Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: oCM5h2I3b9D5iwnxNeryvcPAJnhLBqmGi+wYvZj7784=
Subject key identifier: 66:41:01:33:13:CF:54:25:E4:80:C5:00:28:B7:7A:5C:EF:68:68:50
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019D39AF3E6A524F08EE518FBD87E0E945D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 07CE
Signing time: Sun 29 Mar 2026 13:01:19 +0000
Manifest this update: Sun 29 Mar 2026 13:01:19 +0000
Manifest next update: Mon 30 Mar 2026 13:01:19 +0000
Files and hashes: 1: Iiwk2jKDW4IaNjmsgGUwYMpnKAM.roa (hash: wDkZJq8BzyqmEdB2P1wzL21xUqvQ8gUqXRFb8fOP5T0=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: CAE8XDDsr9s5HxpfHUVDyXy0mEXlt7IedTu2b8uJqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3e:6a:52:4f:08:ee:51:8f:bd:87:e0:e9:45:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Mar 29 13:01:19 2026 GMT
Not After : Mar 30 13:01:19 2026 GMT
Subject: CN=6641013313cf5425e480c50028b77a5cef686850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:b3:7e:b2:dd:57:d2:0a:ca:fb:e1:a3:39:
ff:8a:be:08:d6:7b:4c:b4:20:05:a7:5b:ff:27:56:
03:57:52:5d:43:15:a3:9f:80:03:f7:26:46:ca:65:
b2:12:45:92:ad:cd:6d:d7:41:bf:68:34:32:8d:27:
69:6c:a5:ae:46:85:db:61:bd:f0:f1:03:ec:bb:9d:
0d:df:0d:5b:81:5b:63:dc:f0:64:93:dc:b5:c8:76:
ed:78:81:c7:19:af:f3:7a:38:ba:5a:05:3d:64:98:
6f:8e:e5:2e:f3:3c:89:53:e1:57:b6:0a:5d:90:72:
b5:d7:60:69:7e:7b:a1:df:7d:b5:0b:96:a5:27:a2:
4b:dc:1a:ef:0a:c2:45:2b:fd:35:da:0e:8b:52:81:
8e:41:31:4a:db:ba:5b:52:aa:a0:44:37:0a:5c:9a:
7d:49:08:e4:ba:0b:2d:14:2e:c1:03:e7:95:7c:ee:
f8:ee:d1:b8:0b:21:c2:57:60:75:00:94:fb:97:2b:
47:18:72:99:c4:51:15:00:44:9c:66:09:b5:b3:e5:
2b:4a:cc:e3:00:86:52:57:19:8f:02:00:78:85:4c:
26:6b:4d:5d:8e:84:8c:bc:54:ee:ec:30:d0:6b:6d:
6f:65:54:bf:5d:34:78:50:23:ff:b3:d4:a8:1f:7a:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:41:01:33:13:CF:54:25:E4:80:C5:00:28:B7:7A:5C:EF:68:68:50
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:dc:55:d6:28:45:70:f3:50:3c:27:2b:7b:e7:42:ce:03:6c:
d6:0e:df:0c:31:bd:c0:00:d7:9b:3a:72:82:6c:bb:3d:98:c5:
f4:3b:b2:f0:fd:8b:df:ad:d0:c8:31:63:c1:88:15:c9:ef:0c:
d7:85:cf:4c:ea:ba:94:4f:ad:73:f3:b9:80:d7:f1:8c:00:ca:
65:53:6f:8a:0c:50:bd:e3:0e:59:c6:36:21:23:f5:d5:62:2d:
50:30:e1:50:b2:85:7b:b5:bd:fd:d4:30:a7:95:ed:d2:ac:97:
68:85:c3:b7:71:9c:7b:46:81:f8:e2:d6:9a:57:ec:6d:e4:57:
6b:95:00:bb:1b:8f:a0:c3:05:9b:9d:7f:52:18:84:40:52:cc:
49:09:32:f8:7d:26:ab:75:2d:4a:23:f9:9d:23:af:ff:fa:77:
19:96:81:07:d4:41:aa:74:08:67:a9:34:24:7a:5b:38:e0:43:
78:13:57:e8:b1:bd:20:86:0f:80:7b:c7:f5:bd:9c:d5:1c:35:
47:f3:f4:bf:82:49:91:a7:c9:9f:b3:0f:5c:78:59:19:01:8d:
68:e6:82:e4:a1:58:fc:50:63:a3:4a:51:b7:88:65:0a:b9:a4:
77:6e:23:c6:02:a2:3a:e2:45:2a:d0:9d:ce:be:d8:0b:6c:79:
5a:40:cf:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rz5qUk8I7lGPvYfg6UXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx
MjIxMDcwHhcNMjYwMzI5MTMwMTE5WhcNMjYwMzMwMTMwMTE5WjAzMTEwLwYDVQQD
Eyg2NjQxMDEzMzEzY2Y1NDI1ZTQ4MGM1MDAyOGI3N2E1Y2VmNjg2ODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7uzfrLdV9IKyvvhozn/ir4I1ntM
tCAFp1v/J1YDV1JdQxWjn4AD9yZGymWyEkWSrc1t10G/aDQyjSdpbKWuRoXbYb3w
8QPsu50N3w1bgVtj3PBkk9y1yHbteIHHGa/zeji6WgU9ZJhvjuUu8zyJU+FXtgpd
kHK112Bpfnuh3321C5alJ6JL3BrvCsJFK/012g6LUoGOQTFK27pbUqqgRDcKXJp9
SQjkugstFC7BA+eVfO747tG4CyHCV2B1AJT7lytHGHKZxFEVAEScZgm1s+UrSszj
AIZSVxmPAgB4hUwma01djoSMvFTu7DDQa21vZVS/XTR4UCP/s9SoH3qZTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZBATMTz1Ql5IDFACi3elzvaGhQMB8GA1UdIwQY
MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt
NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5
LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdxV1ihF
cPNQPCcre+dCzgNs1g7fDDG9wADXmzpygmy7PZjF9Duy8P2L363QyDFjwYgVye8M
14XPTOq6lE+tc/O5gNfxjADKZVNvigxQveMOWcY2ISP11WItUDDhULKFe7W9/dQw
p5Xt0qyXaIXDt3Gce0aB+OLWmlfsbeRXa5UAuxuPoMMFm51/UhiEQFLMSQky+H0m
q3UtSiP5nSOv//p3GZaBB9RBqnQIZ6k0JHpbOOBDeBNX6LG9IIYPgHvH9b2c1Rw1
R/P0v4JJkafJn7MPXHhZGQGNaOaC5KFY/FBjo0pRt4hlCrmkd24jxgKiOuJFKtCd
zr7YC2x5WkDPZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:46 2026 by rpki-client