Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: zKrCJsq82bN8fLRI1Q7Cib0mK3UT9jd536o/2Rtnt0c=
Subject key identifier: 91:E7:37:F7:8B:18:DB:E1:FE:72:9B:38:FD:F8:0C:85:20:06:BD:48
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 019D390A1C3069AD2F77C252E79CC471DEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0F66
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: 6qcrdhxsXntUBfmqIofqw1-iJPY.roa (hash: GiOc4UHObExccKeqBRzv/DUsn92kIZYjDxqeAxX9Y0Q=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: jU4rjMdlrua0CKzOusRGzMVBuvZLyRDh4+owfjlh+oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1c:30:69:ad:2f:77:c2:52:e7:9c:c4:71:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=91e737f78b18dbe1fe729b38fdf80c852006bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:40:a7:7f:d3:30:ab:c8:8b:83:1c:d8:71:
01:74:27:c3:0b:36:3c:2f:a3:18:10:56:1b:d9:f2:
16:b5:75:22:a9:fc:38:81:0f:92:fc:14:f1:23:b4:
94:c5:ef:9d:c4:a5:d8:34:cb:12:aa:9f:87:ab:d9:
a9:70:0d:e7:6f:53:f2:8e:4f:26:c5:7f:6f:9b:42:
a9:e8:18:75:3d:c4:71:91:86:18:36:e5:98:4d:70:
c9:37:2b:6c:96:ec:4d:a7:bb:81:df:b2:49:1a:95:
8f:9d:44:a5:d2:5c:12:b6:03:0d:cc:91:04:8c:a4:
24:c0:3f:4c:d6:de:1f:72:af:fc:57:f7:30:5c:b3:
46:2f:c0:6d:57:7a:c9:c9:c9:f0:e1:a8:c2:a1:70:
2d:3b:d2:f5:54:ce:98:e5:6e:79:0c:9c:20:e0:0d:
90:a4:1a:40:ef:c9:2c:7b:be:21:62:d3:8f:50:c5:
71:1d:ab:ca:8c:f9:e1:dc:c2:95:2c:0c:e6:b2:3e:
78:2a:ae:bf:49:80:23:2d:89:c1:a9:a0:ea:ed:aa:
82:b7:d9:7c:57:9f:0c:31:ee:2c:9c:ea:db:f0:51:
6e:f3:fa:f8:28:8b:94:80:6a:4e:0e:60:db:5c:ec:
34:d5:31:04:d3:2d:fb:8e:7f:36:62:6e:6a:91:77:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:37:F7:8B:18:DB:E1:FE:72:9B:38:FD:F8:0C:85:20:06:BD:48
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:33:3e:5a:35:8e:af:f3:e0:81:9a:37:26:26:08:4e:68:
a9:6a:2d:90:0d:83:7d:4f:10:1e:20:92:26:9f:8d:bc:03:76:
45:43:47:16:7b:02:08:b3:c7:05:f0:a5:15:3c:2e:63:90:d5:
48:f3:71:e8:d9:c9:fd:a2:98:79:43:b8:98:b3:9b:09:48:e8:
ab:78:b9:bc:c7:5a:f7:d6:40:12:1d:36:c0:f1:eb:8a:dd:ab:
8c:12:be:50:1f:db:21:e0:e8:6c:db:3a:db:4e:bf:e3:e7:38:
21:46:f8:89:68:90:a8:ea:21:7a:7a:30:0f:de:72:37:bd:6e:
22:64:d2:ce:05:72:f9:96:c0:5a:ec:64:0b:5e:03:3f:ee:1a:
21:fa:1e:26:c0:87:bc:38:8d:0a:10:6d:56:5d:ad:eb:84:59:
ff:77:50:ee:af:02:ea:54:b9:48:a7:27:75:cc:f9:07:1a:eb:
23:16:7c:fd:e0:9e:13:61:fd:17:e8:a8:fa:c6:81:50:14:86:
1e:ba:32:a0:42:d6:0f:d7:72:05:e6:30:1b:87:12:a9:20:af:
57:11:4f:d6:b2:93:b5:7a:1e:e9:ae:78:53:ed:d4:b0:48:6d:
ba:e6:ff:56:3c:56:17:38:f2:8c:38:ee:e7:b1:3e:83:e9:83:
4f:f1:69:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Chwwaa0vd8JS55zEcd6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy
NWNkOTkwHhcNMjYwMzI5MTAwMDU2WhcNMjYwMzMwMTAwMDU2WjAzMTEwLwYDVQQD
Eyg5MWU3MzdmNzhiMThkYmUxZmU3MjliMzhmZGY4MGM4NTIwMDZiZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ZAp3/TMKvIi4Mc2HEBdCfDCzY8
L6MYEFYb2fIWtXUiqfw4gQ+S/BTxI7SUxe+dxKXYNMsSqp+Hq9mpcA3nb1Pyjk8m
xX9vm0Kp6Bh1PcRxkYYYNuWYTXDJNytsluxNp7uB37JJGpWPnUSl0lwStgMNzJEE
jKQkwD9M1t4fcq/8V/cwXLNGL8BtV3rJycnw4ajCoXAtO9L1VM6Y5W55DJwg4A2Q
pBpA78kse74hYtOPUMVxHavKjPnh3MKVLAzmsj54Kq6/SYAjLYnBqaDq7aqCt9l8
V58MMe4snOrb8FFu8/r4KIuUgGpODmDbXOw01TEE0y37jn82Ym5qkXcCbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHnN/eLGNvh/nKbOP34DIUgBr1IMB8GA1UdIwQY
MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt
OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4
LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDwzPlo1
jq/z4IGaNyYmCE5oqWotkA2DfU8QHiCSJp+NvAN2RUNHFnsCCLPHBfClFTwuY5DV
SPNx6NnJ/aKYeUO4mLObCUjoq3i5vMda99ZAEh02wPHrit2rjBK+UB/bIeDobNs6
206/4+c4IUb4iWiQqOohenowD95yN71uImTSzgVy+ZbAWuxkC14DP+4aIfoeJsCH
vDiNChBtVl2t64RZ/3dQ7q8C6lS5SKcndcz5BxrrIxZ8/eCeE2H9F+io+saBUBSG
HroyoELWD9dyBeYwG4cSqSCvVxFP1rKTtXoe6a54U+3UsEhtuub/VjxWFzjyjDju
57E+g+mDT/Fp7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:10 2026 by rpki-client