Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: 2VAdNbdhWBDqDc/0I55NJDva0fULf6QdS2E69UOdz7k=
Subject key identifier: 74:4A:B3:55:D3:B6:A5:19:10:9E:9A:91:02:B4:2E:E1:AC:2B:97:83
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019D27A8652792E0009A18209EE665A12E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 01:00:40 +0000
Manifest this update: Thu 26 Mar 2026 01:00:40 +0000
Manifest next update: Fri 27 Mar 2026 01:00:40 +0000
Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
2: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
3: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 8uQJaCUu+29Dj/srRWVwKBfmGMGK41ZJtmyzaRW+Ac0=)
4: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
5: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
6: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
7: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
8: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
9: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:65:27:92:e0:00:9a:18:20:9e:e6:65:a1:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Mar 26 01:00:40 2026 GMT
Not After : Mar 27 01:00:40 2026 GMT
Subject: CN=744ab355d3b6a519109e9a9102b42ee1ac2b9783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:9b:75:6b:0d:50:74:ae:29:fb:a1:e7:64:
d9:7c:a0:70:d3:ce:a5:32:09:32:1a:fd:93:45:2b:
3c:54:2d:53:b4:07:00:be:f6:c8:4d:9a:df:10:0b:
29:0b:05:aa:9c:4a:ad:23:9e:4c:6c:2c:69:11:ec:
6a:e0:71:26:d7:a3:cf:5e:35:01:31:09:1b:95:74:
06:b5:d7:2d:33:70:2f:cc:aa:19:d6:12:b6:de:d0:
c9:c7:b8:c9:8a:80:d1:c6:4b:ff:83:40:c2:e6:56:
18:14:c5:0b:e2:52:af:fd:83:fa:9c:50:10:51:49:
77:b2:b6:a9:d2:fe:8e:be:b7:78:c9:b2:b1:f7:4d:
54:29:2c:99:d4:f4:f5:16:25:b9:f6:60:72:a8:2c:
7a:f3:de:44:46:46:c9:e4:12:12:5b:3d:8c:b4:d4:
b7:93:1f:14:dd:24:ea:71:22:67:c0:8b:d0:45:1a:
bc:29:c4:85:1c:04:62:5d:4d:20:37:8c:f5:38:1c:
e5:b8:48:88:11:f4:e5:0d:42:f6:e3:78:e3:d6:b8:
7c:a6:8d:08:0c:68:9e:c0:da:a6:ab:a5:1b:af:1a:
4c:a2:a8:d0:e7:dd:fd:1f:46:ef:7b:e9:70:3a:06:
9a:4e:71:d2:82:b6:f0:e6:b2:09:97:60:7d:b4:09:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4A:B3:55:D3:B6:A5:19:10:9E:9A:91:02:B4:2E:E1:AC:2B:97:83
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:13:36:4b:ab:43:a9:a2:b6:a8:f6:74:6e:d7:3a:4a:4c:
1b:13:9d:3d:a9:42:74:c6:6e:0b:6d:cd:28:b0:81:54:69:fc:
25:0f:2d:4c:ae:25:25:d1:9b:c9:22:d5:9e:06:1c:81:7f:f2:
61:0e:e5:f6:a5:a6:5c:fa:e8:83:d0:11:50:d4:e7:cf:32:f6:
f4:f8:0a:7e:46:aa:51:fe:56:71:98:48:f1:7a:9b:37:0e:96:
1e:d8:67:ec:51:21:af:0d:ea:09:51:94:7a:77:c9:a6:b2:c6:
02:7c:44:f6:cb:7b:41:09:3d:d1:40:77:a7:da:9d:01:9a:3d:
70:c9:1d:f3:bb:e4:ae:af:a1:75:f8:77:43:0b:c0:71:2d:72:
0f:6a:42:d8:08:e1:e4:38:a3:9f:4b:70:61:0d:ea:a6:41:57:
a7:89:51:c1:c4:ea:17:91:05:76:43:55:e3:5a:04:fd:82:5a:
84:3b:0a:10:2e:82:b6:b8:de:fa:3a:af:81:b4:15:fd:42:b0:
4b:56:c6:32:34:12:e8:89:c2:6c:19:66:5a:09:fa:79:26:ff:
df:3c:66:6e:21:79:71:dc:b5:59:b6:d4:db:e8:6c:82:e5:f2:
3e:92:6d:62:7e:d1:8a:86:5d:c5:53:4a:dc:a6:07:74:d7:c8:
98:18:eb:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGUnkuAAmhggnuZloS5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjYwMzI2MDEwMDQwWhcNMjYwMzI3MDEwMDQwWjAzMTEwLwYDVQQD
Eyg3NDRhYjM1NWQzYjZhNTE5MTA5ZTlhOTEwMmI0MmVlMWFjMmI5NzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHKbdWsNUHSuKfuh52TZfKBw086l
MgkyGv2TRSs8VC1TtAcAvvbITZrfEAspCwWqnEqtI55MbCxpEexq4HEm16PPXjUB
MQkblXQGtdctM3AvzKoZ1hK23tDJx7jJioDRxkv/g0DC5lYYFMUL4lKv/YP6nFAQ
UUl3srap0v6Ovrd4ybKx901UKSyZ1PT1FiW59mByqCx6895ERkbJ5BISWz2MtNS3
kx8U3STqcSJnwIvQRRq8KcSFHARiXU0gN4z1OBzluEiIEfTlDUL243jj1rh8po0I
DGiewNqmq6UbrxpMoqjQ5939H0bve+lwOgaaTnHSgrbw5rIJl2B9tAmk9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRKs1XTtqUZEJ6akQK0LuGsK5eDMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGUTNkur
Q6mitqj2dG7XOkpMGxOdPalCdMZuC23NKLCBVGn8JQ8tTK4lJdGbySLVngYcgX/y
YQ7l9qWmXProg9ARUNTnzzL29PgKfkaqUf5WcZhI8XqbNw6WHthn7FEhrw3qCVGU
enfJprLGAnxE9st7QQk90UB3p9qdAZo9cMkd87vkrq+hdfh3QwvAcS1yD2pC2Ajh
5Dijn0twYQ3qpkFXp4lRwcTqF5EFdkNV41oE/YJahDsKEC6Ctrje+jqvgbQV/UKw
S1bGMjQS6InCbBlmWgn6eSb/3zxmbiF5cdy1WbbU2+hsguXyPpJtYn7RioZdxVNK
3KYHdNfImBjrTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:26 2026 by rpki-client