Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier: hAnYuoKbGuoiaYo2rV4UgMF6iKWiDMsPs7CFL10RQo4=
Subject key identifier: 89:42:9F:73:EE:1E:08:BA:0F:84:30:C1:9E:03:0E:89:FA:1A:B5:14
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 019DCED057217F43AAB66EB531A82DF570BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number: 1288
Signing time: Mon 27 Apr 2026 12:00:53 +0000
Manifest this update: Mon 27 Apr 2026 12:00:53 +0000
Manifest next update: Tue 28 Apr 2026 12:00:53 +0000
Files and hashes: 1: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: lE1clSOL6Mo5pzuE+M0/+kkdlTwvfNhrnygtcGSwRvM=)
2: t0AVsfA9UiQqjW_t5dPb3nmC2rs.roa (hash: fCkC5bZnOUjJ4RgM4loxWys//SbXBNG4IrH2ok9kPJQ=)
3: uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa (hash: i7u4A65jcZSKUSSb+jR2XNvvNO6njReiGIDIfrcj8i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:57:21:7f:43:aa:b6:6e:b5:31:a8:2d:f5:70:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Apr 27 12:00:53 2026 GMT
Not After : Apr 28 12:00:53 2026 GMT
Subject: CN=89429f73ee1e08ba0f8430c19e030e89fa1ab514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:16:eb:b4:65:9e:09:45:b7:64:cb:ab:35:
46:5c:25:d9:72:8b:7d:a1:30:de:61:b1:03:c6:d0:
8f:26:b9:16:a5:18:2e:dc:ee:89:37:d3:2e:09:b4:
71:4a:55:e6:02:a1:a1:e3:9d:d8:f6:4d:4a:1b:5f:
28:d1:e0:d0:26:06:c3:fa:4a:b3:a6:d7:1e:c8:0b:
05:41:b8:f2:fd:8f:e7:dc:b6:15:f4:49:9a:0a:d8:
0c:0b:1e:ed:50:08:5b:c6:02:7c:d0:0c:9b:d9:c9:
d6:50:0b:8d:3f:4d:49:5a:48:65:61:d2:b5:1d:cc:
38:f7:7c:83:dc:3c:93:5d:d6:b2:9f:93:5d:84:1c:
a1:f4:51:59:bf:fa:9b:a7:05:79:99:3e:d8:1b:fe:
0c:cf:36:f4:b3:e4:ee:b6:ed:09:c0:ca:b2:ed:d7:
4e:0b:1e:d7:e4:67:f4:81:3a:73:5a:80:33:29:c7:
6c:63:0a:c6:f7:42:22:26:d9:9d:9f:0a:85:66:05:
85:7a:9d:c5:d5:ce:c0:d6:da:2e:53:70:cf:a8:49:
51:15:45:6f:86:af:55:e0:ad:a1:19:7a:01:0e:79:
46:e7:d2:5e:61:97:19:c0:35:94:ec:5a:da:96:55:
63:18:45:e5:f0:83:c5:a9:c9:50:2e:b0:54:a2:86:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:9F:73:EE:1E:08:BA:0F:84:30:C1:9E:03:0E:89:FA:1A:B5:14
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c5:6a:7c:04:fa:7a:92:4b:7e:39:9e:bc:81:91:88:80:09:
32:9e:14:1f:c1:dd:d4:de:98:1a:53:5a:7c:7d:f4:19:b2:36:
14:d7:08:9c:71:df:67:75:3f:48:79:18:aa:01:b8:78:ef:0c:
db:a9:70:05:fc:a6:cc:3d:be:e5:43:04:a1:9f:8f:63:47:78:
72:28:f1:ca:fe:60:d2:b3:77:41:c1:01:e2:c1:60:84:a2:74:
6a:fa:c2:76:37:99:bc:3d:0b:5c:49:c4:b9:b4:d2:df:06:e1:
8b:8e:cc:79:78:f5:be:73:2b:4d:5f:f8:a3:10:6d:63:05:d3:
f7:85:8f:e0:ab:c4:a6:01:2b:73:06:b1:a5:3d:5b:ee:b2:ee:
e9:c9:29:04:b9:69:f7:c9:ab:b8:eb:6f:ea:5c:ad:08:36:32:
8f:e3:75:08:9c:b4:64:95:0a:61:20:1b:99:32:6e:98:61:a6:
3c:de:ed:eb:0e:5b:a0:d0:1f:be:0e:a7:71:96:b1:03:c9:b1:
31:61:85:d9:6e:dc:2e:0d:04:8c:dc:ab:9f:31:2e:22:ad:8d:
2e:21:e2:af:a1:8d:9b:eb:d4:1f:13:99:14:a8:4a:41:88:5a:
e9:7a:c1:ed:70:11:6f:3c:b7:d3:d7:eb:70:c4:f7:ab:ce:0a:
cf:dc:27:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0Fchf0Oqtm61Magt9XC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhmOTE4MmI3ZGE0NDAwMzU5MWVlYWUyNTYwZjg0NTFi
MzM5M2EwHhcNMjYwNDI3MTIwMDUzWhcNMjYwNDI4MTIwMDUzWjAzMTEwLwYDVQQD
Eyg4OTQyOWY3M2VlMWUwOGJhMGY4NDMwYzE5ZTAzMGU4OWZhMWFiNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVkW67RlnglFt2TLqzVGXCXZcot9
oTDeYbEDxtCPJrkWpRgu3O6JN9MuCbRxSlXmAqGh453Y9k1KG18o0eDQJgbD+kqz
ptceyAsFQbjy/Y/n3LYV9EmaCtgMCx7tUAhbxgJ80Ayb2cnWUAuNP01JWkhlYdK1
Hcw493yD3DyTXdayn5NdhByh9FFZv/qbpwV5mT7YG/4Mzzb0s+Tutu0JwMqy7ddO
Cx7X5Gf0gTpzWoAzKcdsYwrG90IiJtmdnwqFZgWFep3F1c7A1touU3DPqElRFUVv
hq9V4K2hGXoBDnlG59JeYZcZwDWU7FrallVjGEXl8IPFqclQLrBUooa+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlCn3PuHgi6D4QwwZ4DDon6GrUUMB8GA1UdIwQY
MBaAFOk4+RgrfaRAA1ke6uJWD4RRszk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmIt
NGRmNzI4YzU4ZDE3LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmItNGRmNzI4YzU4ZDE3
LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscVqfAT6
epJLfjmevIGRiIAJMp4UH8Hd1N6YGlNafH30GbI2FNcInHHfZ3U/SHkYqgG4eO8M
26lwBfymzD2+5UMEoZ+PY0d4cijxyv5g0rN3QcEB4sFghKJ0avrCdjeZvD0LXEnE
ubTS3wbhi47MeXj1vnMrTV/4oxBtYwXT94WP4KvEpgErcwaxpT1b7rLu6ckpBLlp
98mruOtv6lytCDYyj+N1CJy0ZJUKYSAbmTJumGGmPN7t6w5boNAfvg6ncZaxA8mx
MWGF2W7cLg0EjNyrnzEuIq2NLiHir6GNm+vUHxOZFKhKQYha6XrB7XARbzy309fr
cMT3q84Kz9wnaQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:52 2026 by rpki-client