Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier: +plSFP33vt587YkwkAsYpUt34w8lHvxuqWGxtFVZNUc=
Subject key identifier: 3B:12:25:74:46:85:29:92:A6:3B:6A:A7:D2:64:98:6F:2D:DF:F3:82
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial: 01A0F15551E317576D5590517F2799172E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number: 0847
Signing time: Wed 30 Sep 2026 08:01:35 +0000
Manifest this update: Wed 30 Sep 2026 08:01:35 +0000
Manifest next update: Thu 01 Oct 2026 08:01:35 +0000
Files and hashes: 1: 1-hCFLvXnlcGeRkLLraBxfeqwVKQ.roa (hash: yaa7MHl2uq4KHtwM7wFgaYaK3uWGCIuI9HybZXAG2wM=)
2: 3Ez-EhZpn71NbxDAUA0jy4ec8G8.asa (hash: caKymZGkDDUuzDgk4rI9CXZLSDx0iBS4U0dsvSmEljQ=)
3: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: EMLkcTYLFhZAfr4L6IJShmElETyBZebUJaOkDOyq7EM=)
4: C8ER0RRJQnuzfF0-8I_ZWFmJWH4.roa (hash: YzvZzOnFDMIuCSDyv65Ylm05a00Y7llux3gDDzFYJ0w=)
5: EQk94cHvnErnoie7u844D3sVCWo.roa (hash: H4OWSOagFUNX4MuWTQWafvSfmnsnQWIg36VdYvJq/wA=)
6: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (hash: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY=)
7: X-_TS1I4t-DVqUxoc-khUSm_viU.roa (hash: ODLd3VbptYoQMKlYYBjJpRqUDy9+T6ytXSUAIjxuWLg=)
8: k4uRfVLkiFx02imsmzFdIo0Ou9I.roa (hash: 9rPMDuoX5kSVG70I/Za6IhaLgJW41gakMpsQjx7kJlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:51:e3:17:57:6d:55:90:51:7f:27:99:17:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Validity
Not Before: Sep 30 08:01:35 2026 GMT
Not After : Oct 1 08:01:35 2026 GMT
Subject: CN=3b12257446852992a63b6aa7d264986f2ddff382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:9f:4d:ec:93:ee:69:75:60:c8:8f:02:9b:
68:f6:70:42:14:41:b3:09:c7:e8:4a:1c:bd:11:f3:
80:a1:f1:06:7c:50:e9:ba:bc:07:01:c7:af:49:d3:
49:21:dd:78:a8:54:85:34:e3:9e:c7:8b:d0:cb:e8:
f2:ac:5a:b2:9c:20:0b:5f:65:83:45:4b:b4:5d:fc:
2b:9b:e7:4e:b9:9c:cb:3a:c7:d7:58:ac:92:53:c2:
be:45:18:d6:27:03:ea:77:fc:6c:c4:46:13:8b:d7:
1b:35:80:61:14:d5:35:ff:e2:09:1f:11:24:a7:51:
71:31:1a:67:9f:70:7c:e4:dd:c0:71:e6:40:01:0a:
19:50:c7:6f:43:eb:b4:29:dc:c8:33:3a:23:0f:78:
af:87:4b:ef:69:ae:69:db:ee:be:cf:7c:09:2c:41:
11:2f:a4:59:49:57:09:27:98:62:8e:24:f5:c2:50:
3c:fb:a5:d5:77:5a:f1:54:99:f9:b1:1c:eb:9f:33:
79:11:51:8b:42:f0:33:c8:69:81:05:ea:7b:82:5e:
26:2f:11:40:bc:b5:7a:7e:d3:87:0f:ff:a6:c3:82:
9d:69:6a:ce:6e:72:83:f8:36:75:fc:bb:67:97:fb:
