Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier: weQfaWe2f+ePGyG8SIYTKJ/vJoJb8WrwNsCKUoGZcIE=
Subject key identifier: 9B:F7:FE:F9:09:54:1B:AF:E5:3E:1D:F7:53:10:B2:FB:C0:C8:7B:B8
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer: /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial: 019D099E5C411B52BFDE3F4F2A9E4EB1A9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number: 0108
Signing time: Fri 20 Mar 2026 05:01:06 +0000
Manifest this update: Fri 20 Mar 2026 05:01:06 +0000
Manifest next update: Sat 21 Mar 2026 05:01:06 +0000
Files and hashes: 1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: gn25NfJx3Nbm2a4VJYdz7RmWVoTBvpPbIe58XABJQyc=)
2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:9e:5c:41:1b:52:bf:de:3f:4f:2a:9e:4e:b1:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Validity
Not Before: Mar 20 05:01:06 2026 GMT
Not After : Mar 21 05:01:06 2026 GMT
Subject: CN=9bf7fef909541bafe53e1df75310b2fbc0c87bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:8a:31:37:55:13:fb:89:2a:cf:58:dc:41:
22:19:85:4d:13:3b:99:34:f5:4f:be:3c:1b:86:08:
b3:a1:03:8b:52:ee:56:c5:f0:ee:ba:3d:a7:0b:77:
b9:f6:0d:ef:94:a1:b8:3a:74:1e:0e:26:4a:e0:03:
a3:5a:0b:6e:b0:89:19:e6:d3:f7:9a:38:a9:b9:c8:
8a:a2:ca:9d:7d:bf:ef:9f:a7:04:9e:33:45:bc:58:
76:6a:6b:4f:41:98:1b:d9:1d:ce:74:09:4c:45:9c:
ab:fe:5d:88:70:b0:9b:7f:ed:d6:3a:11:56:28:de:
02:14:cb:1a:40:67:a4:7b:51:34:3c:04:4a:0d:35:
18:6e:fa:07:6d:b6:63:5e:74:d9:c5:62:7a:46:ab:
19:e6:d5:99:53:15:ae:80:cd:2d:70:b6:60:09:f4:
64:ab:f8:14:6e:23:0d:f6:cc:ed:cf:b4:72:c7:72:
84:90:45:9b:35:d1:70:e4:4b:59:c8:48:f8:31:ce:
0a:c6:12:2b:b9:3c:69:23:24:e8:8f:4d:1c:44:62:
3a:4d:50:6c:b8:92:7f:b3:af:40:aa:23:12:2c:a8:
15:5e:cf:a8:c8:6c:91:2d:c5:de:76:63:9c:bb:96:
e0:a2:c9:c8:7e:29:d3:71:bb:f7:a9:fc:ce:4e:8c:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:FE:F9:09:54:1B:AF:E5:3E:1D:F7:53:10:B2:FB:C0:C8:7B:B8
X509v3 Authority Key Identifier:
keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b3:ad:07:fd:82:ee:a5:c3:99:5c:7a:f5:a1:63:a0:a4:42:
a2:d6:63:bb:f5:95:50:a6:c1:ac:6e:38:4d:7b:1e:2d:92:19:
9c:7b:46:67:c5:ad:17:c7:76:28:52:cd:74:1e:c1:c4:2f:ca:
85:e3:00:e1:2c:42:1b:2a:f4:55:e5:6f:6b:b1:cd:76:6e:93:
3c:28:cc:f7:b7:11:71:0e:f4:b0:56:d4:97:52:95:4a:99:10:
db:e5:4a:d5:0f:65:43:7d:ea:a9:fe:c2:18:20:43:2e:a1:67:
67:8a:78:f1:17:d1:21:53:10:e4:2b:9d:ef:da:ee:ff:dc:7d:
b4:c7:19:f6:70:d8:5d:b8:09:12:5d:80:85:df:73:a3:ff:30:
47:41:2d:9f:ca:33:89:43:31:2b:9e:72:c9:48:6f:77:18:52:
c9:b9:a9:4d:d6:c8:86:53:69:41:9e:bb:52:df:9c:87:42:f6:
0d:ae:e7:fa:19:ec:9e:be:97:01:41:3c:e5:75:53:88:fe:5a:
98:40:8a:0e:6d:c9:d4:4a:ce:2a:10:79:3d:d9:15:af:b6:05:
dd:e7:c6:3c:9f:1c:68:96:9a:3d:a2:31:64:0a:f6:f1:cc:c8:
a6:e5:ba:7a:02:8e:db:ec:7d:bf:23:84:b2:9f:57:67:f4:06:
f4:72:a5:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0JnlxBG1K/3j9PKp5OsanWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmJjMWU1MzdlMmYzZDFlNGRhYjI4MzJhZTYyNGI1ZDYz
NzllZWQwHhcNMjYwMzIwMDUwMTA2WhcNMjYwMzIxMDUwMTA2WjAzMTEwLwYDVQQD
Eyg5YmY3ZmVmOTA5NTQxYmFmZTUzZTFkZjc1MzEwYjJmYmMwYzg3YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAGKMTdVE/uJKs9Y3EEiGYVNEzuZ
NPVPvjwbhgizoQOLUu5WxfDuuj2nC3e59g3vlKG4OnQeDiZK4AOjWgtusIkZ5tP3
mjipuciKosqdfb/vn6cEnjNFvFh2amtPQZgb2R3OdAlMRZyr/l2IcLCbf+3WOhFW
KN4CFMsaQGeke1E0PARKDTUYbvoHbbZjXnTZxWJ6RqsZ5tWZUxWugM0tcLZgCfRk
q/gUbiMN9sztz7Ryx3KEkEWbNdFw5EtZyEj4Mc4KxhIruTxpIyToj00cRGI6TVBs
uJJ/s69AqiMSLKgVXs+oyGyRLcXedmOcu5bgosnIfinTcbv3qfzOToxVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv3/vkJVBuv5T4d91MQsvvAyHu4MB8GA1UdIwQY
MBaAFOi7weU34vPR5NqygyrmJLXWN57tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDkt
OTYzNmUyMzMwZDdlLzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDktOTYzNmUyMzMwZDdl
LzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLOtB/2C
7qXDmVx69aFjoKRCotZju/WVUKbBrG44TXseLZIZnHtGZ8WtF8d2KFLNdB7BxC/K
heMA4SxCGyr0VeVva7HNdm6TPCjM97cRcQ70sFbUl1KVSpkQ2+VK1Q9lQ33qqf7C
GCBDLqFnZ4p48RfRIVMQ5Cud79ru/9x9tMcZ9nDYXbgJEl2Ahd9zo/8wR0Etn8oz
iUMxK55yyUhvdxhSybmpTdbIhlNpQZ67Ut+ch0L2Da7n+hnsnr6XAUE85XVTiP5a
mECKDm3J1ErOKhB5PdkVr7YF3efGPJ8caJaaPaIxZAr28czIpuW6egKO2+x9vyOE
sp9XZ/QG9HKllw==
-----END CERTIFICATE-----
Generated at Fri Mar 20 09:02:34 2026 by rpki-client