Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: kRXfq4qKXPTvBMUjB+yzSCT3vGvSggOCFg0Ssy6p1/A=
Subject key identifier: 1C:3F:35:B1:AA:2A:A1:A2:16:FD:E7:F4:09:D5:20:48:39:D1:49:B1
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019E995F76816C1848F800D4D071465BBFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0537
Signing time: Fri 05 Jun 2026 20:00:30 +0000
Manifest this update: Fri 05 Jun 2026 20:00:30 +0000
Manifest next update: Sat 06 Jun 2026 20:00:30 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: bpPkS/CyQoRqdSGR1zFyHf3KG+V6cDPdyEkWEpqTOKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:5f:76:81:6c:18:48:f8:00:d4:d0:71:46:5b:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Jun 5 20:00:30 2026 GMT
Not After : Jun 6 20:00:30 2026 GMT
Subject: CN=1c3f35b1aa2aa1a216fde7f409d5204839d149b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:4b:72:6c:c9:de:9c:c6:32:2e:18:26:f5:
aa:31:68:8b:93:93:af:ac:9a:09:c8:00:ba:b0:80:
47:0f:76:af:a2:53:25:f4:3f:1a:a2:16:02:c4:35:
e9:91:55:df:4f:c8:89:9f:c5:8a:3b:14:11:8f:9b:
d2:9b:b9:22:df:ad:77:77:98:4b:69:fa:a2:86:9a:
4a:82:94:84:fc:25:49:56:02:19:cd:d0:9e:c0:9d:
b8:8e:5e:98:36:29:b2:14:ad:d1:51:38:8c:6f:b2:
4e:c8:bf:0f:45:9e:e7:e2:b9:2e:fc:17:9e:1d:5a:
37:97:7c:47:bd:7a:9b:48:01:50:59:db:f5:11:d5:
89:f9:9f:a8:5b:15:dc:cf:00:4c:12:e0:34:3e:15:
39:96:32:d3:ee:d0:bc:76:f8:e5:57:79:94:12:0a:
2d:85:12:44:b0:21:95:12:92:f8:82:08:55:0d:dc:
54:1a:96:d3:7a:51:93:a1:fe:c1:cc:32:63:68:aa:
0d:a3:b2:b8:0f:02:1b:17:7c:3e:12:dd:64:e0:2b:
22:2b:ba:06:c6:80:60:fe:52:e9:44:27:da:92:07:
37:64:78:34:27:9b:a7:8a:17:49:16:6a:2b:f1:09:
7a:dd:5e:d3:81:a2:8d:85:13:cf:a3:b8:6e:41:e2:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:35:B1:AA:2A:A1:A2:16:FD:E7:F4:09:D5:20:48:39:D1:49:B1
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:39:fa:04:78:bc:fc:f3:15:44:f8:0c:f2:a1:f1:9c:7f:e4:
1e:bf:5d:4a:c9:93:53:76:e8:d0:e6:9d:9b:ec:5d:3f:6b:ad:
0d:04:c3:9d:f7:02:ef:b5:3c:ae:ff:e1:81:a6:d7:ba:6a:dd:
7f:b6:51:8a:7f:da:42:21:76:2c:13:02:1d:4b:0a:e8:af:35:
62:c5:b3:20:7b:cd:5d:8e:50:50:bf:14:be:98:fe:2c:f6:fe:
80:33:c2:a3:cb:24:a7:29:08:fe:01:0b:f4:48:ba:ea:89:9f:
ff:10:1d:3b:1d:03:05:ad:57:7f:0c:6e:4d:db:b9:a6:96:93:
a0:b7:dc:ba:60:66:74:95:99:8c:41:0f:26:30:ee:f0:bc:48:
2e:f5:82:7b:a0:60:a9:c8:bc:b9:85:1c:66:7b:0c:65:fd:1b:
78:a1:89:2c:db:e2:70:41:fa:07:d0:2e:ec:19:24:b2:85:3f:
60:7e:a6:a8:c1:06:17:24:25:75:35:e9:18:8c:50:0f:0d:57:
10:ef:75:e8:d1:25:df:3d:5e:a2:ac:fe:63:93:46:53:ab:6b:
f1:84:db:3b:ab:5c:d3:63:e2:9b:88:7b:b8:00:df:68:c4:6b:
b5:8b:27:15:ae:2a:c8:40:5b:c1:0d:67:49:c9:a9:87:e6:e4:
70:23:65:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6ZX3aBbBhI+ADU0HFGW7/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4
MWU4YzIwHhcNMjYwNjA1MjAwMDMwWhcNMjYwNjA2MjAwMDMwWjAzMTEwLwYDVQQD
EygxYzNmMzViMWFhMmFhMWEyMTZmZGU3ZjQwOWQ1MjA0ODM5ZDE0OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KNLcmzJ3pzGMi4YJvWqMWiLk5Ov
rJoJyAC6sIBHD3avolMl9D8aohYCxDXpkVXfT8iJn8WKOxQRj5vSm7ki3613d5hL
afqihppKgpSE/CVJVgIZzdCewJ24jl6YNimyFK3RUTiMb7JOyL8PRZ7n4rku/Bee
HVo3l3xHvXqbSAFQWdv1EdWJ+Z+oWxXczwBMEuA0PhU5ljLT7tC8dvjlV3mUEgot
hRJEsCGVEpL4gghVDdxUGpbTelGTof7BzDJjaKoNo7K4DwIbF3w+Et1k4CsiK7oG
xoBg/lLpRCfakgc3ZHg0J5unihdJFmor8Ql63V7TgaKNhRPPo7huQeI2AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw/NbGqKqGiFv3n9AnVIEg50UmxMB8GA1UdIwQY
MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt
ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh
LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzn6BHi8
/PMVRPgM8qHxnH/kHr9dSsmTU3bo0Oadm+xdP2utDQTDnfcC77U8rv/hgabXumrd
f7ZRin/aQiF2LBMCHUsK6K81YsWzIHvNXY5QUL8Uvpj+LPb+gDPCo8skpykI/gEL
9Ei66omf/xAdOx0DBa1XfwxuTdu5ppaToLfcumBmdJWZjEEPJjDu8LxILvWCe6Bg
qci8uYUcZnsMZf0beKGJLNvicEH6B9Au7BkksoU/YH6mqMEGFyQldTXpGIxQDw1X
EO916NEl3z1eoqz+Y5NGU6tr8YTbO6tc02Pim4h7uADfaMRrtYsnFa4qyEBbwQ1n
Scmph+bkcCNlJw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 06:24:32 2026 by rpki-client