Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier: aU/xd05RG/Y0HbFLZUn9QCdcimm8rKBdCUb4HzauTPg=
Subject key identifier: EB:C2:D0:79:3C:FF:AA:9D:4E:8E:B4:70:49:77:DB:0C:8B:23:AA:64
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial: 019D29610B75C0BC08958D5101A39C16E8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number: 038D
Signing time: Thu 26 Mar 2026 09:01:58 +0000
Manifest this update: Thu 26 Mar 2026 09:01:58 +0000
Manifest next update: Fri 27 Mar 2026 09:01:58 +0000
Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: GjiEKFrKfi3QMeGDDgssMbThesczd2a6f/5K52T3cfM=)
2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0b:75:c0:bc:08:95:8d:51:01:a3:9c:16:e8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Validity
Not Before: Mar 26 09:01:58 2026 GMT
Not After : Mar 27 09:01:58 2026 GMT
Subject: CN=ebc2d0793cffaa9d4e8eb4704977db0c8b23aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:39:db:51:9d:fc:1f:02:7e:93:6c:43:d3:
e3:f0:fe:69:4c:9b:01:06:30:0a:16:1c:b6:2f:72:
38:d7:9b:f5:43:38:e9:ec:74:16:52:0c:5b:1f:15:
ef:ab:d7:34:73:28:ff:a1:c1:8f:f6:88:29:cd:a2:
9d:d8:44:56:79:24:65:f5:8a:4c:8d:2a:11:25:cd:
6a:b5:eb:dc:ba:93:fa:ca:2a:e0:1c:99:db:4b:c7:
b1:0d:18:0b:c7:8c:d5:64:2b:7b:d5:18:aa:a6:02:
a7:63:a2:e0:f2:4c:05:eb:d0:be:55:29:b0:1b:9a:
a2:c5:14:39:72:f4:20:15:59:f1:03:c7:ff:d4:6b:
c5:f6:f7:ef:ee:3f:d0:da:66:bf:22:b8:e6:f8:45:
1b:6e:13:7f:09:d1:a1:b2:3e:48:56:6f:c7:ca:6a:
17:33:68:85:74:3c:d6:6e:29:43:67:3b:1c:4c:82:
3d:6a:30:9d:52:5f:d0:60:18:5a:31:d1:c6:b4:44:
73:d4:34:c5:f7:8a:af:f1:be:fc:49:49:8b:89:4f:
cf:44:da:69:99:cf:34:33:cb:23:37:6e:e3:91:fe:
a1:d8:8c:44:d0:e1:32:2c:d5:65:02:92:61:b4:a7:
6e:04:ea:60:83:3f:ed:27:14:e5:98:11:76:3d:da:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C2:D0:79:3C:FF:AA:9D:4E:8E:B4:70:49:77:DB:0C:8B:23:AA:64
X509v3 Authority Key Identifier:
keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:93:2f:46:6c:65:ab:08:ab:08:5a:9a:e7:d4:09:d5:e3:fe:
6d:15:54:54:7a:23:b9:a1:58:30:d5:cd:34:6f:ce:e9:32:f1:
06:f4:05:5f:e0:11:d8:a8:43:6c:61:95:24:e9:0b:4d:ef:19:
5a:46:bd:5b:cb:b1:75:9a:97:6a:6c:ab:61:e5:df:d8:19:b4:
7d:e5:b8:33:a0:0d:e6:57:de:49:c8:03:6b:7f:74:b7:9a:46:
0a:23:43:22:72:ff:43:7c:04:f8:45:a9:d6:46:a0:13:1a:4a:
a1:2d:91:20:95:a3:2f:70:56:7e:36:44:07:a8:82:ad:04:76:
35:97:9d:0e:51:15:32:33:db:84:21:57:48:f8:73:ee:fd:92:
c4:c0:3f:2c:2f:95:c6:0b:71:17:2d:e4:2c:03:d7:29:4a:2d:
b8:e6:c9:0e:0b:ae:e7:7a:20:e7:bd:6f:0a:74:92:0d:ee:8d:
0d:1d:94:9c:51:4f:0e:61:d8:68:7a:3c:b1:d1:f9:cc:7a:e3:
2c:f0:44:ce:61:35:77:c4:60:08:4b:4d:b0:31:37:8f:d2:6b:
1c:ab:b9:f9:1a:cf:ef:aa:ea:4a:a0:a3:9c:5c:89:d8:7a:5a:
22:1c:68:df:08:6f:86:43:0c:2f:a5:f4:e6:f0:e8:29:75:5a:
52:73:f3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYQt1wLwIlY1RAaOcFuj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2
NjMzZGEwHhcNMjYwMzI2MDkwMTU4WhcNMjYwMzI3MDkwMTU4WjAzMTEwLwYDVQQD
EyhlYmMyZDA3OTNjZmZhYTlkNGU4ZWI0NzA0OTc3ZGIwYzhiMjNhYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AU521Gd/B8CfpNsQ9Pj8P5pTJsB
BjAKFhy2L3I415v1Qzjp7HQWUgxbHxXvq9c0cyj/ocGP9ogpzaKd2ERWeSRl9YpM
jSoRJc1qtevcupP6yirgHJnbS8exDRgLx4zVZCt71RiqpgKnY6Lg8kwF69C+VSmw
G5qixRQ5cvQgFVnxA8f/1GvF9vfv7j/Q2ma/Irjm+EUbbhN/CdGhsj5IVm/HymoX
M2iFdDzWbilDZzscTII9ajCdUl/QYBhaMdHGtERz1DTF94qv8b78SUmLiU/PRNpp
mc80M8sjN27jkf6h2IxE0OEyLNVlApJhtKduBOpggz/tJxTlmBF2PdrFvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvC0Hk8/6qdTo60cEl32wyLI6pkMB8GA1UdIwQY
MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt
ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3
LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpMvRmxl
qwirCFqa59QJ1eP+bRVUVHojuaFYMNXNNG/O6TLxBvQFX+AR2KhDbGGVJOkLTe8Z
Wka9W8uxdZqXamyrYeXf2Bm0feW4M6AN5lfeScgDa390t5pGCiNDInL/Q3wE+EWp
1kagExpKoS2RIJWjL3BWfjZEB6iCrQR2NZedDlEVMjPbhCFXSPhz7v2SxMA/LC+V
xgtxFy3kLAPXKUotuObJDguu53og571vCnSSDe6NDR2UnFFPDmHYaHo8sdH5zHrj
LPBEzmE1d8RgCEtNsDE3j9JrHKu5+RrP76rqSqCjnFyJ2HpaIhxo3whvhkMML6X0
5vDoKXVaUnPz1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:50 2026 by rpki-client