Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: pTA0WTX2EO5QYu+G7yki4H/05bKCgYUGsfNYxCvK3l4=
Subject key identifier: 8B:77:D8:32:1C:CE:AE:C8:20:3D:52:DC:63:30:5D:10:07:FD:9D:D8
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 019D38D33C0DCF140196FD15BDAC8B442E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 116A
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: 9oX+zog01zRqn5ntmOR2p67zzbej9nSltRKD50Qkcow=)
2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3c:0d:cf:14:01:96:fd:15:bd:ac:8b:44:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=8b77d8321cceaec8203d52dc63305d1007fd9dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:b8:91:9b:0b:f4:1d:8d:fc:1f:ec:60:cd:
16:21:52:05:4b:75:b2:ce:c2:19:e1:2d:97:11:30:
65:6c:bc:39:56:04:96:ce:08:3c:44:a7:ea:13:3f:
9c:1f:ad:ef:0e:0d:a1:c0:c6:85:bb:d0:29:7a:14:
a3:4c:d4:ac:59:7c:6f:5d:af:e4:11:60:e7:6d:83:
dd:da:49:ce:45:5f:db:43:ff:a4:e9:63:28:97:60:
ef:7b:d2:a5:b8:2b:1e:b8:32:ef:55:bb:fd:9b:66:
9f:b5:b4:ca:71:c6:08:f6:a4:40:ba:3e:c1:95:a2:
ca:44:17:72:cf:bc:c5:93:40:6c:4e:04:03:16:7c:
44:d6:d4:8b:be:14:ea:a5:3f:42:c8:33:b0:c4:03:
b1:82:56:97:a3:17:85:74:da:6a:0d:f7:21:ae:96:
e0:1a:aa:b9:52:66:2e:0a:6b:7a:ff:47:3c:de:a5:
af:47:db:1b:4d:16:1d:5f:0b:a0:fd:6c:61:1e:87:
ec:24:24:cb:2c:73:ad:bd:fa:97:69:8b:fc:5a:0f:
5a:5b:2c:5e:29:e4:ac:a6:57:61:5c:35:40:a4:da:
2f:72:62:af:d4:a0:0f:0e:23:08:40:14:89:46:18:
d6:2d:02:7a:ed:be:20:5f:ac:c1:71:66:29:98:93:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:D8:32:1C:CE:AE:C8:20:3D:52:DC:63:30:5D:10:07:FD:9D:D8
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:0d:1c:8e:41:b7:ab:c9:9c:ce:2f:ba:8d:e8:c0:6f:6f:
c5:e5:be:cd:5f:20:02:f7:16:2a:b4:3b:81:25:30:bb:db:fa:
7d:69:77:21:e0:f5:69:37:cc:bc:dd:47:1d:7c:a3:23:f0:21:
16:ee:1b:1d:62:92:5a:25:da:17:76:1a:d2:83:f1:4b:31:96:
1e:21:1f:dd:03:d8:69:59:ec:d2:1d:99:4e:63:56:ef:a5:ea:
9e:f7:0c:1b:2c:90:9b:c7:45:1d:f0:0e:1d:88:f4:c2:fc:49:
29:3f:ec:31:3e:72:1c:5d:47:94:1e:b4:f4:5a:bd:fc:f6:cc:
03:85:5c:3f:b1:1d:2d:06:85:69:d3:84:49:a9:8a:67:ea:31:
8b:7b:80:49:dc:88:4a:a8:36:6e:c2:38:1f:12:1c:e0:ee:af:
d4:37:e1:fc:23:5f:bd:c1:72:66:8b:45:b4:56:96:9f:b3:4b:
37:11:7d:14:e8:69:c0:4f:05:0d:cd:53:22:53:26:62:c7:eb:
a3:ee:44:b8:3a:0e:b8:80:43:13:e5:91:21:d1:55:ad:c6:a3:
f8:cb:02:dd:c3:32:36:98:0b:5f:17:e1:c8:7f:d2:14:18:9c:
c3:ff:ff:b3:dc:39:d8:d4:82:fc:da:98:4e:13:2d:9b:a1:63:
69:56:2e:e1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ040zwNzxQBlv0VvayLRC5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0
OWRiZGQwHhcNMjYwMzI5MDkwMTAwWhcNMjYwMzMwMDkwMTAwWjAzMTEwLwYDVQQD
Eyg4Yjc3ZDgzMjFjY2VhZWM4MjAzZDUyZGM2MzMwNWQxMDA3ZmQ5ZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqha4kZsL9B2N/B/sYM0WIVIFS3Wy
zsIZ4S2XETBlbLw5VgSWzgg8RKfqEz+cH63vDg2hwMaFu9ApehSjTNSsWXxvXa/k
EWDnbYPd2knORV/bQ/+k6WMol2Dve9KluCseuDLvVbv9m2aftbTKccYI9qRAuj7B
laLKRBdyz7zFk0BsTgQDFnxE1tSLvhTqpT9CyDOwxAOxglaXoxeFdNpqDfchrpbg
Gqq5UmYuCmt6/0c83qWvR9sbTRYdXwug/WxhHofsJCTLLHOtvfqXaYv8Wg9aWyxe
KeSspldhXDVApNovcmKv1KAPDiMIQBSJRhjWLQJ67b4gX6zBcWYpmJPZewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIt32DIczq7IID1S3GMwXRAH/Z3YMB8GA1UdIwQY
MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm
LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz
YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM88N
HI5Bt6vJnM4vuo3owG9vxeW+zV8gAvcWKrQ7gSUwu9v6fWl3IeD1aTfMvN1HHXyj
I/AhFu4bHWKSWiXaF3Ya0oPxSzGWHiEf3QPYaVns0h2ZTmNW76XqnvcMGyyQm8dF
HfAOHYj0wvxJKT/sMT5yHF1HlB609Fq9/PbMA4VcP7EdLQaFadOESamKZ+oxi3uA
SdyISqg2bsI4HxIc4O6v1Dfh/CNfvcFyZotFtFaWn7NLNxF9FOhpwE8FDc1TIlMm
Ysfro+5EuDoOuIBDE+WRIdFVrcaj+MsC3cMyNpgLXxfhyH/SFBicw///s9w52NSC
/NqYThMtm6FjaVYu4Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:44 2026 by rpki-client