Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: Uc8cNTAlFGzJIKz16Ct8lAQdOi0aGCQ+2XI01+gtDg0=
Subject key identifier: 35:02:07:B0:84:CE:46:1F:FA:BD:73:C2:9D:C0:85:EF:63:82:3F:7C
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 019D3865A5EDCA8D3C3A274616D1E3A77BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: RZ/OOwVxyCAqmoYFz2d98iDMuOnRa2NbKSdQ5b/MKss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a5:ed:ca:8d:3c:3a:27:46:16:d1:e3:a7:7b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=350207b084ce461ffabd73c29dc085ef63823f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:90:ad:1c:fe:af:aa:74:5c:a7:87:ba:4c:
8b:1f:4e:be:a3:1f:49:72:1f:25:2d:9e:99:6a:5d:
e3:90:8d:65:d6:2f:f0:90:f1:80:0c:70:d2:84:26:
a3:e9:3e:40:30:40:cf:e5:81:d4:12:ac:95:08:89:
6a:e5:ff:29:19:f2:34:c1:ae:8e:17:ec:c7:c9:7b:
6a:7b:70:c2:43:0e:43:f2:82:ac:c2:85:db:d3:18:
9b:44:29:8d:66:27:a8:b2:c5:88:0a:34:55:08:2d:
34:40:7d:51:1f:b4:b4:1e:5a:cf:a4:06:41:8e:13:
09:92:28:cb:25:b0:19:61:54:eb:58:e1:76:4c:b8:
6c:96:40:22:8e:90:6c:24:89:52:16:e5:9b:c4:5b:
77:c7:03:31:0a:8e:57:da:2d:65:d2:cb:28:3d:3f:
64:a5:95:31:c8:94:a4:96:62:28:9c:b7:53:ee:38:
6d:80:b9:33:64:7d:41:e9:87:fd:5e:8d:31:df:f3:
39:6e:44:95:48:d7:b9:b0:c9:8d:d7:47:16:c7:61:
01:70:84:b5:f5:23:3c:3d:be:9d:dd:ed:9b:52:ad:
3e:ee:9a:6b:9a:24:49:a2:bd:7b:e3:d4:25:9a:f0:
9e:a1:ad:87:51:0d:e3:7d:ba:32:e1:0f:6b:31:7f:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:07:B0:84:CE:46:1F:FA:BD:73:C2:9D:C0:85:EF:63:82:3F:7C
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:cf:4a:f6:0b:d6:3f:81:90:dd:b2:71:0f:21:2c:2c:af:
d9:b5:e7:ff:1c:bd:57:76:cf:9e:2a:b0:41:ce:69:21:d2:6b:
63:8f:0a:00:cb:f8:48:69:bc:be:fe:8e:35:8e:e1:d3:01:ca:
5e:94:d8:11:bf:27:5c:56:56:5b:10:46:17:0e:57:07:a8:80:
69:c3:ac:43:04:51:33:51:ed:c1:83:7c:f6:33:cd:fd:61:8c:
2c:4d:35:84:c5:c1:56:61:b3:1d:75:58:f0:90:41:12:d3:1a:
60:b3:28:66:9a:d8:7d:5f:02:e5:5a:e0:15:ab:e8:d2:7b:7e:
90:ce:ca:42:25:a7:b2:d0:fb:47:67:51:62:8a:33:24:65:ab:
34:19:03:46:ee:7b:4c:67:00:61:16:69:93:e4:db:72:03:d1:
7a:21:fc:fc:de:ba:5f:2d:ac:c6:5c:b6:66:65:3d:a7:6b:a6:
99:26:92:6c:f9:9e:99:8b:0c:d0:ae:3e:77:c6:d1:21:c7:68:
38:07:d3:01:6d:f1:4d:a5:9e:8d:65:11:31:c9:5b:8e:f8:1c:
7b:00:ac:c5:23:1e:47:ba:70:d0:f1:d7:e6:13:ab:54:2c:e4:
ec:49:ea:1a:ab:4d:b5:f2:ca:b3:26:54:cd:48:28:cb:e7:d8:
71:e3:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:15:27 2026 by rpki-client