a2:59:5e:c7:c4:9d:ca:1b:4e:04:1a:63:e3:49:d3:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:25:74:46:85:29:92:A6:3B:6A:A7:D2:64:98:6F:2D:DF:F3:82
X509v3 Authority Key Identifier:
keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7b:09:81:6c:83:00:a9:66:c6:51:75:9a:6e:d2:5a:c1:7d:
d5:4b:8b:86:64:db:3b:fc:aa:d8:4d:a8:56:16:68:e6:3f:fc:
a1:7d:db:4a:a8:2f:a6:6f:b9:62:c9:9a:ae:2c:f0:c3:c5:af:
ca:e6:a1:8e:b9:c7:56:6b:3a:55:71:8d:a6:89:48:c4:77:58:
e4:c4:ea:d4:82:8a:fa:d6:c5:ec:6f:c8:7a:cd:68:5b:45:09:
e2:fe:21:37:93:3b:06:ce:f7:e9:be:65:a7:0b:69:8d:0f:8f:
47:a1:87:34:e1:bc:ce:04:a1:4b:54:08:66:16:8d:80:36:8f:
55:c8:14:21:19:49:e3:1a:28:8a:ed:b4:83:3d:c8:d7:b0:37:
59:68:78:d4:9b:35:b9:ac:7b:d7:6c:6d:ef:f7:a7:63:c1:48:
f7:8e:8e:8c:68:cd:03:bc:e5:69:4e:ad:6b:3e:9a:77:af:04:
a3:cb:81:b2:25:78:b3:e2:73:59:83:7d:31:60:ec:f5:d5:7a:
45:0d:5a:96:be:87:f1:1d:59:1b:bd:14:0b:65:38:a8:33:2f:
fe:bb:4e:37:61:83:9f:d6:e2:b5:72:21:a0:8d:a9:7e:52:ad:
44:b9:84:6f:94:92:b6:a8:9f:3d:a3:d3:c5:3e:5b:f4:20:07:
ff:08:c0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxVVHjF1dtVZBRfyeZFy5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj
MjVhNjYwHhcNMjYwOTMwMDgwMTM1WhcNMjYxMDAxMDgwMTM1WjAzMTEwLwYDVQQD
EygzYjEyMjU3NDQ2ODUyOTkyYTYzYjZhYTdkMjY0OTg2ZjJkZGZmMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI+fTeyT7ml1YMiPApto9nBCFEGz
CcfoShy9EfOAofEGfFDpurwHAcevSdNJId14qFSFNOOex4vQy+jyrFqynCALX2WD
RUu0Xfwrm+dOuZzLOsfXWKySU8K+RRjWJwPqd/xsxEYTi9cbNYBhFNU1/+IJHxEk
p1FxMRpnn3B85N3AceZAAQoZUMdvQ+u0KdzIMzojD3ivh0vvaa5p2+6+z3wJLEER
L6RZSVcJJ5hijiT1wlA8+6XVd1rxVJn5sRzrnzN5EVGLQvAzyGmBBep7gl4mLxFA
vLV6ftOHD/+mw4KdaWrObnKD+DZ1/Ltnl/uiWV7HxJ3KG04EGmPjSdNkbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsSJXRGhSmSpjtqp9JkmG8t3/OCMB8GA1UdIwQY
MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt
NTBkZDNhNTgxNTRiLzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi
LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAensJgWyD
AKlmxlF1mm7SWsF91UuLhmTbO/yq2E2oVhZo5j/8oX3bSqgvpm+5Ysmarizww8Wv
yuahjrnHVms6VXGNpolIxHdY5MTq1IKK+tbF7G/Ies1oW0UJ4v4hN5M7Bs736b5l
pwtpjQ+PR6GHNOG8zgShS1QIZhaNgDaPVcgUIRlJ4xooiu20gz3I17A3WWh41Js1
uax712xt7/enY8FI946OjGjNA7zlaU6taz6ad68Eo8uBsiV4s+JzWYN9MWDs9dV6
RQ1alr6H8R1ZG70UC2U4qDMv/rtON2GDn9bitXIhoI2pflKtRLmEb5SStqifPaPT
xT5b9CAH/wjA3Q==
-----END CERTIFICATE-----
Generated at Wed Sep 30 12:07:07 2026 by rpki-client