Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: m8HQD1i+gmhs1yzfmkoiG7DxwASouFtA6O0sQb36nbc=
Subject key identifier: 22:26:3A:88:F0:F6:1B:06:64:24:0F:0C:14:11:AA:65:16:9B:E1:20
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019DDF1F1D8024E1A1B20FA0E1672D8263A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 18E5
Signing time: Thu 30 Apr 2026 16:00:51 +0000
Manifest this update: Thu 30 Apr 2026 16:00:51 +0000
Manifest next update: Fri 01 May 2026 16:00:51 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: 2dDXDzcktwBETiWBinKFMLphglPrMWi7RE3FpAtRLqc=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:1f:1d:80:24:e1:a1:b2:0f:a0:e1:67:2d:82:63:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Apr 30 16:00:51 2026 GMT
Not After : May 1 16:00:51 2026 GMT
Subject: CN=22263a88f0f61b0664240f0c1411aa65169be120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:99:0a:01:a1:e9:55:ad:e8:69:ac:2b:e9:
1a:b3:ad:f7:54:38:94:82:cd:93:74:cb:53:d2:66:
5f:b5:38:77:57:c0:27:da:aa:2d:67:99:97:22:b6:
1d:16:18:78:05:1a:e9:46:a0:4e:2d:dc:67:9c:9a:
9c:d2:c5:b9:76:00:99:30:18:53:1d:92:b1:f0:1d:
64:d5:22:35:b1:9a:d8:0f:9e:ae:e3:93:87:ac:14:
a0:87:60:1f:d8:0d:32:c6:e4:2e:cb:c2:f9:ec:08:
f8:94:78:34:0c:03:0d:5a:7c:1b:1d:16:bd:e7:2d:
35:6f:e3:03:fc:13:32:3c:ec:2a:c9:db:38:fa:05:
a5:fd:9a:e0:25:8b:ee:d5:30:3a:21:9a:34:43:0c:
98:7e:c0:10:e3:2f:3a:40:53:79:d4:b1:b6:8c:56:
b0:53:fa:98:0c:bd:17:0c:e2:ab:e2:ad:e2:a9:ca:
8f:a8:7e:1e:0c:42:52:6b:57:33:51:eb:3b:bb:6a:
d4:e3:12:ae:f1:22:49:c7:a7:2e:ba:cb:c6:9e:91:
8f:ce:f2:f5:8c:07:a0:f2:87:81:94:c0:15:c5:6d:
76:02:c3:7d:96:0f:b5:7e:7e:00:4b:a6:e0:58:93:
88:91:79:6a:58:12:be:60:ab:b5:4a:91:5d:72:e3:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:3A:88:F0:F6:1B:06:64:24:0F:0C:14:11:AA:65:16:9B:E1:20
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ff:e2:36:ab:7e:e6:ca:bf:bf:0d:1c:c3:5e:6f:ca:9e:07:
ca:21:82:ce:cd:35:93:be:7f:30:76:6d:53:01:35:00:56:1d:
d2:4f:1b:39:70:88:d9:35:7a:b3:04:d9:4a:93:8e:37:d7:51:
e7:dc:c0:dd:6b:dc:fc:f2:1f:f4:4e:2a:c8:d2:6e:0b:56:76:
56:4e:b5:19:b6:b7:67:07:bb:cc:66:d9:47:15:e5:78:af:34:
12:0a:48:ac:85:fe:a8:5e:d1:e2:03:4d:22:86:c2:8a:35:ab:
97:7e:ab:bf:a1:38:b9:da:0e:d8:93:c5:10:19:8a:f8:03:ef:
bf:e1:36:28:16:e2:52:13:e8:c0:1b:42:13:07:c7:d5:45:d9:
58:4b:c3:81:9f:5d:2e:b7:9d:d6:81:97:27:24:62:fa:4a:60:
08:23:63:71:6d:0e:ad:03:8f:80:41:b1:2e:83:57:5c:18:7e:
b7:61:bb:06:13:b1:4a:06:c8:87:0c:3e:79:80:33:21:14:b7:
1b:3c:66:9c:c4:86:b5:1a:be:e1:32:7d:5b:16:b3:20:14:44:
7f:bd:e0:d8:6c:8a:a9:44:6c:f4:a4:48:a4:d8:b1:77:e1:d7:
32:2b:95:57:3c:bb:9b:1f:12:31:7f:82:d0:1e:97:7f:22:b7:
21:c9:1d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3fHx2AJOGhsg+g4WctgmOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjYwNDMwMTYwMDUxWhcNMjYwNTAxMTYwMDUxWjAzMTEwLwYDVQQD
EygyMjI2M2E4OGYwZjYxYjA2NjQyNDBmMGMxNDExYWE2NTE2OWJlMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CeZCgGh6VWt6GmsK+kas633VDiU
gs2TdMtT0mZftTh3V8An2qotZ5mXIrYdFhh4BRrpRqBOLdxnnJqc0sW5dgCZMBhT
HZKx8B1k1SI1sZrYD56u45OHrBSgh2Af2A0yxuQuy8L57Aj4lHg0DAMNWnwbHRa9
5y01b+MD/BMyPOwqyds4+gWl/ZrgJYvu1TA6IZo0QwyYfsAQ4y86QFN51LG2jFaw
U/qYDL0XDOKr4q3iqcqPqH4eDEJSa1czUes7u2rU4xKu8SJJx6cuusvGnpGPzvL1
jAeg8oeBlMAVxW12AsN9lg+1fn4AS6bgWJOIkXlqWBK+YKu1SpFdcuNuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCImOojw9hsGZCQPDBQRqmUWm+EgMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv/iNqt+
5sq/vw0cw15vyp4HyiGCzs01k75/MHZtUwE1AFYd0k8bOXCI2TV6swTZSpOON9dR
59zA3Wvc/PIf9E4qyNJuC1Z2Vk61Gba3Zwe7zGbZRxXleK80EgpIrIX+qF7R4gNN
IobCijWrl36rv6E4udoO2JPFEBmK+APvv+E2KBbiUhPowBtCEwfH1UXZWEvDgZ9d
Lred1oGXJyRi+kpgCCNjcW0OrQOPgEGxLoNXXBh+t2G7BhOxSgbIhww+eYAzIRS3
GzxmnMSGtRq+4TJ9WxazIBREf73g2GyKqURs9KRIpNixd+HXMiuVVzy7mx8SMX+C
0B6XfyK3Ickdiw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 21:23:11 2026 by rpki-client