Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: 6E6ZErR0hsVrjTBCTYnVLO5jmXB7qpP4deTXb2c3vbg=
Subject key identifier: 92:64:8F:86:7A:25:59:93:68:82:E4:2D:E6:92:A1:06:01:9A:A0:18
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 019D3752FBAC8994C4DF11964084012F25D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 1009
Signing time: Sun 29 Mar 2026 02:01:18 +0000
Manifest this update: Sun 29 Mar 2026 02:01:18 +0000
Manifest next update: Mon 30 Mar 2026 02:01:18 +0000
Files and hashes: 1: 61Tc_pSMqhnofPsV7DrPU_3IvV4.roa (hash: b1b/Y82gxJDN9f/iG4TCunLXSlk+6vM16ISqmCSzCXg=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: nXr7mg713D/RtgWzsrgk/A2ztr/+FF2zeN8UNuCzdo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:fb:ac:89:94:c4:df:11:96:40:84:01:2f:25:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Mar 29 02:01:18 2026 GMT
Not After : Mar 30 02:01:18 2026 GMT
Subject: CN=92648f867a2559936882e42de692a106019aa018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:0a:3e:40:ec:15:6f:f7:a9:f0:d0:99:38:
44:74:1c:d6:4e:50:9b:4c:bc:4a:de:c3:46:ec:d2:
35:b2:4a:13:da:94:82:ce:e8:ec:cc:0f:05:a5:05:
c8:07:ff:29:ef:25:bf:11:d4:8c:e7:2e:56:d1:c4:
b7:e5:e5:45:bf:7c:11:31:98:db:44:76:9e:f8:5c:
41:bc:65:6b:35:5c:00:18:f1:78:99:f1:0a:9d:6a:
db:fa:2e:af:7a:5e:b2:3c:2d:66:f7:90:61:e3:8f:
07:27:07:16:35:b5:18:35:92:fe:ba:37:b9:ad:2b:
e3:66:53:60:55:f6:94:da:ba:f5:0a:93:34:5b:77:
e0:85:ca:3c:b9:e8:fc:c4:63:ea:4b:2c:63:17:ae:
0e:ef:e5:2c:7d:0d:52:0f:cc:08:a9:94:b7:51:0b:
03:d6:cc:92:51:02:82:2f:95:fe:e6:c5:7e:31:a1:
f1:fd:bb:1a:d4:d1:99:6b:e4:8c:50:4c:c3:99:80:
09:58:a5:4f:ae:09:15:3c:a3:ca:e7:02:c4:32:20:
f4:bb:af:aa:5f:2d:78:30:92:99:bc:b8:8b:55:09:
d9:86:bd:50:c7:52:79:92:27:c9:36:34:ab:28:6b:
53:3f:7d:b1:cc:f5:e7:47:29:cf:5f:f6:48:0b:19:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:64:8F:86:7A:25:59:93:68:82:E4:2D:E6:92:A1:06:01:9A:A0:18
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8d:93:20:7d:8f:cc:1e:5e:04:0a:1d:07:d1:79:f7:46:25:
34:b1:6d:4b:2e:9c:84:9b:0c:ee:f6:19:cd:07:89:a2:c2:d3:
5a:95:b6:59:0a:75:a3:c9:11:19:be:a4:3b:14:63:b0:ae:9e:
23:06:7d:eb:62:55:11:38:2f:6b:e2:05:bd:b8:f5:dd:02:51:
9f:07:94:0e:a4:0f:e5:cd:e1:92:eb:6b:40:1c:30:a8:55:86:
cf:a6:b3:54:79:8e:9b:c0:1d:c7:4d:ed:d3:f9:59:1b:6c:0b:
cf:2f:5f:5e:7c:2d:17:8f:e5:01:7d:ac:fb:e1:b9:23:67:5c:
e2:0b:a4:79:79:40:4d:85:81:fb:86:d2:2f:6a:7f:ac:0f:62:
ad:13:e0:2a:48:0e:95:db:79:f9:44:c6:61:ba:fc:19:c3:84:
97:c4:a1:0e:b6:1a:48:f8:67:39:c4:be:fe:0b:d7:83:e3:1d:
d6:60:a4:73:83:50:97:98:b2:75:09:97:84:9c:87:fb:5a:ae:
c8:3d:58:9f:61:14:7c:f8:03:ee:a4:6a:12:dc:f7:18:92:34:
b7:ca:b6:7b:32:c4:39:f9:4f:bf:03:34:7f:44:24:75:ab:32:
e2:40:fd:68:41:8b:0a:c6:9b:89:62:ad:2b:05:ce:0b:1f:e2:
f2:e3:f8:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UvusiZTE3xGWQIQBLyXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTZmYTk5OWU4YTY3NGFhNTMzMmRlYjcxZjFiYWQwMjQ1
YzhkYzEwHhcNMjYwMzI5MDIwMTE4WhcNMjYwMzMwMDIwMTE4WjAzMTEwLwYDVQQD
Eyg5MjY0OGY4NjdhMjU1OTkzNjg4MmU0MmRlNjkyYTEwNjAxOWFhMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxUKPkDsFW/3qfDQmThEdBzWTlCb
TLxK3sNG7NI1skoT2pSCzujszA8FpQXIB/8p7yW/EdSM5y5W0cS35eVFv3wRMZjb
RHae+FxBvGVrNVwAGPF4mfEKnWrb+i6vel6yPC1m95Bh448HJwcWNbUYNZL+uje5
rSvjZlNgVfaU2rr1CpM0W3fghco8uej8xGPqSyxjF64O7+UsfQ1SD8wIqZS3UQsD
1sySUQKCL5X+5sV+MaHx/bsa1NGZa+SMUEzDmYAJWKVPrgkVPKPK5wLEMiD0u6+q
Xy14MJKZvLiLVQnZhr1Qx1J5kifJNjSrKGtTP32xzPXnRynPX/ZICxlNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJkj4Z6JVmTaILkLeaSoQYBmqAYMB8GA1UdIwQY
MBaAFDym+pmeimdKpTMt63HxutAkXI3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2Mt
MTUyYjBhYmQ3YzBjLzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2MtMTUyYjBhYmQ3YzBj
LzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH42TIH2P
zB5eBAodB9F590YlNLFtSy6chJsM7vYZzQeJosLTWpW2WQp1o8kRGb6kOxRjsK6e
IwZ962JVETgva+IFvbj13QJRnweUDqQP5c3hkutrQBwwqFWGz6azVHmOm8Adx03t
0/lZG2wLzy9fXnwtF4/lAX2s++G5I2dc4gukeXlATYWB+4bSL2p/rA9irRPgKkgO
ldt5+UTGYbr8GcOEl8ShDrYaSPhnOcS+/gvXg+Md1mCkc4NQl5iydQmXhJyH+1qu
yD1Yn2EUfPgD7qRqEtz3GJI0t8q2ezLEOflPvwM0f0Qkdasy4kD9aEGLCsabiWKt
KwXOCx/i8uP4cw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:35 2026 by rpki-client