Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: sXKtgvBAh/SkvH6HkOh6NJXFsxtIBjTXdzxdnnCf00A=
Subject key identifier: 45:7C:A3:83:F1:F7:6B:85:63:07:C8:48:E6:59:CC:4F:31:FD:D6:F3
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019D37C0B865C6B0A6BF5D0143A3D6B22CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 1192
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: juLnzh3PxkakDoAwd5gKVRf/i8weiqirxFW0pgZ0HhE=)
2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b8:65:c6:b0:a6:bf:5d:01:43:a3:d6:b2:2c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=457ca383f1f76b856307c848e659cc4f31fdd6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:eb:dd:23:64:fc:0f:9b:61:ff:f4:0c:36:
7e:d0:de:48:2b:4e:c6:1a:b9:69:9b:ce:32:63:c7:
29:ad:0b:6b:f5:ed:df:b4:39:1d:14:c3:28:40:78:
8a:03:fe:3f:f9:32:d7:5a:61:ae:1b:a9:2e:6f:ee:
4a:1f:ba:a0:55:2d:af:79:22:e3:52:ec:e3:98:77:
69:b0:42:98:5c:f9:1e:de:87:a6:d3:d9:3a:dc:e8:
53:ca:e9:a4:b8:e9:42:91:31:20:c2:76:53:4d:29:
3a:88:a6:b5:af:04:47:4d:13:55:15:2d:db:28:34:
1a:49:45:04:0c:8d:b6:1c:97:02:17:4f:0e:28:d3:
23:40:71:f4:d8:60:34:53:a0:9d:ee:e4:a3:be:5c:
f8:94:73:06:92:53:84:28:aa:d6:af:2d:04:b5:32:
b8:79:f8:79:db:4f:d2:f7:d3:40:46:2d:31:b5:11:
29:56:cd:12:97:c1:82:f1:1b:1a:20:da:45:38:d4:
2d:2f:ae:4c:82:5e:c5:2f:05:0f:78:73:98:13:7a:
94:92:52:5b:ff:ed:f0:c8:c4:90:17:6a:1f:cf:fc:
8b:87:37:5f:c7:3d:54:d0:eb:c6:ef:03:96:aa:81:
56:a5:b9:86:a0:a6:a9:5b:d4:30:b4:58:2d:ad:8c:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:A3:83:F1:F7:6B:85:63:07:C8:48:E6:59:CC:4F:31:FD:D6:F3
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ba:e1:16:5b:81:70:6e:fe:24:ca:c4:63:20:73:86:27:e6:
c8:c0:f4:47:f2:28:79:34:4d:c9:44:a2:d3:b1:75:e4:68:bb:
fb:d6:81:6d:6e:e4:6c:59:09:8a:c0:34:e8:9e:14:b6:78:e2:
90:fa:53:29:11:11:38:97:db:ca:44:00:7f:04:57:59:9b:11:
e1:cf:00:84:96:cc:d9:b2:1a:21:de:ca:a4:24:8a:62:b0:fb:
e2:2c:ea:e6:c0:28:d5:65:45:6d:37:db:df:af:65:b3:a5:7d:
e1:e6:e5:9c:68:b1:71:64:94:29:f3:2f:c2:a1:2f:ba:bc:1a:
7c:e8:01:e2:ca:ed:5d:ee:d8:34:2b:6b:63:e8:08:b1:cd:8c:
59:7e:97:42:20:60:bb:b8:9a:e7:22:4e:9c:8b:6f:d5:d7:96:
e5:12:56:2a:0c:45:c6:cb:72:16:2e:6a:df:80:72:8f:5b:c5:
23:ee:43:04:c8:2a:dc:34:b0:b9:be:ed:1f:31:09:79:c1:9b:
1c:67:61:6a:e0:d3:93:6e:a4:5d:ae:4e:36:a0:8a:02:e3:d2:
d3:62:89:45:3b:5c:dd:44:03:1e:1d:58:34:f9:00:95:3d:4b:
6a:d4:e6:b5:25:10:b9:1e:99:f6:b9:b4:d3:5a:76:4d:73:59:
d7:c7:62:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLhlxrCmv10BQ6PWsizKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjYwMzI5MDQwMTEwWhcNMjYwMzMwMDQwMTEwWjAzMTEwLwYDVQQD
Eyg0NTdjYTM4M2YxZjc2Yjg1NjMwN2M4NDhlNjU5Y2M0ZjMxZmRkNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXr3SNk/A+bYf/0DDZ+0N5IK07G
Grlpm84yY8cprQtr9e3ftDkdFMMoQHiKA/4/+TLXWmGuG6kub+5KH7qgVS2veSLj
UuzjmHdpsEKYXPke3oem09k63OhTyumkuOlCkTEgwnZTTSk6iKa1rwRHTRNVFS3b
KDQaSUUEDI22HJcCF08OKNMjQHH02GA0U6Cd7uSjvlz4lHMGklOEKKrWry0EtTK4
efh520/S99NARi0xtREpVs0Sl8GC8RsaINpFONQtL65Mgl7FLwUPeHOYE3qUklJb
/+3wyMSQF2ofz/yLhzdfxz1U0OvG7wOWqoFWpbmGoKapW9QwtFgtrYyi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV8o4Px92uFYwfISOZZzE8x/dbzMB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLrhFluB
cG7+JMrEYyBzhifmyMD0R/IoeTRNyUSi07F15Gi7+9aBbW7kbFkJisA06J4Utnji
kPpTKREROJfbykQAfwRXWZsR4c8AhJbM2bIaId7KpCSKYrD74izq5sAo1WVFbTfb
369ls6V94eblnGixcWSUKfMvwqEvurwafOgB4srtXe7YNCtrY+gIsc2MWX6XQiBg
u7ia5yJOnItv1deW5RJWKgxFxstyFi5q34Byj1vFI+5DBMgq3DSwub7tHzEJecGb
HGdhauDTk26kXa5ONqCKAuPS02KJRTtc3UQDHh1YNPkAlT1LatTmtSUQuR6Z9rm0
01p2TXNZ18dixw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:26 2026 by rpki-client