Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: azznWuMp9NqrFmSQ38Iqn8/PUTzQsOmKoJbD7Y9kLvk=
Subject key identifier: 0E:DA:A6:D8:82:09:D7:E3:4A:F6:72:48:C1:0E:FF:CF:B1:74:B8:AC
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019DCFE37F919BBE5BA28C70A34E6F38BB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0BE7
Signing time: Mon 27 Apr 2026 17:01:26 +0000
Manifest this update: Mon 27 Apr 2026 17:01:26 +0000
Manifest next update: Tue 28 Apr 2026 17:01:26 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: tUSl5vL9FW++4xYM1XtH87y65EAq/y2VYKlh9T+gZTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:7f:91:9b:be:5b:a2:8c:70:a3:4e:6f:38:bb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Apr 27 17:01:26 2026 GMT
Not After : Apr 28 17:01:26 2026 GMT
Subject: CN=0edaa6d88209d7e34af67248c10effcfb174b8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:96:ce:d6:a3:16:a1:3c:87:dc:76:01:37:
6b:6d:8d:23:26:56:80:6f:9a:a3:f9:ff:d9:24:14:
d5:80:1d:ff:4f:0c:62:3a:2e:95:b3:68:a9:61:e9:
10:df:d4:50:b8:5e:6f:e6:93:da:e9:1b:00:ff:60:
f1:b6:82:3f:82:df:aa:7b:a2:57:af:1c:d9:16:83:
f3:71:ba:f0:b6:19:43:1d:2f:8c:34:86:bd:79:18:
dc:ea:90:40:4c:ec:2a:81:f1:ed:f5:a2:7e:a8:5b:
14:c8:00:77:a9:c3:4c:47:48:94:8d:d6:a5:76:94:
4b:15:f7:62:e7:16:c6:78:07:e0:f6:dc:95:b1:02:
48:81:18:78:42:73:79:4c:af:e4:6e:36:d2:38:3f:
dc:a4:fe:c2:89:05:30:06:d8:19:ee:35:5f:aa:fe:
18:4c:a8:e7:88:a1:b7:b6:81:b7:a2:3b:eb:1b:60:
d4:19:48:0e:b9:b1:39:3e:46:cb:e5:b0:a9:2c:cc:
72:49:c1:5d:3e:6c:5f:18:f6:e6:2a:b8:23:aa:28:
7d:90:a6:54:3d:28:af:90:9a:40:8d:d8:13:14:c3:
ca:cc:ff:14:30:06:31:22:a4:83:c4:6e:1d:0a:01:
36:69:5d:56:36:d0:ca:11:b5:b5:48:98:6b:3a:e2:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:A6:D8:82:09:D7:E3:4A:F6:72:48:C1:0E:FF:CF:B1:74:B8:AC
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e7:88:dc:d5:69:4a:84:09:df:83:2d:9f:e1:d7:6a:04:8b:
58:19:c1:f5:07:52:b8:3b:46:92:c1:14:0f:72:c6:9c:c1:60:
9e:e8:73:e9:92:8c:e9:4f:40:21:6e:34:fd:8f:67:75:99:a5:
3b:37:50:02:ea:6f:7a:b9:ed:bd:2b:95:06:e8:75:97:3b:e9:
72:44:42:83:73:ab:2f:11:ad:ab:a1:1f:3a:d6:1c:97:c1:a9:
a3:8d:8a:8a:56:69:2b:69:25:7b:d0:71:0f:05:a7:6c:9e:85:
da:d0:e9:97:19:b7:e8:9e:e2:e9:a4:4c:e8:38:95:2c:84:69:
2b:17:8b:7f:f1:01:28:ec:b6:e5:79:db:66:d9:87:77:7a:4f:
ce:b7:1c:a7:bc:c9:a6:e5:7b:16:a5:91:09:97:cc:b7:87:de:
56:fd:9f:6e:58:e8:98:26:5d:9a:b3:de:ab:45:e6:db:2d:62:
87:b6:5e:e7:9b:b6:1c:1e:93:1d:c5:7f:e4:46:b2:6a:1d:72:
80:f8:ef:3a:89:61:02:0f:e8:4a:54:c8:b8:1d:59:6e:83:00:
bf:a3:01:b1:45:64:50:3a:5c:80:04:f5:46:df:16:23:eb:05:
7a:6f:77:50:3c:8a:08:0c:e5:ab:74:2b:01:4a:15:bf:96:3a:
e7:23:b1:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P43+Rm75booxwo05vOLssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjYwNDI3MTcwMTI2WhcNMjYwNDI4MTcwMTI2WjAzMTEwLwYDVQQD
EygwZWRhYTZkODgyMDlkN2UzNGFmNjcyNDhjMTBlZmZjZmIxNzRiOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMKWztajFqE8h9x2ATdrbY0jJlaA
b5qj+f/ZJBTVgB3/TwxiOi6Vs2ipYekQ39RQuF5v5pPa6RsA/2DxtoI/gt+qe6JX
rxzZFoPzcbrwthlDHS+MNIa9eRjc6pBATOwqgfHt9aJ+qFsUyAB3qcNMR0iUjdal
dpRLFfdi5xbGeAfg9tyVsQJIgRh4QnN5TK/kbjbSOD/cpP7CiQUwBtgZ7jVfqv4Y
TKjniKG3toG3ojvrG2DUGUgOubE5PkbL5bCpLMxyScFdPmxfGPbmKrgjqih9kKZU
PSivkJpAjdgTFMPKzP8UMAYxIqSDxG4dCgE2aV1WNtDKEbW1SJhrOuJC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7aptiCCdfjSvZySMEO/8+xdLisMB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+eI3NVp
SoQJ34Mtn+HXagSLWBnB9QdSuDtGksEUD3LGnMFgnuhz6ZKM6U9AIW40/Y9ndZml
OzdQAupverntvSuVBuh1lzvpckRCg3OrLxGtq6EfOtYcl8Gpo42KilZpK2kle9Bx
DwWnbJ6F2tDplxm36J7i6aRM6DiVLIRpKxeLf/EBKOy25XnbZtmHd3pPzrccp7zJ
puV7FqWRCZfMt4feVv2fbljomCZdmrPeq0Xm2y1ih7Ze55u2HB6THcV/5Eayah1y
gPjvOolhAg/oSlTIuB1ZboMAv6MBsUVkUDpcgAT1Rt8WI+sFem93UDyKCAzlq3Qr
AUoVv5Y65yOxUA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:07 2026 by rpki-client