:6a:64:77:bb:3a:8a:0a:37:fc:67:9a:36:ec:
59:ad:1f:b0:64:3e:a7:3a:09:fb:5c:51:ef:4f:83:ab:fc:c1:
9b:49:90:d9:68:02:b3:01:e5:33:57:89:45:35:b9:ca:9a:02:
85:eb:3e:2e:cf:ea:1d:6a:d9:57:9f:f7:aa:fa:cd:99:45:4c:
92:c0:17:01:55:40:5a:4b:c2:53:78:f4:96:19:50:8c:2d:02:
26:6a:d3:10:9d:ad:d9:d9:f4:f6:b7:8f:81:48:e5:5c:c4:a3:
9a:50:ad:ec:b3:5c:9f:f7:76:79:e6:d2:e1:0b:65:4b:90:9b:
18:50:fb:6a:ac:58:94:bf:56:4e:88:3e:e6:95:48:85:c1:e4:
ee:61:06:ab:12:36:5c:1a:a4:58:6e:3e:80:61:4a:ee:6d:c4:
fb:50:a0:b5:ca:08:43:84:14:d1:bd:39:bb:67:b4:26:ba:eb:
f4:57:24:7a:80:f7:0d:d1:0b:0c:f5:42:e6:44:0c:55:7d:1b:
4d:93:a2:52:d6:e7:fa:32:a6:c4:7f:3f:92:bd:f8:f7:a4:eb:
71:82:d4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl6NRgKrWwX5bkTP2O/1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjYwMzI2MTAwMTM2WhcNMjYwMzI3MTAwMTM2WjAzMTEwLwYDVQQD
Eyg3YzQzYWNmOGY5MmYyMWVjZmIxZTI0NDRjNTRjNDQzYTJlYTFhOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03aBgw1t9gsSzZnhxESrXapoLy48
K7YwbRcvCYudDQKDFZk5H9QH7ilzNyywRPCdFpuSNeyRKHZx5oH5Fmxac5LWw32F
meik6+4YmMto6arFz66ancpcu+y8tg4AeOFa3ZZv7BD4uwLeJrXflbHcmBxY2Utw
wY+JSj3YG01mL1kwhAdGkE7PlDwnO2rORSbVZDnYs6zaYP2T94fp8fjF4C0sLmHb
JJb4gK7gsOtx8Vtv7enu0FEAPndPdAhX3dAfWCkQ06tridR81iMqFP5YSGkVnz/l
EQbb0acnWM6scXdyJee0JRIoletpuedC9otTZiHRZO6it9Vtqsfy664YuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxDrPj5LyHs+x4kRMVMRDouoajHMB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLNvPzyK
9iXP7FxhGVvvuWHoZASiXyAo6eDjis6Jxzi3P+LLqm5JkrdqZHe7OooKN/xnmjbs
Wa0fsGQ+pzoJ+1xR70+Dq/zBm0mQ2WgCswHlM1eJRTW5ypoChes+Ls/qHWrZV5/3
qvrNmUVMksAXAVVAWkvCU3j0lhlQjC0CJmrTEJ2t2dn09rePgUjlXMSjmlCt7LNc
n/d2eebS4QtlS5CbGFD7aqxYlL9WTog+5pVIhcHk7mEGqxI2XBqkWG4+gGFK7m3E
+1CgtcoIQ4QU0b05u2e0Jrrr9FckeoD3DdELDPVC5kQMVX0bTZOiUtbn+jKmxH8/
kr3496TrcYLU9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:55 2026 by rpki-client