Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: h0q/8LX1/v6Wv8t6qvWsFLEEFge4yNPXhHlbFaDi3wY=
Subject key identifier: 59:8D:C5:EF:BE:A0:BC:3C:EE:26:88:52:6B:3A:8D:55:77:0C:C5:8B
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019D39407C11D0CA2E3FCDFE634217B295D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:20 +0000
Manifest this update: Sun 29 Mar 2026 11:00:20 +0000
Manifest next update: Mon 30 Mar 2026 11:00:20 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: KNC5FxQjP0KA8TT/fA/+E/2fcZjqLUVi1JOtBoO/zVk=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7c:11:d0:ca:2e:3f:cd:fe:63:42:17:b2:95:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Mar 29 11:00:20 2026 GMT
Not After : Mar 30 11:00:20 2026 GMT
Subject: CN=598dc5efbea0bc3cee2688526b3a8d55770cc58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:bf:c9:c2:c6:29:f6:7d:0b:81:9f:4c:a2:
91:c7:db:58:d7:4d:87:27:36:df:ee:2b:ee:31:fc:
1f:ca:d2:f7:34:a9:04:ab:7e:c9:b9:31:24:6f:d3:
0c:ab:41:1d:da:9d:a9:dc:0b:2a:86:67:3a:2e:8a:
7c:02:68:fe:16:98:46:d5:1a:4f:76:fb:de:44:4f:
26:9e:21:02:d1:f2:40:af:dd:2c:1d:28:1f:e3:29:
2a:70:10:ac:05:b4:54:dd:57:64:5e:1a:90:c6:5a:
56:0a:81:30:4d:54:b1:a7:55:99:db:e9:b4:6d:bb:
10:e3:0a:18:3f:ca:24:d9:69:69:2c:3f:b4:55:28:
05:2e:c7:62:fb:0f:11:f2:19:49:24:27:b9:0f:2b:
86:14:23:ff:85:2b:78:eb:e7:bd:59:6e:75:05:a7:
5b:aa:cf:1d:87:41:c7:5e:eb:d8:f4:f0:71:12:ea:
17:ca:d1:a1:06:26:d6:1e:9e:e5:6c:29:fb:37:64:
4f:25:3e:c5:6a:c5:c5:0d:29:f2:0a:69:dc:ac:83:
0e:a9:e6:66:1e:6d:31:cf:0c:bd:c2:b9:42:ed:41:
88:ef:03:fd:cc:04:70:f3:a0:9b:d4:70:71:a2:33:
d6:85:c7:bc:ef:30:15:4c:f0:8f:65:c7:a3:f2:76:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:C5:EF:BE:A0:BC:3C:EE:26:88:52:6B:3A:8D:55:77:0C:C5:8B
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:25:f3:37:bd:e7:03:39:5a:7a:59:55:01:f0:64:66:2a:
7b:81:39:8c:12:38:54:6e:8d:9d:a4:92:dc:59:97:a5:88:c3:
50:4d:11:fc:8e:01:67:24:80:8b:e5:b8:58:6b:3d:e5:22:6a:
e6:5d:fc:26:6d:32:f3:7d:6d:31:f7:17:42:51:85:54:e2:6e:
21:14:56:d9:95:6e:ce:00:60:71:4e:db:d8:0a:75:ba:3e:ce:
bb:e7:58:76:31:0e:cf:2a:5b:38:59:33:61:85:be:02:7d:cd:
d1:9a:44:5f:df:91:c1:da:38:0a:16:bf:f2:29:25:cb:1a:94:
26:0b:f9:13:11:1b:45:5d:d5:65:6f:2e:49:f1:7a:2a:c2:bd:
86:47:55:e0:e0:16:50:d0:83:e9:9a:ee:9e:02:23:38:e3:b3:
6c:7b:43:70:e7:a5:b0:48:58:e2:37:d4:0b:ce:a9:5c:47:05:
b7:50:61:57:3e:9f:5e:d2:38:63:90:d6:14:33:80:6e:e5:64:
e5:91:70:ff:0f:cb:5f:cc:89:64:c3:ca:bf:57:4b:43:1a:c2:
d9:ff:8c:fa:13:62:19:c1:96:9b:15:88:7b:d9:36:fd:c6:b5:
18:83:e7:64:24:06:02:8e:41:21:fb:32:e7:37:1b:be:81:3b:
14:0a:a9:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHwR0MouP83+Y0IXspXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjYwMzI5MTEwMDIwWhcNMjYwMzMwMTEwMDIwWjAzMTEwLwYDVQQD
Eyg1OThkYzVlZmJlYTBiYzNjZWUyNjg4NTI2YjNhOGQ1NTc3MGNjNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAume/ycLGKfZ9C4GfTKKRx9tY102H
Jzbf7ivuMfwfytL3NKkEq37JuTEkb9MMq0Ed2p2p3Asqhmc6Lop8Amj+FphG1RpP
dvveRE8mniEC0fJAr90sHSgf4ykqcBCsBbRU3VdkXhqQxlpWCoEwTVSxp1WZ2+m0
bbsQ4woYP8ok2WlpLD+0VSgFLsdi+w8R8hlJJCe5DyuGFCP/hSt46+e9WW51Badb
qs8dh0HHXuvY9PBxEuoXytGhBibWHp7lbCn7N2RPJT7FasXFDSnyCmncrIMOqeZm
Hm0xzwy9wrlC7UGI7wP9zARw86Cb1HBxojPWhce87zAVTPCPZcej8nYyjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmNxe++oLw87iaIUms6jVV3DMWLMB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWEl8ze9
5wM5WnpZVQHwZGYqe4E5jBI4VG6NnaSS3FmXpYjDUE0R/I4BZySAi+W4WGs95SJq
5l38Jm0y831tMfcXQlGFVOJuIRRW2ZVuzgBgcU7b2Ap1uj7Ou+dYdjEOzypbOFkz
YYW+An3N0ZpEX9+Rwdo4Cha/8iklyxqUJgv5ExEbRV3VZW8uSfF6KsK9hkdV4OAW
UNCD6ZrungIjOOOzbHtDcOelsEhY4jfUC86pXEcFt1BhVz6fXtI4Y5DWFDOAbuVk
5ZFw/w/LX8yJZMPKv1dLQxrC2f+M+hNiGcGWmxWIe9k2/ca1GIPnZCQGAo5BIfsy
5zcbvoE7FAqpEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:04 2026 by rpki-client