Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: BaVMq+2iHCcUzJD1D8jIMrXUfrJV16fjCCtfjXDwU4I=
Subject key identifier: 11:F5:30:64:33:2A:9C:F3:F0:33:F1:71:82:3E:32:D5:40:19:18:09
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019D3752D66980B9B338EACB119D927C81B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 16AF
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: DsZfk+iR66ritjaueGVwPuz4KzDvq0cJD3z1divLmjk=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d6:69:80:b9:b3:38:ea:cb:11:9d:92:7c:81:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=11f53064332a9cf3f033f171823e32d540191809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:39:0c:00:99:40:8d:f7:6f:eb:c7:e5:09:
c2:7e:c4:7e:b5:3b:fe:5f:b8:43:e4:8a:99:e6:71:
6c:b4:46:29:0a:2c:96:7a:3e:54:ec:b8:74:af:5e:
d2:29:c2:f2:cb:5b:d8:86:b4:8b:24:8d:04:aa:38:
aa:3c:6c:36:39:59:8f:13:a5:d2:cc:df:81:72:ff:
ea:dc:ce:0e:f9:a5:f6:8c:64:1a:1c:da:ff:aa:c0:
ab:50:03:8f:88:51:08:ac:b3:ea:1d:eb:0b:a8:4d:
7c:66:27:74:c4:a4:8e:3f:e9:4a:3c:35:85:be:03:
b5:58:df:72:68:6d:8a:b8:03:63:a1:65:66:f5:77:
3f:34:fb:bf:4f:d9:60:bc:5a:b2:95:40:ae:d3:52:
91:01:65:5d:50:78:53:32:d0:8b:c9:7e:92:61:36:
14:07:bc:41:b9:2a:c7:11:6c:4e:d9:e2:4e:c5:fb:
c7:1d:70:e2:d0:16:f4:73:8f:f9:11:43:f1:1e:a8:
d9:b7:6e:80:82:04:d3:de:8a:4d:c5:01:85:b5:fa:
d4:ae:73:f1:e6:c0:6d:3a:e1:6e:b9:99:ea:eb:7c:
a1:d3:1f:39:b3:28:31:a2:9a:0a:a8:93:41:ca:c9:
d8:60:8d:53:1b:0f:a8:78:08:5b:4a:81:c3:2a:91:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F5:30:64:33:2A:9C:F3:F0:33:F1:71:82:3E:32:D5:40:19:18:09
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d1:63:1c:77:06:b0:39:e1:eb:4a:42:da:77:7d:ae:54:d9:
0c:30:7e:93:42:1e:c4:f5:10:49:10:4d:71:04:01:ef:28:b7:
90:83:09:dc:af:32:83:1a:e9:22:f9:3c:69:f7:7f:ca:74:f7:
e6:94:9f:03:8e:5b:3e:1a:41:a8:4d:ca:51:c1:e6:d6:83:d1:
05:1b:af:43:a5:95:4d:61:de:ec:dc:a3:28:57:74:d1:13:33:
a9:6c:9d:ea:2d:90:2f:1f:09:2c:2f:31:5c:ce:dd:91:17:84:
3b:27:b4:5e:d3:b2:9b:87:ce:f5:e4:23:0b:b9:5a:65:a4:37:
41:bf:0f:d3:63:2a:ac:36:a5:e0:6c:fa:e9:2a:69:12:96:dc:
0c:f0:e1:6b:05:f3:b4:71:9c:e0:e5:51:3d:0c:aa:2d:3b:eb:
97:52:71:19:88:2d:08:ca:b0:da:ed:af:23:c2:4a:8a:92:52:
f8:e8:fd:9b:ae:fa:91:d7:3b:70:08:41:56:61:8b:ca:93:6e:
37:42:f0:12:04:34:df:85:64:d1:39:28:04:b0:c3:bb:f8:ec:
2c:50:b1:38:0e:db:17:61:1e:63:d1:fb:0e:96:aa:6e:36:1a:
7f:18:7a:03:e5:df:c9:45:51:47:87:2f:df:11:a7:80:1c:f4:
28:de:74:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtZpgLmzOOrLEZ2SfIG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5
MTk3NTYwHhcNMjYwMzI5MDIwMTA4WhcNMjYwMzMwMDIwMTA4WjAzMTEwLwYDVQQD
EygxMWY1MzA2NDMzMmE5Y2YzZjAzM2YxNzE4MjNlMzJkNTQwMTkxODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpY5DACZQI33b+vH5QnCfsR+tTv+
X7hD5IqZ5nFstEYpCiyWej5U7Lh0r17SKcLyy1vYhrSLJI0EqjiqPGw2OVmPE6XS
zN+Bcv/q3M4O+aX2jGQaHNr/qsCrUAOPiFEIrLPqHesLqE18Zid0xKSOP+lKPDWF
vgO1WN9yaG2KuANjoWVm9Xc/NPu/T9lgvFqylUCu01KRAWVdUHhTMtCLyX6SYTYU
B7xBuSrHEWxO2eJOxfvHHXDi0Bb0c4/5EUPxHqjZt26AggTT3opNxQGFtfrUrnPx
5sBtOuFuuZnq63yh0x85sygxopoKqJNBysnYYI1TGw+oeAhbSoHDKpGcuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH1MGQzKpzz8DPxcYI+MtVAGRgJMB8GA1UdIwQY
MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt
OGFhNTBkNjcwMzdjLzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj
LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtFjHHcG
sDnh60pC2nd9rlTZDDB+k0IexPUQSRBNcQQB7yi3kIMJ3K8ygxrpIvk8afd/ynT3
5pSfA45bPhpBqE3KUcHm1oPRBRuvQ6WVTWHe7NyjKFd00RMzqWyd6i2QLx8JLC8x
XM7dkReEOye0XtOym4fO9eQjC7laZaQ3Qb8P02MqrDal4Gz66SppEpbcDPDhawXz
tHGc4OVRPQyqLTvrl1JxGYgtCMqw2u2vI8JKipJS+Oj9m676kdc7cAhBVmGLypNu
N0LwEgQ034Vk0TkoBLDDu/jsLFCxOA7bF2EeY9H7DpaqbjYafxh6A+XfyUVRR4cv
3xGngBz0KN50Mw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:45 2026 by rpki-client