Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier: UvprzFOBnJ6ksqGcnlbxZ5tFw0Ot7LtlkW6FIKF4DuY=
Subject key identifier: 44:DD:23:66:67:B5:B6:BC:C7:1E:D4:8F:9C:51:DF:44:F5:59:21:EE
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 019D38D2CBE90E29F3E8540EFE8EFFCE587F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number: 133C
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: 0wdJlqog+Zn/hD3nTX7mmWjj0P6YTyi+XhIds8WlBV0=)
2: geUvZA4ewTlG88hTMf-uSmrWhDQ.roa (hash: 2pWVSfUZrGtWyoII6+WIJ6jWbQPbI427Ph6KkMpwer0=)
3: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (hash: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cb:e9:0e:29:f3:e8:54:0e:fe:8e:ff:ce:58:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=44dd236667b5b6bcc71ed48f9c51df44f55921ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:b3:09:78:58:64:e7:0e:34:5c:f4:05:91:
14:a6:3d:85:a4:1e:3b:b5:47:ea:a5:aa:09:4f:c1:
be:13:4a:77:14:65:f6:cf:0d:fd:7a:d0:ae:11:c0:
80:c3:9b:4c:ea:06:80:f3:30:33:ac:27:68:3c:10:
14:60:dd:e6:7d:ad:e5:73:5e:89:b8:8b:df:36:e4:
88:76:ea:cf:94:9e:a8:7a:a9:c5:db:d8:c0:2e:3c:
77:16:78:70:c9:fd:a2:9f:70:b4:d5:45:71:1c:fe:
ab:db:cb:f7:a7:ca:b6:0a:e3:67:01:c5:9d:ba:ff:
59:9d:3e:31:65:09:5b:dc:db:ab:20:23:d6:8d:00:
4f:97:10:07:44:c2:f3:b6:6f:c4:5f:29:a1:80:b6:
ac:70:50:bf:a9:f2:a4:f3:0d:31:7a:d4:e9:dc:f7:
ce:74:1a:85:f1:d2:e7:8c:52:b9:9f:86:88:12:38:
9d:b3:ce:57:33:ad:f6:55:18:f0:7f:df:86:cd:ac:
33:e0:71:9a:9b:22:45:cf:23:c4:45:6c:85:67:8a:
5b:8d:0a:48:99:62:48:c3:10:9b:4a:d1:f0:a7:d0:
25:7c:a4:f7:bf:60:08:14:24:03:bd:4d:e5:70:92:
97:23:78:92:60:51:a4:ea:d3:f2:4e:64:a6:0d:43:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DD:23:66:67:B5:B6:BC:C7:1E:D4:8F:9C:51:DF:44:F5:59:21:EE
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0b:4e:18:6f:79:db:ea:72:80:ed:ff:86:8d:40:cb:94:9a:
61:93:86:d8:90:88:94:62:4e:52:6a:38:c5:67:14:65:d1:3c:
e2:0e:b3:b3:b7:d3:9a:9c:c4:cf:74:ba:ed:fe:e3:1e:96:15:
50:5f:8c:a2:76:8e:bb:1a:03:b8:81:34:fd:5c:22:6a:94:8d:
d2:cc:37:a4:21:cc:51:a7:36:1e:c6:97:a5:bb:e2:02:08:a1:
32:c1:a4:3c:eb:ec:07:2c:f4:6f:84:6e:d1:a7:b8:30:a6:1a:
90:5a:04:8a:d1:fc:a3:78:6a:ac:76:83:de:1c:dc:a5:58:ab:
36:fd:50:a2:2f:69:0c:d6:fc:81:53:46:20:c3:7d:a3:8d:5b:
42:7b:2b:13:94:48:eb:16:6f:2b:7f:0b:4d:79:7d:d7:8e:d8:
fb:1c:01:a6:d2:84:09:d2:08:1d:83:5a:57:98:7b:b5:ec:d6:
d1:47:33:23:a9:5b:c8:a7:1c:ee:ed:0a:cc:fd:84:11:83:de:
f7:5c:01:83:16:df:8d:c7:2c:23:55:95:8e:86:02:d5:0c:ca:
fb:d6:1e:c4:ca:19:31:75:6a:3b:8c:71:74:9c:31:24:50:02:
ec:60:c6:29:74:9b:31:c5:10:d7:34:69:36:97:7d:9b:0e:68:
65:2c:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:29 2026 by rpki-client