Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json)
Hash identifier: e6uTIaALcvQ/PcQZD2WJRowge2FJsNpAnHrv8doQhro=
Subject key identifier: 5F:94:1E:FB:E5:FA:73:11:55:F0:37:90:08:F7:1E:7B:EE:89:6D:B6
Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59
Certificate serial: 019D3940D5EF8A1AFAF6640D469A2C766702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
Manifest number: 0438
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: PvFrel96iqCQqFr4LqvyFx031aWWWuExqKSATmeBzek=)
2: 7xaTNR1-LrDroCcVfd51GMULPgk.roa (hash: 1/QOFIY+bIYf3uAnfGJ3BJ+RAzrDoN7j26g8Ffhh1eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d5:ef:8a:1a:fa:f6:64:0d:46:9a:2c:76:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e979403cd68c98df738e31062903a0b322600b59
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=5f941efbe5fa731155f0379008f71e7bee896db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:ea:c0:42:80:09:13:8d:1d:a0:3d:05:68:
6d:37:0c:ae:60:a5:63:b9:cb:62:40:39:cd:b1:9a:
1e:22:eb:4c:c1:5d:2e:9b:97:cb:ee:f5:08:b1:f6:
6a:35:ff:80:d6:47:f4:ff:a8:e5:34:0e:43:d8:f0:
61:13:63:81:74:66:92:0a:72:8e:9c:09:c0:bc:35:
3f:6c:95:3a:76:0d:39:fa:21:ab:ea:d9:0f:cc:8a:
d1:cf:c9:f1:41:02:5e:dc:6f:b4:aa:37:92:6b:54:
15:c1:e2:09:d1:82:5f:d7:23:54:63:3d:ac:3b:8e:
f7:8e:27:d9:5d:ac:a4:91:ba:cf:e0:31:50:64:9d:
2d:54:40:72:99:1a:5b:df:84:13:02:e3:54:77:77:
3e:20:06:85:ba:52:87:fe:f0:af:32:02:4b:86:13:
ed:82:87:c6:ac:4e:92:52:c9:89:85:be:b0:1f:0f:
d6:a8:7d:e3:b1:f3:67:0c:bb:15:cd:6b:1c:a1:ab:
9e:a6:64:93:3c:80:0c:12:60:51:cd:b1:a3:a5:cc:
5c:b5:9e:dc:2d:6e:fe:a9:63:e4:a1:58:8a:be:61:
ee:b9:75:ae:75:f9:01:d0:9b:4c:d3:f0:6e:e5:df:
a7:66:85:c7:00:0a:c5:fa:5c:0a:bf:d2:a2:0a:84:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:1E:FB:E5:FA:73:11:55:F0:37:90:08:F7:1E:7B:EE:89:6D:B6
X509v3 Authority Key Identifier:
keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8b:03:48:90:4a:68:23:90:ff:76:f2:72:ba:7c:e0:34:66:
67:37:bc:87:7e:78:70:a0:0e:9b:a7:bd:b1:53:94:db:ef:be:
4a:9d:75:42:4f:a3:db:61:5d:e9:4c:7f:ca:63:07:aa:b3:d9:
40:9c:88:8e:31:01:4d:b4:11:12:0d:64:b2:2b:40:d8:e2:0c:
2c:58:02:c4:de:d5:aa:02:22:ab:7e:5a:63:dc:21:d6:23:3e:
08:a3:d7:3d:e0:2f:53:28:be:5f:a6:1a:b3:4a:2c:b7:26:41:
a2:c9:7c:49:38:03:46:7e:46:0c:0f:07:c7:fd:5d:db:00:dc:
6e:d2:e4:5f:1b:97:29:00:3f:a7:aa:9b:f8:71:96:e2:79:a7:
48:9d:aa:99:06:1e:28:0e:18:89:49:26:03:c4:84:53:f6:5e:
47:2f:f5:a5:32:71:5c:eb:60:df:c7:77:47:e2:85:e9:0a:91:
06:12:9f:24:c3:82:a1:6c:66:a3:cf:71:c9:97:a2:9a:d7:ea:
2e:68:20:e7:bf:a5:fd:8f:3a:74:5e:3b:df:cf:80:1f:ae:5d:
9a:05:47:46:a0:a7:f5:a2:4b:32:b8:d7:d3:81:98:97:8f:4c:
58:de:dc:fa:62:69:53:41:34:d6:63:69:34:be:af:dc:2c:ca:
41:07:d0:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QNXvihr69mQNRposdmcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2
MDBiNTkwHhcNMjYwMzI5MTEwMDQzWhcNMjYwMzMwMTEwMDQzWjAzMTEwLwYDVQQD
Eyg1Zjk0MWVmYmU1ZmE3MzExNTVmMDM3OTAwOGY3MWU3YmVlODk2ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwvqwEKACRONHaA9BWhtNwyuYKVj
uctiQDnNsZoeIutMwV0um5fL7vUIsfZqNf+A1kf0/6jlNA5D2PBhE2OBdGaSCnKO
nAnAvDU/bJU6dg05+iGr6tkPzIrRz8nxQQJe3G+0qjeSa1QVweIJ0YJf1yNUYz2s
O473jifZXaykkbrP4DFQZJ0tVEBymRpb34QTAuNUd3c+IAaFulKH/vCvMgJLhhPt
gofGrE6SUsmJhb6wHw/WqH3jsfNnDLsVzWscoauepmSTPIAMEmBRzbGjpcxctZ7c
LW7+qWPkoViKvmHuuXWudfkB0JtM0/Bu5d+nZoXHAArF+lwKv9KiCoTiSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+UHvvl+nMRVfA3kAj3HnvuiW22MB8GA1UdIwQY
MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt
ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1
LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYsDSJBK
aCOQ/3bycrp84DRmZze8h354cKAOm6e9sVOU2+++Sp11Qk+j22Fd6Ux/ymMHqrPZ
QJyIjjEBTbQREg1ksitA2OIMLFgCxN7VqgIiq35aY9wh1iM+CKPXPeAvUyi+X6Ya
s0ostyZBosl8STgDRn5GDA8Hx/1d2wDcbtLkXxuXKQA/p6qb+HGW4nmnSJ2qmQYe
KA4YiUkmA8SEU/ZeRy/1pTJxXOtg38d3R+KF6QqRBhKfJMOCoWxmo89xyZeimtfq
Lmgg57+l/Y86dF4738+AH65dmgVHRqCn9aJLMrjX04GYl49MWN7c+mJpU0E01mNp
NL6v3CzKQQfQTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:05 2026 by rpki-client