Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: bcEQOVmLhlLh2eZxiHwNyDI/yIkDQ/OoD7LO8vMkp7M=
Subject key identifier: CE:06:F5:08:34:BC:82:E4:4A:87:9A:1F:E6:17:EF:5A:A0:73:C3:66
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 01A165D8EB8CD5FFB9E31BA5B29D9D3F23E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 06AA
Signing time: Thu 22 Oct 2026 23:01:16 +0000
Manifest this update: Thu 22 Oct 2026 23:01:16 +0000
Manifest next update: Fri 23 Oct 2026 23:01:16 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: 9WyWcbwipWBEMdYmMUeI/oiZtzNAlKYPRTBg8SxjjrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:d8:eb:8c:d5:ff:b9:e3:1b:a5:b2:9d:9d:3f:23:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Oct 22 23:01:16 2026 GMT
Not After : Oct 23 23:01:16 2026 GMT
Subject: CN=ce06f50834bc82e44a879a1fe617ef5aa073c366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:81:54:e1:12:a6:26:9e:f9:7e:c2:04:0b:
95:48:6d:c3:6d:65:97:72:13:27:a7:c7:d2:ec:da:
ed:31:a1:21:f5:a7:69:9b:f3:8d:3f:fa:df:d6:3e:
23:40:19:bd:75:f8:7c:15:c6:c3:9c:08:3f:9b:7d:
c7:2a:8c:99:1c:e9:b2:d7:dd:ee:59:a0:52:2c:22:
40:6d:be:98:fd:5a:1e:c3:91:d2:e0:98:88:0b:17:
98:ed:e8:70:6f:bc:40:8e:96:68:bc:58:9b:06:2d:
fe:79:72:ca:62:5c:17:19:a8:79:2f:60:56:92:94:
77:5e:8e:39:60:c5:9e:8b:33:7e:3a:16:76:9f:67:
93:9e:bc:70:e9:ae:2c:7c:3a:6b:4e:98:f4:ae:6c:
93:9f:f5:9c:ff:42:18:29:d1:ae:f3:02:7a:07:1c:
cc:b7:66:94:96:8e:57:6d:00:fe:03:9e:62:23:5d:
d4:1c:41:dd:05:cc:ec:01:69:55:03:a4:d6:c6:f1:
12:e7:95:06:d2:8a:b0:86:44:7b:c3:63:ae:a4:8b:
f1:77:e8:63:ea:49:0f:56:13:fe:e3:69:1c:3c:21:
44:5d:b6:90:23:14:ec:18:81:72:1e:ee:4a:35:62:
fe:f8:77:7c:7d:4a:75:b0:2b:91:01:12:58:1e:7e:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:F5:08:34:BC:82:E4:4A:87:9A:1F:E6:17:EF:5A:A0:73:C3:66
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:dc:97:92:d1:1a:ba:7f:41:7f:e2:02:21:c1:e8:69:17:db:
6b:6e:2d:e9:3f:d1:ed:bc:81:c9:4e:f6:16:f3:ae:ca:67:e3:
00:db:47:fc:8c:6b:99:bf:54:72:85:04:9b:ec:1e:0c:12:3f:
59:ce:fe:f3:e3:d3:a8:e8:a7:1c:0e:b8:19:71:7f:db:de:51:
d5:6c:5b:3a:4d:50:3c:8f:ed:13:df:bb:43:72:9e:16:f4:1a:
1a:e4:7c:22:42:a7:1a:44:b8:88:7e:ce:8f:ca:cd:e0:2e:a6:
19:c1:16:f7:41:75:e3:6a:b9:ef:98:bf:b2:f6:af:84:76:5e:
0f:61:07:77:03:fb:bb:d8:1a:3b:ed:7d:ae:9d:e5:32:56:82:
cb:09:be:30:d3:28:fd:37:29:47:e9:67:72:ea:a6:42:76:fa:
10:f0:14:8a:f6:11:98:63:19:db:c8:ed:8c:03:5f:8f:3a:82:
bb:e3:a2:06:52:9d:7f:15:c7:a3:0e:30:ca:72:58:03:cf:f0:
7c:92:58:d0:83:b5:95:dd:02:52:63:8f:f8:88:6e:09:86:80:
27:28:21:83:67:56:da:ca:14:b5:e8:53:b1:09:1c:9c:07:f3:
e9:2a:4f:d1:f3:ac:dd:24:48:f3:ca:25:bf:9a:9a:21:22:2d:
09:bf:05:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFl2OuM1f+54xulsp2dPyPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4
MWU4YzIwHhcNMjYxMDIyMjMwMTE2WhcNMjYxMDIzMjMwMTE2WjAzMTEwLwYDVQQD
EyhjZTA2ZjUwODM0YmM4MmU0NGE4NzlhMWZlNjE3ZWY1YWEwNzNjMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhyBVOESpiae+X7CBAuVSG3DbWWX
chMnp8fS7NrtMaEh9adpm/ONP/rf1j4jQBm9dfh8FcbDnAg/m33HKoyZHOmy193u
WaBSLCJAbb6Y/Voew5HS4JiICxeY7ehwb7xAjpZovFibBi3+eXLKYlwXGah5L2BW
kpR3Xo45YMWeizN+OhZ2n2eTnrxw6a4sfDprTpj0rmyTn/Wc/0IYKdGu8wJ6BxzM
t2aUlo5XbQD+A55iI13UHEHdBczsAWlVA6TWxvES55UG0oqwhkR7w2OupIvxd+hj
6kkPVhP+42kcPCFEXbaQIxTsGIFyHu5KNWL++Hd8fUp1sCuRARJYHn4SQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4G9Qg0vILkSoeaH+YX71qgc8NmMB8GA1UdIwQY
MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt
ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh
LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdyXktEa
un9Bf+ICIcHoaRfba24t6T/R7byByU72FvOuymfjANtH/Ixrmb9UcoUEm+weDBI/
Wc7+8+PTqOinHA64GXF/295R1WxbOk1QPI/tE9+7Q3KeFvQaGuR8IkKnGkS4iH7O
j8rN4C6mGcEW90F142q575i/svavhHZeD2EHdwP7u9gaO+19rp3lMlaCywm+MNMo
/TcpR+lncuqmQnb6EPAUivYRmGMZ28jtjANfjzqCu+OiBlKdfxXHow4wynJYA8/w
fJJY0IO1ld0CUmOP+IhuCYaAJyghg2dW2soUtehTsQkcnAfz6SpP0fOs3SRI88ol
v5qaISItCb8Fww==
-----END CERTIFICATE-----
Generated at Fri Oct 23 06:04:34 2026 by rpki-client