Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: k5iB1dPIKk6mP/l+y2V2yIZ8+AiwKeByv+KiXcoBAUA=
Subject key identifier: AA:D9:7A:4F:DA:03:7F:D2:C8:0A:AF:BF:94:15:CC:AD:70:B5:17:5E
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 019D38662CB0B5E7AF406CE248DE00AEE759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0CA6
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: XnlzEI2Takq4CT+gZpPTBmhW3yitpvhu0r6FuhvXBjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2c:b0:b5:e7:af:40:6c:e2:48:de:00:ae:e7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=aad97a4fda037fd2c80aafbf9415ccad70b5175e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:c1:b3:a9:a5:8d:16:11:92:cf:68:a6:5d:
dc:be:37:f6:27:07:43:4d:8a:ee:4d:95:e6:78:19:
68:bc:16:af:f3:fd:c1:00:82:08:4b:17:82:ea:6e:
29:c1:36:88:56:03:6b:db:b2:13:59:20:c0:7e:72:
78:34:5b:f3:c2:47:6a:63:a0:81:3c:69:44:8d:15:
0c:6e:fc:7d:a5:7b:b6:f2:6f:14:27:84:5b:80:4f:
47:59:58:10:24:da:32:ba:7a:b0:3d:7c:f7:de:3d:
49:50:a1:57:23:9c:20:66:bd:6c:c5:96:a4:e1:f4:
3d:5d:61:dc:37:9d:b5:2c:35:5c:21:15:61:a7:f4:
a7:24:9e:1f:45:0c:47:0b:0c:7b:84:8b:92:be:34:
07:68:6a:bb:17:ef:98:32:7b:60:2b:85:22:dd:83:
f9:a5:6d:16:9d:d9:40:2c:9c:59:0a:61:0c:94:d2:
4a:25:b6:aa:36:96:a0:a6:71:f4:00:ad:46:99:43:
97:9d:a9:52:96:f8:fb:d2:d4:93:02:69:99:4e:b8:
97:b5:09:d2:30:d4:08:67:c6:38:90:59:dc:28:83:
b4:57:4b:cc:71:f3:ae:e0:24:01:2b:30:28:33:e4:
07:61:43:f9:a4:8a:e7:43:d7:d8:f1:65:08:eb:35:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:7A:4F:DA:03:7F:D2:C8:0A:AF:BF:94:15:CC:AD:70:B5:17:5E
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:d6:06:fa:2b:3b:8d:56:fc:d6:fe:f3:83:ac:49:5f:e9:
eb:82:6e:c3:a1:1a:6a:03:bd:1b:d6:11:ac:ad:7c:cc:dd:cf:
e4:79:e7:8a:b5:71:3f:1b:ee:02:7b:a6:0f:1d:0d:98:7a:77:
59:4b:9d:c0:0d:c5:18:71:e0:08:fe:40:05:c4:cf:03:59:16:
35:41:b6:4b:9f:3e:bc:32:35:dd:bc:5b:a8:33:39:50:dd:fb:
d1:07:d5:ba:e4:1b:b3:32:28:4c:eb:78:67:ec:f0:2f:fd:42:
3e:84:f6:cf:e0:e1:15:4a:93:0b:8e:42:ed:c4:3e:95:d3:1c:
6d:70:8e:c5:47:ee:ac:39:93:60:78:95:04:f0:d4:5f:11:54:
0e:f6:43:d4:ab:7e:d0:d9:0e:be:15:42:c4:50:89:78:c6:f8:
f0:77:20:f8:99:49:0f:ac:14:1d:5c:58:34:4e:52:bb:3a:51:
83:ff:cf:b7:46:fa:e8:bc:3f:6a:03:ae:47:03:06:38:9a:b2:
3e:f6:10:88:07:c5:e1:7f:de:14:ac:9d:61:57:66:ae:2e:f1:
d6:01:d4:ae:2b:a5:e0:e0:4e:71:b3:2e:0a:f0:24:ea:10:3d:
b2:6b:e0:2f:38:00:0d:0d:fe:c0:68:4a:c5:7a:26:b8:eb:d0:
61:59:87:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZiywteevQGziSN4ArudZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWEwNWM2ZjhmOWJmZDcwZTNkNDFmZTA1YmFmYzUwZDEy
NTNiZjUwHhcNMjYwMzI5MDcwMTUzWhcNMjYwMzMwMDcwMTUzWjAzMTEwLwYDVQQD
EyhhYWQ5N2E0ZmRhMDM3ZmQyYzgwYWFmYmY5NDE1Y2NhZDcwYjUxNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6LBs6mljRYRks9opl3cvjf2JwdD
TYruTZXmeBlovBav8/3BAIIISxeC6m4pwTaIVgNr27ITWSDAfnJ4NFvzwkdqY6CB
PGlEjRUMbvx9pXu28m8UJ4RbgE9HWVgQJNoyunqwPXz33j1JUKFXI5wgZr1sxZak
4fQ9XWHcN521LDVcIRVhp/SnJJ4fRQxHCwx7hIuSvjQHaGq7F++YMntgK4Ui3YP5
pW0WndlALJxZCmEMlNJKJbaqNpagpnH0AK1GmUOXnalSlvj70tSTAmmZTriXtQnS
MNQIZ8Y4kFncKIO0V0vMcfOu4CQBKzAoM+QHYUP5pIrnQ9fY8WUI6zWXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrZek/aA3/SyAqvv5QVzK1wtRdeMB8GA1UdIwQY
MBaAFGuqBcb4+b/XDj1B/gW6/FDRJTv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYt
ZjMyMTFkOTE1MjBkLzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYtZjMyMTFkOTE1MjBk
LzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVvWBvor
O41W/Nb+84OsSV/p64Juw6EaagO9G9YRrK18zN3P5HnnirVxPxvuAnumDx0NmHp3
WUudwA3FGHHgCP5ABcTPA1kWNUG2S58+vDI13bxbqDM5UN370QfVuuQbszIoTOt4
Z+zwL/1CPoT2z+DhFUqTC45C7cQ+ldMcbXCOxUfurDmTYHiVBPDUXxFUDvZD1Kt+
0NkOvhVCxFCJeMb48Hcg+JlJD6wUHVxYNE5SuzpRg//Pt0b66Lw/agOuRwMGOJqy
PvYQiAfF4X/eFKydYVdmri7x1gHUriul4OBOcbMuCvAk6hA9smvgLzgADQ3+wGhK
xXomuOvQYVmHAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:45 2026 by rpki-client