Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: vBzwVbKpdoH9Q6QDAy1EQU0kvM5Bx9cm/KTwIlt8+aI=
Subject key identifier: 3F:E1:DF:CA:8F:C4:F4:BF:46:72:61:C9:1D:71:17:49:FC:7D:81:51
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 01A00093F0793789AF57D4B4D9685675D822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 14:01:30 +0000
Manifest this update: Fri 14 Aug 2026 14:01:30 +0000
Manifest next update: Sat 15 Aug 2026 14:01:30 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: eVKstupY4I5Q90ZKNNrvL+FOUl+7F/tCPCoowhnBZUU=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:f0:79:37:89:af:57:d4:b4:d9:68:56:75:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Aug 14 14:01:30 2026 GMT
Not After : Aug 15 14:01:30 2026 GMT
Subject: CN=3fe1dfca8fc4f4bf467261c91d711749fc7d8151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:ab:6a:72:ae:75:75:49:b2:9e:12:09:52:
d6:d8:5f:42:b3:7e:c1:37:d4:f7:6d:5a:35:65:1c:
8c:17:0e:bc:54:c6:1c:27:2f:64:bc:3f:64:e9:cd:
97:8d:a3:e4:f9:3f:9f:e6:9f:ac:54:78:f7:a7:ba:
74:14:d9:2c:d3:35:8a:2c:e7:3e:03:03:95:33:aa:
50:5f:18:c8:60:95:e3:1d:87:38:ce:25:0b:db:45:
47:d7:f9:cf:f8:39:66:bf:8a:ab:9c:cb:f6:69:1a:
b9:fe:c6:81:db:10:ca:2f:5c:d7:c5:33:49:98:22:
6e:da:0b:2a:5b:a8:a2:00:d6:7b:0b:69:d9:b2:e6:
47:61:3a:28:4e:db:d7:42:3b:34:00:a4:43:0d:d2:
78:78:3c:92:a7:7e:2a:48:a7:13:87:e5:7a:87:a8:
bc:89:74:ac:d2:1e:f0:9e:19:f0:b9:6e:49:82:da:
64:67:05:24:ef:5b:37:74:11:42:da:c6:cd:53:87:
30:86:f5:13:73:e4:16:12:43:70:d0:56:84:83:21:
17:2a:5c:53:af:a1:00:cb:cb:64:d7:c7:99:47:78:
d5:43:da:f8:91:fc:db:cd:82:74:8f:b4:15:02:5a:
88:77:5b:f9:3f:b4:27:4a:6f:c6:8a:d4:a9:7e:d1:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:DF:CA:8F:C4:F4:BF:46:72:61:C9:1D:71:17:49:FC:7D:81:51
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:51:41:f9:9f:b1:3b:88:19:77:48:3a:5c:e4:8f:62:ce:
32:e3:be:31:1b:d7:7c:8e:12:58:9a:57:ab:2a:0d:33:db:03:
7b:8a:6e:f4:24:c8:f1:69:4a:61:65:38:15:fd:e2:e6:69:8b:
52:ae:22:69:c4:50:42:dc:9b:f1:2e:8c:7b:84:67:3f:4e:1b:
20:da:5f:41:f7:af:0f:a7:6a:04:ef:6a:d2:6e:90:fd:55:43:
31:47:90:56:80:f7:19:b0:87:b1:4e:5b:a9:e3:de:ba:41:84:
2d:7c:46:2a:40:6d:e9:a3:b0:c4:54:8c:d3:67:f6:76:a1:78:
b8:31:df:eb:0a:92:e6:54:02:59:9a:bd:ab:9f:8a:70:fa:e4:
85:c7:67:a2:54:c8:00:b2:02:16:90:cd:fd:cc:13:68:4a:ec:
bc:18:78:08:7c:10:49:83:54:42:93:28:dd:ef:31:b6:da:1d:
fb:d0:5a:06:2b:f9:ed:a9:ac:2a:ee:10:37:f8:60:97:4b:34:
8b:36:18:4b:4c:33:9c:63:d7:1b:bd:17:06:e3:2d:9d:b5:cb:
b3:a2:f1:96:9d:f2:c6:37:e1:92:63:6f:d1:68:84:38:84:06:
95:76:c3:46:f5:9a:63:cb:90:ed:f3:a0:1e:16:75:85:c5:6d:
61:88:85:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk/B5N4mvV9S02WhWddgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1
NTM1MzMwHhcNMjYwODE0MTQwMTMwWhcNMjYwODE1MTQwMTMwWjAzMTEwLwYDVQQD
EygzZmUxZGZjYThmYzRmNGJmNDY3MjYxYzkxZDcxMTc0OWZjN2Q4MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznCranKudXVJsp4SCVLW2F9Cs37B
N9T3bVo1ZRyMFw68VMYcJy9kvD9k6c2XjaPk+T+f5p+sVHj3p7p0FNks0zWKLOc+
AwOVM6pQXxjIYJXjHYc4ziUL20VH1/nP+Dlmv4qrnMv2aRq5/saB2xDKL1zXxTNJ
mCJu2gsqW6iiANZ7C2nZsuZHYTooTtvXQjs0AKRDDdJ4eDySp34qSKcTh+V6h6i8
iXSs0h7wnhnwuW5JgtpkZwUk71s3dBFC2sbNU4cwhvUTc+QWEkNw0FaEgyEXKlxT
r6EAy8tk18eZR3jVQ9r4kfzbzYJ0j7QVAlqId1v5P7QnSm/GitSpftEh6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/h38qPxPS/RnJhyR1xF0n8fYFRMB8GA1UdIwQY
MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt
MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl
LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBVRQfmf
sTuIGXdIOlzkj2LOMuO+MRvXfI4SWJpXqyoNM9sDe4pu9CTI8WlKYWU4Ff3i5mmL
Uq4iacRQQtyb8S6Me4RnP04bINpfQfevD6dqBO9q0m6Q/VVDMUeQVoD3GbCHsU5b
qePeukGELXxGKkBt6aOwxFSM02f2dqF4uDHf6wqS5lQCWZq9q5+KcPrkhcdnolTI
ALICFpDN/cwTaErsvBh4CHwQSYNUQpMo3e8xttod+9BaBiv57amsKu4QN/hgl0s0
izYYS0wznGPXG70XBuMtnbXLs6Lxlp3yxjfhkmNv0WiEOIQGlXbDRvWaY8uQ7fOg
HhZ1hcVtYYiFuQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:56 2026 by rpki-client