Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier: h9jxLXNAJDoM7rgDZ8QoCUuS1sqP03RNdn45xHF5pcY=
Subject key identifier: C2:4A:00:BD:95:7D:ED:CC:55:14:9A:20:B3:64:F4:FD:DA:41:15:F5
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial: 019D2A725F6ED1065E9460EC4F1BC39536EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number: 0824
Signing time: Thu 26 Mar 2026 14:00:31 +0000
Manifest this update: Thu 26 Mar 2026 14:00:31 +0000
Manifest next update: Fri 27 Mar 2026 14:00:31 +0000
Files and hashes: 1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: cI72LtajjtWdZ7UuFRo6YzqQXwdqLiOkBGEBiiUKMjw=)
2: b4Ahv2Rp9bxG7wcFPklnJREK0b0.roa (hash: KQEo13dywO1eXsbu0WPKOMTBSK6OIgfZ6KB0hgpviHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5f:6e:d1:06:5e:94:60:ec:4f:1b:c3:95:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e994e74064158e97904990947510eb9941986ca1
Validity
Not Before: Mar 26 14:00:31 2026 GMT
Not After : Mar 27 14:00:31 2026 GMT
Subject: CN=c24a00bd957dedcc55149a20b364f4fdda4115f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:db:89:96:5d:35:9d:bb:28:ee:10:cc:0e:
1e:ea:96:82:73:f5:9f:20:58:11:59:8d:41:2e:7b:
2d:c5:c7:54:18:66:e2:28:f8:77:1b:7a:a7:f3:86:
2c:99:e1:4a:73:1f:2c:85:d2:07:28:b4:6e:e2:d7:
85:5a:f4:2d:12:07:b3:71:84:63:ab:49:49:27:3c:
40:0a:af:dc:8b:41:77:81:0d:21:83:a5:48:94:f4:
1b:50:cf:eb:ab:1f:78:ac:4b:6b:da:ef:81:3f:a7:
0c:03:5d:7e:e7:44:e8:2c:41:2f:01:37:91:81:db:
ae:a5:57:1e:34:56:d2:7b:49:2a:9b:fc:31:1b:6b:
12:42:90:8e:73:68:d0:74:bf:04:9a:b3:7e:a4:8a:
3c:2d:87:3d:9a:78:d3:83:86:92:75:75:0f:ce:1f:
ad:7f:dd:8c:96:93:08:fd:3d:b2:c2:28:ba:50:bf:
1a:18:aa:a9:4d:a2:bc:fc:a5:38:ba:71:eb:0c:36:
83:5a:24:14:92:ec:a7:5c:48:4b:3c:00:9c:3c:5a:
d3:2f:08:50:e6:0a:23:49:89:72:9c:2e:22:27:d6:
00:54:d5:7c:c7:d3:6a:3f:d9:35:51:00:4d:a3:0e:
ad:db:41:f2:9a:47:7a:97:cf:29:11:89:b7:b4:f2:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:00:BD:95:7D:ED:CC:55:14:9A:20:B3:64:F4:FD:DA:41:15:F5
X509v3 Authority Key Identifier:
keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:fd:1a:64:68:b7:c4:3f:6f:6f:27:ba:20:df:95:91:cb:
1d:de:df:e1:63:67:22:7e:91:ca:b3:4d:b9:ac:00:e9:ed:5d:
d5:ed:57:b8:ee:68:5e:a6:d4:a0:3a:30:1d:c6:d4:74:82:16:
68:91:c5:d4:2c:23:1f:84:df:a1:69:52:94:e5:b1:4e:59:52:
2e:b8:a8:59:b8:c3:e7:64:66:d9:1e:0a:a8:cf:6d:88:fe:56:
eb:34:c5:e1:43:dc:f7:35:40:ae:90:7a:1b:3d:8f:0d:a1:e0:
2a:d7:0d:68:32:b7:6b:50:d0:8f:91:7c:bd:cc:96:c8:b7:be:
c5:84:e3:8b:0c:dd:6d:62:cb:32:c7:be:eb:ad:f7:89:2b:03:
71:97:f6:83:da:67:10:39:0f:94:23:46:10:99:9c:be:b0:29:
66:ce:8c:b7:52:a5:5b:e4:bf:61:23:c6:4b:02:83:f8:66:e1:
cd:7a:b1:a4:67:b4:50:16:a2:19:ac:58:19:4d:7c:f4:34:33:
56:24:5c:fd:fe:d4:68:d1:f1:43:f5:18:f4:d7:57:69:2b:28:
a7:bb:4f:8e:44:df:dc:b7:ca:2a:71:f9:f4:e1:45:04:d9:61:
3f:61:fb:b2:1b:f9:f0:2b:2d:d2:6f:93:dc:32:ac:d7:66:ca:
95:55:c1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcl9u0QZelGDsTxvDlTbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTRlNzQwNjQxNThlOTc5MDQ5OTA5NDc1MTBlYjk5NDE5
ODZjYTEwHhcNMjYwMzI2MTQwMDMxWhcNMjYwMzI3MTQwMDMxWjAzMTEwLwYDVQQD
EyhjMjRhMDBiZDk1N2RlZGNjNTUxNDlhMjBiMzY0ZjRmZGRhNDExNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdfbiZZdNZ27KO4QzA4e6paCc/Wf
IFgRWY1BLnstxcdUGGbiKPh3G3qn84YsmeFKcx8shdIHKLRu4teFWvQtEgezcYRj
q0lJJzxACq/ci0F3gQ0hg6VIlPQbUM/rqx94rEtr2u+BP6cMA11+50ToLEEvATeR
gduupVceNFbSe0kqm/wxG2sSQpCOc2jQdL8EmrN+pIo8LYc9mnjTg4aSdXUPzh+t
f92MlpMI/T2ywii6UL8aGKqpTaK8/KU4unHrDDaDWiQUkuynXEhLPACcPFrTLwhQ
5gojSYlynC4iJ9YAVNV8x9NqP9k1UQBNow6t20Hymkd6l88pEYm3tPJIwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJKAL2Vfe3MVRSaILNk9P3aQRX1MB8GA1UdIwQY
MBaAFOmU50BkFY6XkEmQlHUQ65lBmGyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEt
MzYyMGNlZmNjNzI0LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEtMzYyMGNlZmNjNzI0
LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlh/9GmRo
t8Q/b28nuiDflZHLHd7f4WNnIn6RyrNNuawA6e1d1e1XuO5oXqbUoDowHcbUdIIW
aJHF1CwjH4TfoWlSlOWxTllSLrioWbjD52Rm2R4KqM9tiP5W6zTF4UPc9zVArpB6
Gz2PDaHgKtcNaDK3a1DQj5F8vcyWyLe+xYTjiwzdbWLLMse+6633iSsDcZf2g9pn
EDkPlCNGEJmcvrApZs6Mt1KlW+S/YSPGSwKD+GbhzXqxpGe0UBaiGaxYGU189DQz
ViRc/f7UaNHxQ/UY9NdXaSsop7tPjkTf3LfKKnH59OFFBNlhP2H7shv58Cst0m+T
3DKs12bKlVXBvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:40 2026 by rpki-client