Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: Ba51gMk/861+XgXotOrTAWEJbnPzGEopEkjHvcgH6DY=
Subject key identifier: 6D:73:49:0E:D9:83:9E:46:9A:01:24:AD:34:FF:3D:29:62:9C:E6:EB
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 019D2929AA609C629F9124738DA38B87DC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 06CB
Signing time: Thu 26 Mar 2026 08:01:29 +0000
Manifest this update: Thu 26 Mar 2026 08:01:29 +0000
Manifest next update: Fri 27 Mar 2026 08:01:29 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: aCbnzjPrRZ42ecou6erfkYZRu88D04274o4cHmbzCzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:aa:60:9c:62:9f:91:24:73:8d:a3:8b:87:dc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Mar 26 08:01:29 2026 GMT
Not After : Mar 27 08:01:29 2026 GMT
Subject: CN=6d73490ed9839e469a0124ad34ff3d29629ce6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:93:3c:2f:c9:1c:25:a0:67:db:9a:2e:80:
1b:b0:f2:e1:40:18:6f:90:48:1e:11:bb:8a:52:59:
3e:86:eb:18:ab:fd:f8:eb:12:44:74:f8:d7:95:21:
d9:09:9c:07:19:95:77:b1:d2:c7:14:bf:c9:c5:52:
f9:7f:8d:bb:ba:28:48:56:b9:6a:2a:d5:65:42:de:
bc:c2:31:0e:43:35:89:14:ad:f9:58:15:bd:43:d4:
b0:1b:a7:2a:80:ab:27:bb:75:45:cc:9f:a3:b0:9e:
ce:35:79:1d:c4:4c:dc:c6:77:47:b7:0f:51:03:da:
43:7c:3e:cc:63:5a:b8:f9:57:f1:1e:ce:2a:a5:35:
ef:5b:f3:1e:bf:07:2b:6b:15:5d:c9:e8:ff:2c:9e:
3b:18:87:83:fd:db:62:fc:cc:60:0d:4b:f5:6f:1c:
ce:11:20:f3:da:c9:6b:aa:d7:9b:8f:3a:a7:f6:e4:
8c:ad:48:44:a8:29:2c:ea:0e:6b:5c:dc:27:16:19:
75:91:2e:a1:d8:2b:b0:b0:20:dc:20:81:dd:e0:2d:
8c:5e:12:7e:59:d2:68:bb:e7:bc:f8:bc:aa:19:62:
1c:a9:34:63:18:13:7f:4e:50:b6:04:17:5a:07:ca:
bd:88:85:b5:89:99:2b:d2:13:31:fc:a5:9c:61:b0:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:73:49:0E:D9:83:9E:46:9A:01:24:AD:34:FF:3D:29:62:9C:E6:EB
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:0f:6c:8a:79:80:34:4d:e6:17:37:70:52:d0:11:41:ff:
25:b6:12:df:ef:23:5f:a9:c2:f4:f9:dd:9c:a6:e2:84:5c:42:
c8:dc:08:28:25:4b:70:bf:bf:51:16:91:3a:0c:da:4c:8f:6a:
fb:fb:c7:5c:b9:79:aa:6e:40:ca:c5:e3:7c:1f:73:df:55:1a:
4c:95:54:20:72:d2:dc:b5:20:c8:66:17:20:f2:f0:40:38:92:
ab:f7:ba:91:c7:0b:68:a6:6f:fc:b9:a1:20:60:6b:3c:63:05:
f4:d6:e6:9d:ee:61:5a:87:d8:a7:86:a5:8f:7b:93:18:f1:c5:
f4:41:3e:7c:6d:3c:eb:f8:bb:ef:e4:07:2a:86:c4:b1:50:1d:
13:f5:ed:25:63:74:a0:bf:b1:77:e8:f1:51:ff:66:f3:41:f1:
8f:86:6a:67:d4:b6:70:49:fc:e1:21:0d:e1:76:66:dd:4b:70:
e7:16:8d:f4:25:6a:91:f2:92:3a:1e:a6:a6:10:04:44:24:b8:
fd:57:87:77:ed:c9:45:1d:d3:6e:db:05:f1:5e:aa:c6:ce:bf:
1d:ee:b7:c6:26:ec:34:bd:d8:a6:91:1b:ea:c4:7c:1d:77:af:
e1:f8:61:10:03:e2:64:14:49:da:05:64:86:95:6b:67:f9:6d:
bc:38:4b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKapgnGKfkSRzjaOLh9wwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAwN2VkMmZlMDhkNDMzZTBmMGEwMmY0M2NhN2FjYjI2
ZjVhMGUwHhcNMjYwMzI2MDgwMTI5WhcNMjYwMzI3MDgwMTI5WjAzMTEwLwYDVQQD
Eyg2ZDczNDkwZWQ5ODM5ZTQ2OWEwMTI0YWQzNGZmM2QyOTYyOWNlNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+KTPC/JHCWgZ9uaLoAbsPLhQBhv
kEgeEbuKUlk+husYq/346xJEdPjXlSHZCZwHGZV3sdLHFL/JxVL5f427uihIVrlq
KtVlQt68wjEOQzWJFK35WBW9Q9SwG6cqgKsnu3VFzJ+jsJ7ONXkdxEzcxndHtw9R
A9pDfD7MY1q4+VfxHs4qpTXvW/MevwcraxVdyej/LJ47GIeD/dti/MxgDUv1bxzO
ESDz2slrqtebjzqn9uSMrUhEqCks6g5rXNwnFhl1kS6h2CuwsCDcIIHd4C2MXhJ+
WdJou+e8+LyqGWIcqTRjGBN/TlC2BBdaB8q9iIW1iZkr0hMx/KWcYbAeMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1zSQ7Zg55GmgEkrTT/PSlinObrMB8GA1UdIwQY
MBaAFNSgB+0v4I1DPg8KAvQ8p6yyb1oOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgt
YzJiODFjZTk4YzZkLzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgtYzJiODFjZTk4YzZk
LzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+sPbIp5
gDRN5hc3cFLQEUH/JbYS3+8jX6nC9PndnKbihFxCyNwIKCVLcL+/URaROgzaTI9q
+/vHXLl5qm5AysXjfB9z31UaTJVUIHLS3LUgyGYXIPLwQDiSq/e6kccLaKZv/Lmh
IGBrPGMF9Nbmne5hWofYp4alj3uTGPHF9EE+fG086/i77+QHKobEsVAdE/XtJWN0
oL+xd+jxUf9m80Hxj4ZqZ9S2cEn84SEN4XZm3Utw5xaN9CVqkfKSOh6mphAERCS4
/VeHd+3JRR3TbtsF8V6qxs6/He63xibsNL3YppEb6sR8HXev4fhhEAPiZBRJ2gVk
hpVrZ/ltvDhLeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:41 2026 by rpki-client