Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier: iaPoLGep7IOn66d30jbsIzL0FCwllW01g7UalrC7XK0=
Subject key identifier: C6:AB:9C:2C:64:56:6D:9C:E1:8E:89:47:46:F2:AA:4F:35:43:AF:68
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial: 019DCDBDCF3AF5CB45C59A5BA898C5C39273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number: 1299
Signing time: Mon 27 Apr 2026 07:01:01 +0000
Manifest this update: Mon 27 Apr 2026 07:01:01 +0000
Manifest next update: Tue 28 Apr 2026 07:01:01 +0000
Files and hashes: 1: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (hash: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI=)
2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: 0bC+CZW9RO3ICA3j50pqU+Lh4vsNCbtsSKbmt0mnwn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:cf:3a:f5:cb:45:c5:9a:5b:a8:98:c5:c3:92:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Validity
Not Before: Apr 27 07:01:01 2026 GMT
Not After : Apr 28 07:01:01 2026 GMT
Subject: CN=c6ab9c2c64566d9ce18e894746f2aa4f3543af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:93:e9:c4:97:b8:46:e1:cd:0a:a1:31:66:
88:ea:f6:33:84:cb:7f:ad:a9:64:88:72:9c:71:8d:
6b:36:97:fa:c0:ac:6d:39:89:32:c2:06:65:a3:23:
2d:01:76:ac:b5:3f:5a:56:73:90:bf:c0:17:63:15:
40:69:df:8a:d7:80:8d:71:92:ee:98:d2:a8:cd:82:
59:0b:fe:ae:2f:2d:9b:85:0d:93:19:43:86:fd:97:
f0:25:11:94:7b:9d:92:62:86:c8:08:1d:cd:c7:40:
b0:6d:46:e2:d7:f1:8c:cc:25:41:21:ca:bb:7b:37:
02:11:cf:4c:8e:d6:94:f1:a3:88:53:80:ec:7f:0c:
88:d8:29:15:1e:87:1f:77:1a:86:e5:16:f4:b0:ff:
86:34:cb:a5:b4:f9:f8:57:fc:62:a3:85:ab:21:74:
d3:16:a2:06:b2:9c:30:0a:c9:b8:b5:c3:2e:ba:f8:
ca:38:25:33:33:78:5d:59:f6:d8:36:02:89:bd:9e:
f2:74:52:0e:58:6c:87:3a:69:84:ae:6d:35:67:d7:
96:b4:d8:39:ec:b9:7a:13:08:67:37:bb:e9:63:10:
ef:5b:d5:7b:03:3a:18:d3:ca:06:13:b9:b8:27:4b:
bf:d0:4b:8b:d8:bd:10:5a:a3:8e:52:fa:d2:c4:fb:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:9C:2C:64:56:6D:9C:E1:8E:89:47:46:F2:AA:4F:35:43:AF:68
X509v3 Authority Key Identifier:
keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e5:a7:6f:cb:b1:24:19:82:8e:8d:d6:61:3e:cc:08:a3:c8:
68:b9:a6:39:91:c3:50:89:df:93:80:cd:a9:85:5f:5d:8d:25:
5d:c7:2e:53:93:0d:d3:7d:cb:91:6e:45:15:29:fe:af:54:cb:
3d:4c:71:21:64:9b:35:a1:85:dd:57:3e:b0:65:4a:34:be:50:
f2:14:09:59:9f:74:c1:9c:d7:c3:57:2c:77:c2:01:15:a9:68:
b0:f6:52:b4:b8:66:4e:e5:83:d0:7e:6c:26:3f:47:d9:8d:76:
01:15:39:80:8e:bd:59:5d:e8:bf:de:b4:56:13:40:05:a5:d8:
00:aa:c5:03:4b:2e:97:ad:b3:e3:09:44:68:42:ea:58:ee:bb:
ae:de:14:6c:22:ee:d2:f6:f7:c7:71:b0:6c:e3:b5:ab:14:2b:
01:34:e0:aa:66:bf:66:93:69:61:39:5b:81:ca:b3:5c:fb:22:
7b:fb:88:a7:98:5c:46:17:b4:77:07:d2:87:60:73:7d:f0:6b:
7f:3e:a5:2f:ae:84:df:7e:39:f0:fb:9f:98:1e:6e:ec:5a:9a:
ae:3b:83:66:27:02:e4:dd:fa:42:30:65:f3:1b:4d:01:b9:fe:
53:21:33:38:72:df:55:17:fa:0c:7d:6d:36:e2:73:57:37:5e:
86:ba:8c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nvc869ctFxZpbqJjFw5JzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YTgyNDZmNzBhZTE4ZTczNmU0ZTUzOTgxNDgwZDU4NjE2
YWYyZTgwHhcNMjYwNDI3MDcwMTAxWhcNMjYwNDI4MDcwMTAxWjAzMTEwLwYDVQQD
EyhjNmFiOWMyYzY0NTY2ZDljZTE4ZTg5NDc0NmYyYWE0ZjM1NDNhZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y6T6cSXuEbhzQqhMWaI6vYzhMt/
ralkiHKccY1rNpf6wKxtOYkywgZloyMtAXastT9aVnOQv8AXYxVAad+K14CNcZLu
mNKozYJZC/6uLy2bhQ2TGUOG/ZfwJRGUe52SYobICB3Nx0CwbUbi1/GMzCVBIcq7
ezcCEc9MjtaU8aOIU4DsfwyI2CkVHocfdxqG5Rb0sP+GNMultPn4V/xio4WrIXTT
FqIGspwwCsm4tcMuuvjKOCUzM3hdWfbYNgKJvZ7ydFIOWGyHOmmErm01Z9eWtNg5
7Ll6EwhnN7vpYxDvW9V7AzoY08oGE7m4J0u/0EuL2L0QWqOOUvrSxPtkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMarnCxkVm2c4Y6JR0byqk81Q69oMB8GA1UdIwQY
MBaAFMeoJG9wrhjnNuTlOYFIDVhhavLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQt
ZTNkMjg2ZDIwZTUyLzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQtZTNkMjg2ZDIwZTUy
LzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuWnb8ux
JBmCjo3WYT7MCKPIaLmmOZHDUInfk4DNqYVfXY0lXccuU5MN033LkW5FFSn+r1TL
PUxxIWSbNaGF3Vc+sGVKNL5Q8hQJWZ90wZzXw1csd8IBFalosPZStLhmTuWD0H5s
Jj9H2Y12ARU5gI69WV3ov960VhNABaXYAKrFA0sul62z4wlEaELqWO67rt4UbCLu
0vb3x3GwbOO1qxQrATTgqma/ZpNpYTlbgcqzXPsie/uIp5hcRhe0dwfSh2BzffBr
fz6lL66E33458PufmB5u7FqarjuDZicC5N36QjBl8xtNAbn+UyEzOHLfVRf6DH1t
NuJzVzdehrqMjg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:12:03 2026 by rpki-client