Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: w2tiKocEHN/HL3lvyoxEonogH34DVd3FxS6Vq4Srxow=
Subject key identifier: 33:52:6C:6A:61:7D:ED:F3:A3:1D:AE:2F:77:54:A2:F7:FC:DA:62:1B
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 019F129BF4A0FBF366573A411F239C5A8BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 0240
Signing time: Mon 29 Jun 2026 09:00:38 +0000
Manifest this update: Mon 29 Jun 2026 09:00:38 +0000
Manifest next update: Tue 30 Jun 2026 09:00:38 +0000
Files and hashes: 1: 0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa (hash: 60+Or+X6S9hfGP6c+jd5ZM8DEfkfCWQ0yiF3OykR4jE=)
2: XiMWlcnYu15otXM1SpS0Znny3pM.roa (hash: HhN+oEh/TLjrfvVsB28CfHRheFgOREvZ8MiqN/vatGw=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: E8GTTn+OOWavg11hSARFPdDaWV+25HzkRa4SF50ZNd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9b:f4:a0:fb:f3:66:57:3a:41:1f:23:9c:5a:8b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Jun 29 09:00:38 2026 GMT
Not After : Jun 30 09:00:38 2026 GMT
Subject: CN=33526c6a617dedf3a31dae2f7754a2f7fcda621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:0e:74:17:5d:81:b5:1d:55:21:45:df:78:
c0:3c:49:71:da:09:32:d2:2b:38:43:3a:ca:10:f8:
1e:20:ad:8b:f3:5d:6c:c3:cd:a3:4d:ef:0d:b9:a5:
a0:dc:8b:2f:d5:bc:44:7a:a2:68:62:1f:d0:a8:74:
f9:22:9e:df:b8:e2:7b:66:56:99:5d:2a:12:f8:8a:
9d:b7:b1:2c:9a:88:b5:c3:c6:a4:32:7f:f1:e0:21:
7b:ab:10:53:d1:98:8a:4b:57:17:91:7b:f5:57:ef:
54:da:fb:f7:6b:e3:2e:97:d2:fd:bf:16:a2:4e:00:
d6:10:7a:b4:e5:e4:1a:75:27:a7:97:7b:80:cc:7d:
db:51:2b:c7:28:cd:fd:a0:7c:e9:39:d4:c8:24:e3:
90:8f:61:d3:3e:d4:4b:dc:df:3d:fb:dc:50:1f:16:
4b:f3:dc:b9:58:c1:6f:ca:27:2d:ae:c6:ac:bb:4f:
ed:99:76:00:41:b4:d4:08:e8:04:f3:f9:90:b0:5d:
78:5a:bb:81:29:3b:d5:ec:53:08:eb:b9:03:79:7b:
1c:dc:f2:c9:1f:ed:2a:b9:b7:f7:69:f0:61:65:05:
de:13:aa:f3:a4:f9:43:b5:c5:3b:6b:20:cd:69:8d:
71:b1:7d:23:83:43:d1:8f:28:7f:62:8b:d7:56:b4:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:6C:6A:61:7D:ED:F3:A3:1D:AE:2F:77:54:A2:F7:FC:DA:62:1B
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6b:20:fa:98:d1:85:be:da:65:f0:a4:75:3f:c3:7b:9a:40:
38:ec:b1:f5:28:a9:b2:91:cb:3f:19:20:25:7c:5c:6c:fe:9a:
28:d3:ae:11:92:8c:c7:d0:b1:f7:a6:66:6c:08:ac:e1:e4:c2:
88:ca:be:42:3c:02:0d:77:3f:dc:b7:4f:78:15:46:4f:f4:61:
77:7a:6b:30:22:a8:6b:5c:d7:e5:44:44:9d:91:5d:69:7c:f3:
1c:c9:15:c1:ee:1d:fb:8c:81:08:39:4f:04:a7:c5:67:60:8f:
5c:1e:84:3c:80:cf:29:41:2b:eb:9e:88:c8:6f:dd:b3:eb:3b:
87:9e:7c:d7:82:60:d1:a0:04:86:b4:e2:7e:82:da:3d:bc:f8:
45:7e:98:6f:9a:84:6c:30:e8:01:ce:67:77:0d:ca:be:9e:2a:
33:8a:4b:de:4d:11:53:dd:1a:02:b3:62:f8:5b:7a:ff:fb:c7:
8b:b3:04:c7:18:16:b6:88:a5:0c:66:23:23:b4:98:39:94:93:
8b:46:0b:e7:8b:0d:07:49:6f:a0:21:75:dd:a2:39:c6:79:37:
fe:fc:8e:34:0b:57:c9:93:5a:40:01:93:4b:fd:09:5e:63:dd:
f8:76:5e:80:f5:6f:77:1b:c2:9f:8e:8f:fe:0a:94:71:df:38:
0e:80:21:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Sm/Sg+/NmVzpBHyOcWovxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlkMDVlMmEzMjFhZWNiYTRlY2M0YWJlYzBmNzhlYWNk
ZTU1YjAwHhcNMjYwNjI5MDkwMDM4WhcNMjYwNjMwMDkwMDM4WjAzMTEwLwYDVQQD
EygzMzUyNmM2YTYxN2RlZGYzYTMxZGFlMmY3NzU0YTJmN2ZjZGE2MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskUOdBddgbUdVSFF33jAPElx2gky
0is4QzrKEPgeIK2L811sw82jTe8NuaWg3Isv1bxEeqJoYh/QqHT5Ip7fuOJ7ZlaZ
XSoS+Iqdt7Esmoi1w8akMn/x4CF7qxBT0ZiKS1cXkXv1V+9U2vv3a+Mul9L9vxai
TgDWEHq05eQadSenl3uAzH3bUSvHKM39oHzpOdTIJOOQj2HTPtRL3N89+9xQHxZL
89y5WMFvyictrsasu0/tmXYAQbTUCOgE8/mQsF14WruBKTvV7FMI67kDeXsc3PLJ
H+0qubf3afBhZQXeE6rzpPlDtcU7ayDNaY1xsX0jg0PRjyh/YovXVrQrIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNSbGphfe3zox2uL3dUovf82mIbMB8GA1UdIwQY
MBaAFI+p0F4qMhrsuk7MSr7A946s3lWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYt
ODNmYmQ4NjY2OTk0LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYtODNmYmQ4NjY2OTk0
LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWsg+pjR
hb7aZfCkdT/De5pAOOyx9SipspHLPxkgJXxcbP6aKNOuEZKMx9Cx96ZmbAis4eTC
iMq+QjwCDXc/3LdPeBVGT/Rhd3prMCKoa1zX5UREnZFdaXzzHMkVwe4d+4yBCDlP
BKfFZ2CPXB6EPIDPKUEr656IyG/ds+s7h55814Jg0aAEhrTifoLaPbz4RX6Yb5qE
bDDoAc5ndw3Kvp4qM4pL3k0RU90aArNi+Ft6//vHi7MExxgWtoilDGYjI7SYOZST
i0YL54sNB0lvoCF13aI5xnk3/vyONAtXyZNaQAGTS/0JXmPd+HZegPVvdxvCn46P
/gqUcd84DoAhJQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:42 2026 by rpki-client