Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: CVQcXzZryJ9S0aAXHsMxmE9N36TORIiA8MPEy6XhL0I=
Subject key identifier: DE:02:DA:58:5E:D9:13:67:9A:C8:08:D4:FE:9E:2A:24:9A:B0:4D:6A
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 019D25BA84E3048FF45A7356DE2F0CB27E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:01:13 +0000
Manifest this update: Wed 25 Mar 2026 16:01:13 +0000
Manifest next update: Thu 26 Mar 2026 16:01:13 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: ffzvzNoUq/PEi6jDzIdGXxvNxAPQzVPj8qBKPJqJDCk=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:84:e3:04:8f:f4:5a:73:56:de:2f:0c:b2:7e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Mar 25 16:01:13 2026 GMT
Not After : Mar 26 16:01:13 2026 GMT
Subject: CN=de02da585ed913679ac808d4fe9e2a249ab04d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:fc:d6:fd:d1:a1:29:32:55:6d:24:1f:a3:
35:64:65:77:f6:57:7a:19:78:78:94:1a:73:42:85:
8e:cb:d2:ea:53:95:7a:cb:d0:17:14:db:a1:ad:98:
c4:b1:b1:89:f9:e1:54:22:a1:1e:c6:3a:c4:cd:19:
fd:b9:0e:7a:14:f5:ce:47:24:2c:57:0c:cc:04:84:
cb:2a:be:da:78:f3:47:e6:be:ee:f2:79:1e:74:65:
8d:85:6c:1b:09:e0:81:89:09:f7:18:6b:15:4d:4d:
ef:a3:dd:c0:ea:70:c5:64:1c:87:90:ec:ea:1c:f9:
7c:73:ab:2a:4f:bf:32:7f:76:1a:9f:4f:30:a3:7f:
d2:53:1d:57:75:d2:a3:10:d7:38:fe:9e:3a:0c:9d:
6a:60:ec:c5:a9:50:3e:1d:7a:7e:d0:02:6a:a6:f6:
e1:85:cc:29:76:e1:be:a0:ee:83:df:ef:d1:80:18:
a3:39:2f:60:ed:64:2d:84:e0:3c:d1:f6:cd:1a:c7:
7d:be:be:cf:c7:36:c3:a3:c4:96:b8:53:bf:b4:71:
32:71:a9:4a:1b:c7:48:f5:6d:eb:2f:8a:a5:01:33:
dc:d1:38:88:d2:91:d2:ac:3a:c6:52:8e:e1:e3:36:
8c:05:2b:7b:82:aa:33:a8:73:3c:11:9e:40:d3:ac:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:02:DA:58:5E:D9:13:67:9A:C8:08:D4:FE:9E:2A:24:9A:B0:4D:6A
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:86:92:ba:7b:57:67:b9:c6:64:84:80:c9:3a:6d:86:b8:
a7:5c:57:fb:42:c6:a2:e5:fe:a3:aa:e1:87:48:46:cd:ad:6e:
ab:a9:c4:6d:bf:76:4e:4a:1a:2e:13:18:ef:86:85:74:28:30:
b4:2a:6a:2c:75:93:d2:88:28:12:8d:f1:ba:f5:c4:74:0a:70:
ac:22:3e:06:7f:db:1c:a5:09:66:cb:68:77:14:e3:92:59:e2:
e9:0a:b9:fc:9b:06:54:90:dc:28:6d:94:99:a3:58:41:72:ee:
25:e4:18:38:56:4f:15:e2:61:61:89:3e:18:a1:b7:3e:0f:57:
6b:d6:db:60:b2:b1:ef:6f:ef:c1:1a:b0:cc:66:66:29:20:d5:
4a:8f:2a:35:22:0d:f6:4f:ed:98:16:12:cd:c1:02:38:7b:3a:
4c:86:ed:9a:01:e2:8f:05:cf:1c:c6:da:95:3f:74:61:57:a9:
3c:26:fd:98:14:f6:6f:e3:91:72:1d:34:88:6f:dd:98:ae:97:
97:12:de:5e:ce:e7:38:ce:ef:1f:98:b6:a9:89:02:8e:b8:2c:
81:43:36:70:08:f7:b6:74:60:82:83:fb:98:67:ee:4d:73:43:
34:1e:04:ce:e3:37:e9:b9:d1:f6:f2:9a:0f:6b:8b:07:43:54:
03:0b:a3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luoTjBI/0WnNW3i8Msn41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5
YjQ4OGEwHhcNMjYwMzI1MTYwMTEzWhcNMjYwMzI2MTYwMTEzWjAzMTEwLwYDVQQD
EyhkZTAyZGE1ODVlZDkxMzY3OWFjODA4ZDRmZTllMmEyNDlhYjA0ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA/81v3RoSkyVW0kH6M1ZGV39ld6
GXh4lBpzQoWOy9LqU5V6y9AXFNuhrZjEsbGJ+eFUIqEexjrEzRn9uQ56FPXORyQs
VwzMBITLKr7aePNH5r7u8nkedGWNhWwbCeCBiQn3GGsVTU3vo93A6nDFZByHkOzq
HPl8c6sqT78yf3Yan08wo3/SUx1XddKjENc4/p46DJ1qYOzFqVA+HXp+0AJqpvbh
hcwpduG+oO6D3+/RgBijOS9g7WQthOA80fbNGsd9vr7PxzbDo8SWuFO/tHEycalK
G8dI9W3rL4qlATPc0TiI0pHSrDrGUo7h4zaMBSt7gqozqHM8EZ5A06xCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4C2lhe2RNnmsgI1P6eKiSasE1qMB8GA1UdIwQY
MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt
ODJlMmQ1ZWU5YzkwLzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw
LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuaGkrp7
V2e5xmSEgMk6bYa4p1xX+0LGouX+o6rhh0hGza1uq6nEbb92TkoaLhMY74aFdCgw
tCpqLHWT0ogoEo3xuvXEdApwrCI+Bn/bHKUJZstodxTjklni6Qq5/JsGVJDcKG2U
maNYQXLuJeQYOFZPFeJhYYk+GKG3Pg9Xa9bbYLKx72/vwRqwzGZmKSDVSo8qNSIN
9k/tmBYSzcECOHs6TIbtmgHijwXPHMbalT90YVepPCb9mBT2b+ORch00iG/dmK6X
lxLeXs7nOM7vH5i2qYkCjrgsgUM2cAj3tnRggoP7mGfuTXNDNB4EzuM36bnR9vKa
D2uLB0NUAwuj1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:07 2026 by rpki-client