Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File: E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier: aB5HfEQR37yCYGp4Uvwp1afSwK4mTNn9WRZg4e4zO+Q=
Subject key identifier: 4C:56:54:D0:B5:82:1A:21:B2:20:A5:4F:7F:44:D3:91:98:0F:73:E6
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 019D382DDF44576140BE1186D2FA87932AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number: 0EF6
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: ygYziO1SWDY+hC+Zt7APqZSvQT4LYkTLQnqR2O4NcIs=)
2: Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (hash: zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=)
3: OPOHu4baKrOuoP3MheEFtHAeXko.roa (hash: A1lA/lI/7Nnxtr0SxEKDti+LjBheE5trX2b66xGDddo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:df:44:57:61:40:be:11:86:d2:fa:87:93:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=4c5654d0b5821a21b220a54f7f44d391980f73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:83:a5:29:44:07:69:fd:e3:d2:f3:70:89:
19:22:58:55:e9:df:ec:6d:de:2f:41:38:00:d0:a4:
ec:8d:f3:47:27:60:3a:f6:79:cb:4d:81:5b:36:c3:
91:ed:66:f1:88:79:a9:17:7a:b5:c5:8d:43:ca:8d:
b5:30:67:3c:d0:be:50:1e:12:aa:f0:dd:b1:28:39:
9c:3d:a3:15:c5:57:9b:09:08:94:83:cb:f6:36:1b:
7b:46:31:6b:60:e9:24:d2:ec:84:b2:f9:a2:ea:30:
f7:3e:c5:3f:3e:2c:e5:59:65:71:96:a3:62:89:23:
63:11:3b:dc:44:6b:88:c0:52:44:68:50:75:0e:87:
fa:54:27:fc:81:50:81:4c:5c:70:d4:14:49:f2:72:
14:2c:d0:0d:bb:78:cd:71:38:9e:5e:69:12:c6:7e:
8b:a9:53:51:27:39:30:b6:e6:94:23:d8:22:68:0e:
20:4d:06:c0:52:5f:4a:43:19:2d:55:52:a6:e2:b2:
6e:8d:de:f4:56:99:ee:b8:f8:91:2c:e5:ea:5e:d1:
dc:bb:5f:16:82:91:b4:c7:4d:b6:90:59:3b:ec:20:
dc:3e:91:4d:b8:6b:f9:ff:5a:47:fd:e4:65:ba:6b:
31:60:e0:2d:1e:ac:d6:1f:41:3e:2a:c7:70:a5:96:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:54:D0:B5:82:1A:21:B2:20:A5:4F:7F:44:D3:91:98:0F:73:E6
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:a2:90:60:d3:b7:03:25:09:22:e4:19:a3:3b:81:db:5a:
6d:6d:8a:16:19:f8:a6:82:24:25:4f:07:b5:03:cc:61:fc:d4:
8e:af:61:4b:09:84:26:69:63:27:6b:ba:8a:09:b6:28:c3:71:
68:8e:5b:0a:1b:5f:af:e6:04:c9:79:96:03:3f:b6:05:f4:b9:
6e:45:b6:71:fd:ec:01:c4:df:10:2c:42:ec:66:35:c4:17:23:
b4:fb:11:95:f8:82:4a:a1:f0:c1:95:93:98:85:7f:fb:f7:da:
05:ef:09:b9:e0:87:61:1e:75:34:06:f7:70:46:23:eb:3c:0b:
19:f7:dd:70:0e:73:cb:b3:8d:67:b0:35:5b:9d:74:df:80:b2:
e8:34:9d:02:eb:cc:17:3e:23:e9:dd:88:e2:4a:e1:5b:1e:89:
01:96:20:fd:50:aa:f0:02:a8:63:d8:33:0a:33:10:ad:7e:58:
ef:e1:e2:7d:35:8c:b5:6f:e6:55:05:39:4c:c1:8e:18:b0:3d:
ea:25:65:6b:8c:d4:f8:04:8e:a5:d4:dd:68:c4:80:37:b0:61:
7a:82:fe:cf:a9:07:7f:f0:73:2c:cd:4f:e2:f7:bd:75:bd:7b:
7a:27:86:b4:2c:c6:88:b1:71:0b:74:cd:4e:f9:18:ce:e4:49:
65:86:a8:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ld9EV2FAvhGG0vqHkyrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYTBmNzE0M2ZmYTIyMTEzNDQyZGM4NTg5ZWUxMzUyZWJl
M2RhYTMwHhcNMjYwMzI5MDYwMDIzWhcNMjYwMzMwMDYwMDIzWjAzMTEwLwYDVQQD
Eyg0YzU2NTRkMGI1ODIxYTIxYjIyMGE1NGY3ZjQ0ZDM5MTk4MGY3M2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1SDpSlEB2n949LzcIkZIlhV6d/s
bd4vQTgA0KTsjfNHJ2A69nnLTYFbNsOR7WbxiHmpF3q1xY1Dyo21MGc80L5QHhKq
8N2xKDmcPaMVxVebCQiUg8v2Nht7RjFrYOkk0uyEsvmi6jD3PsU/PizlWWVxlqNi
iSNjETvcRGuIwFJEaFB1Dof6VCf8gVCBTFxw1BRJ8nIULNANu3jNcTieXmkSxn6L
qVNRJzkwtuaUI9giaA4gTQbAUl9KQxktVVKm4rJujd70VpnuuPiRLOXqXtHcu18W
gpG0x022kFk77CDcPpFNuGv5/1pH/eRlumsxYOAtHqzWH0E+KsdwpZbc4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExWVNC1ghohsiClT39E05GYD3PmMB8GA1UdIwQY
MBaAFBOg9xQ/+iIRNELchYnuE1Lr49qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgt
MTA0YTMzNDM3NjY1LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgtMTA0YTMzNDM3NjY1
LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjOikGDT
twMlCSLkGaM7gdtabW2KFhn4poIkJU8HtQPMYfzUjq9hSwmEJmljJ2u6igm2KMNx
aI5bChtfr+YEyXmWAz+2BfS5bkW2cf3sAcTfECxC7GY1xBcjtPsRlfiCSqHwwZWT
mIV/+/faBe8JueCHYR51NAb3cEYj6zwLGffdcA5zy7ONZ7A1W51034Cy6DSdAuvM
Fz4j6d2I4krhWx6JAZYg/VCq8AKoY9gzCjMQrX5Y7+HifTWMtW/mVQU5TMGOGLA9
6iVla4zU+ASOpdTdaMSAN7BheoL+z6kHf/BzLM1P4ve9db17eieGtCzGiLFxC3TN
TvkYzuRJZYaoiw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:38 2026 by rpki-client