Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: opmZhmmN9sExtkgaC1X62dE7wlfbZScUu0BC+CHe/nw=
Subject key identifier: F2:EC:8B:B9:CC:0F:46:4B:61:E6:C2:10:B7:39:55:70:30:F2:D8:6C
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 019D371BAA43A78CD69673D29E39908135D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:52 +0000
Manifest this update: Sun 29 Mar 2026 01:00:52 +0000
Manifest next update: Mon 30 Mar 2026 01:00:52 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: 9OEyykYCQeqCfSu6cHQTLQLnhqql4We5QWZ/JmYgWzE=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:aa:43:a7:8c:d6:96:73:d2:9e:39:90:81:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Mar 29 01:00:52 2026 GMT
Not After : Mar 30 01:00:52 2026 GMT
Subject: CN=f2ec8bb9cc0f464b61e6c210b739557030f2d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:36:d9:d6:96:2f:f8:82:d1:dd:0f:8f:4a:
85:c2:3b:b3:41:c4:35:7f:ef:61:a6:c7:06:25:b8:
6a:1c:48:5e:c9:d6:fd:d4:f4:84:b4:0f:24:56:56:
b1:48:42:60:b5:d8:12:df:97:a2:18:a7:6e:d0:a3:
c7:75:a7:8a:2a:e9:d6:72:96:bb:fa:9c:29:f2:4b:
a7:b4:12:8d:54:ef:6f:dd:2d:8e:83:09:70:7e:07:
17:f3:f0:ae:2f:41:55:d7:b2:db:11:45:43:72:22:
21:a2:ca:9a:63:37:83:2c:4f:03:e2:a2:83:e0:20:
f3:b6:62:3a:50:ad:cd:73:c1:c4:79:d8:8b:22:8b:
14:c7:53:eb:c3:20:b6:32:a2:93:9e:49:8a:ea:f7:
27:05:81:39:0c:de:b6:76:30:e9:d6:ce:d6:30:79:
32:e8:05:f9:3e:14:37:5a:d2:e8:b2:7d:75:a6:10:
06:16:c4:06:2d:63:ad:0d:5c:51:b7:a1:4e:3d:95:
3b:8b:89:13:55:44:4b:6c:63:07:3f:e0:41:d1:10:
54:da:7b:2e:95:fe:d8:1e:69:92:e6:f7:91:ff:0a:
24:3a:5e:11:6a:e5:5a:2a:c2:1c:90:97:82:cf:cf:
64:ae:ea:1e:2d:61:2f:37:64:b4:42:f2:c7:f7:13:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:8B:B9:CC:0F:46:4B:61:E6:C2:10:B7:39:55:70:30:F2:D8:6C
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ce:e6:1e:54:ac:1b:ff:27:ea:ca:2b:29:a4:d2:d0:5b:fc:
11:ba:1d:e0:1f:75:68:04:57:6a:58:6f:5d:cd:7e:1e:ba:d6:
bb:57:bc:82:a8:0e:71:1f:d8:b7:48:13:0a:29:1b:78:39:c1:
d4:f6:2c:50:86:7b:79:94:93:92:f1:bd:4f:c2:41:84:18:cb:
58:39:1c:08:ee:38:e0:bd:3c:00:62:d7:fc:79:86:da:88:d8:
06:2c:77:db:95:0e:89:e0:31:8c:8d:3b:bc:dd:6e:cc:f3:70:
49:c8:27:05:e6:ac:43:7e:9a:f9:0d:23:dd:51:71:4a:b1:86:
42:70:ef:78:28:a6:df:24:f0:69:85:17:2e:a8:74:3e:ec:7c:
c3:90:06:b8:f8:20:15:30:89:81:12:b3:27:69:b3:8a:66:39:
c7:01:d8:45:d4:be:75:2a:88:e3:a0:17:f6:91:1d:cc:e5:73:
c7:d6:b4:cb:c6:e2:55:8f:8f:71:9c:ee:d9:3a:ec:97:7b:30:
da:b5:b0:fa:80:44:72:20:bf:01:86:e5:e5:63:ba:1a:a6:ee:
e2:ae:4e:d3:01:6c:4b:05:09:48:d5:5a:d0:5c:70:d5:25:17:
b6:43:49:7c:1b:6f:91:b3:01:29:b0:b0:f0:d7:96:6f:16:61:
1f:49:25:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G6pDp4zWlnPSnjmQgTXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5
YjQ4OGEwHhcNMjYwMzI5MDEwMDUyWhcNMjYwMzMwMDEwMDUyWjAzMTEwLwYDVQQD
EyhmMmVjOGJiOWNjMGY0NjRiNjFlNmMyMTBiNzM5NTU3MDMwZjJkODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPk22daWL/iC0d0Pj0qFwjuzQcQ1
f+9hpscGJbhqHEheydb91PSEtA8kVlaxSEJgtdgS35eiGKdu0KPHdaeKKunWcpa7
+pwp8kuntBKNVO9v3S2OgwlwfgcX8/CuL0FV17LbEUVDciIhosqaYzeDLE8D4qKD
4CDztmI6UK3Nc8HEediLIosUx1PrwyC2MqKTnkmK6vcnBYE5DN62djDp1s7WMHky
6AX5PhQ3WtLosn11phAGFsQGLWOtDVxRt6FOPZU7i4kTVURLbGMHP+BB0RBU2nsu
lf7YHmmS5veR/wokOl4RauVaKsIckJeCz89kruoeLWEvN2S0QvLH9xP90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLsi7nMD0ZLYebCELc5VXAw8thsMB8GA1UdIwQY
MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt
ODJlMmQ1ZWU5YzkwLzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw
LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM7mHlSs
G/8n6sorKaTS0Fv8Ebod4B91aARXalhvXc1+HrrWu1e8gqgOcR/Yt0gTCikbeDnB
1PYsUIZ7eZSTkvG9T8JBhBjLWDkcCO444L08AGLX/HmG2ojYBix325UOieAxjI07
vN1uzPNwScgnBeasQ36a+Q0j3VFxSrGGQnDveCim3yTwaYUXLqh0Pux8w5AGuPgg
FTCJgRKzJ2mzimY5xwHYRdS+dSqI46AX9pEdzOVzx9a0y8biVY+PcZzu2Trsl3sw
2rWw+oBEciC/AYbl5WO6Gqbu4q5O0wFsSwUJSNVa0Fxw1SUXtkNJfBtvkbMBKbCw
8NeWbxZhH0klCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:30 2026 by rpki-client