Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 5HQZDht6qOdYV0UMKJp8rjLUTEKW+tNDcM1Ixla+/JA=
Subject key identifier: CF:B1:C3:0A:05:FA:D8:B2:3D:99:A7:E3:43:2E:07:11:5D:3D:16:AD
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019D389BB7D106EE59E8CF46F69A2645C58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0C73
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: H+MaqazpPbWmsCo458M1RDURSn+ah13LIceNSx2My+0=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b7:d1:06:ee:59:e8:cf:46:f6:9a:26:45:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=cfb1c30a05fad8b23d99a7e3432e07115d3d16ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:c6:2d:ee:9a:32:b7:8b:4a:dc:d2:5a:9e:
e6:72:fc:f5:71:16:35:fe:34:db:87:d5:07:04:55:
4d:64:f6:28:a6:40:56:2e:8f:0c:ae:21:fe:c2:ca:
75:6a:74:47:c6:af:19:20:19:ad:6b:7e:c5:e8:c0:
c7:43:4d:98:e6:19:42:75:24:ab:4a:c9:76:6f:99:
ff:fe:fd:ff:6f:ae:2f:b3:b3:a1:76:06:6e:13:26:
16:14:5d:79:0c:4e:13:55:3f:ae:2b:2d:45:88:63:
d5:4e:62:86:88:e1:37:9e:58:c7:20:4c:cb:80:c6:
87:19:86:ee:59:e7:62:8c:d8:69:c1:2a:b2:ad:f6:
ed:2b:8b:3f:34:ef:22:ed:62:91:62:2f:68:f8:a3:
28:19:f6:08:f5:2e:8b:12:c4:35:62:1e:69:34:f8:
83:3e:bf:49:b8:b0:24:bf:59:b8:65:1e:79:85:3b:
af:74:39:dd:c0:5b:cb:83:c3:66:90:5e:60:e5:42:
79:38:81:cc:2e:34:13:88:f3:c6:db:ab:0e:d4:9a:
00:11:db:ca:da:9b:ed:47:ea:7b:14:bb:cf:c8:33:
b6:aa:35:cf:fc:6a:3c:a2:16:b0:c6:d4:a6:4d:87:
c5:49:32:42:b3:67:db:a4:d1:84:f6:3b:ee:47:d2:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B1:C3:0A:05:FA:D8:B2:3D:99:A7:E3:43:2E:07:11:5D:3D:16:AD
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:06:f9:b0:ad:5d:17:0e:fe:ce:c7:e7:f4:4d:04:62:66:84:
0f:5a:78:ad:95:95:20:b4:5c:fc:b6:1c:df:45:4c:93:33:d8:
0d:ee:c9:16:7b:d0:7c:3f:1c:2e:c4:cd:6e:d8:d5:4a:10:d0:
a5:80:66:ae:9d:e3:a9:95:b4:b9:55:22:2f:3b:f6:e9:a7:15:
7c:27:08:47:72:e4:f7:df:00:80:68:ad:3c:83:96:b6:99:26:
c9:b6:84:0b:6f:5d:1d:63:a4:b5:a5:8a:72:82:b5:28:a5:16:
45:a8:ac:65:49:21:02:04:11:1f:96:57:dd:5b:87:77:8c:9c:
fb:25:67:bd:5d:1d:40:dd:03:fe:b6:4f:f9:3a:45:d3:2b:0c:
75:b1:0e:08:f6:0b:40:79:63:d5:0e:ff:f9:56:7b:90:51:8b:
0f:12:15:88:91:97:30:8a:f6:1f:bf:55:94:ce:59:40:06:1d:
c6:46:87:49:73:c7:3c:ac:dc:1f:49:d8:3c:bb:2f:b9:9c:ee:
11:19:25:92:51:4c:b9:fd:37:69:04:0a:a7:f9:a8:44:44:5a:
d6:57:c6:d2:96:64:e2:c1:71:5a:59:f4:f0:98:bb:88:d4:7d:
b4:9e:96:1f:43:16:60:49:7a:ef:d7:f1:26:f2:a4:52:70:3c:
3f:d3:0e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7fRBu5Z6M9G9pomRcWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjYwMzI5MDgwMDIyWhcNMjYwMzMwMDgwMDIyWjAzMTEwLwYDVQQD
EyhjZmIxYzMwYTA1ZmFkOGIyM2Q5OWE3ZTM0MzJlMDcxMTVkM2QxNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPvGLe6aMreLStzSWp7mcvz1cRY1
/jTbh9UHBFVNZPYopkBWLo8MriH+wsp1anRHxq8ZIBmta37F6MDHQ02Y5hlCdSSr
Ssl2b5n//v3/b64vs7OhdgZuEyYWFF15DE4TVT+uKy1FiGPVTmKGiOE3nljHIEzL
gMaHGYbuWedijNhpwSqyrfbtK4s/NO8i7WKRYi9o+KMoGfYI9S6LEsQ1Yh5pNPiD
Pr9JuLAkv1m4ZR55hTuvdDndwFvLg8NmkF5g5UJ5OIHMLjQTiPPG26sO1JoAEdvK
2pvtR+p7FLvPyDO2qjXP/Go8ohawxtSmTYfFSTJCs2fbpNGE9jvuR9I6kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+xwwoF+tiyPZmn40MuBxFdPRatMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAb5sK1d
Fw7+zsfn9E0EYmaED1p4rZWVILRc/LYc30VMkzPYDe7JFnvQfD8cLsTNbtjVShDQ
pYBmrp3jqZW0uVUiLzv26acVfCcIR3Lk998AgGitPIOWtpkmybaEC29dHWOktaWK
coK1KKUWRaisZUkhAgQRH5ZX3VuHd4yc+yVnvV0dQN0D/rZP+TpF0ysMdbEOCPYL
QHlj1Q7/+VZ7kFGLDxIViJGXMIr2H79VlM5ZQAYdxkaHSXPHPKzcH0nYPLsvuZzu
ERklklFMuf03aQQKp/moRERa1lfG0pZk4sFxWln08Ji7iNR9tJ6WH0MWYEl679fx
JvKkUnA8P9MOxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client