Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: gKSZGCOrIDVwk+gSCXmwENN9oWkSgJKXiYIepuDHz2I=
Subject key identifier: C6:AC:30:1D:21:15:BD:B0:CD:B1:6D:5E:57:13:86:C0:02:1B:32:B7
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 019D37F6F75E8E8EDA2D1982A888A690C8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 08B6
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: 2txQ-0RSqs2uJRwQDVdC5Ar0Q1U.roa (hash: dgukSS0gWF7oah9dhXPhy2J6/nwd2z1Om6wRww4A75c=)
2: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: L/BDF9sZEl0FIZoj00Zh94UGKsnUJ3Jx+nPaPHnY0TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f7:5e:8e:8e:da:2d:19:82:a8:88:a6:90:c8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=c6ac301d2115bdb0cdb16d5e571386c0021b32b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:5f:48:18:22:ae:39:d8:ba:be:3e:a5:e3:
1d:4b:05:6e:94:c2:27:d9:60:ce:5f:cb:a4:e3:e5:
c2:32:2e:32:71:92:d1:04:78:82:8e:76:a7:9a:91:
88:41:da:20:d5:1f:41:61:ac:07:9e:e6:fe:72:93:
73:38:1f:ed:8d:4b:2b:46:95:24:28:61:c1:15:12:
41:64:81:4d:2b:c6:8e:67:d0:1e:89:72:41:e6:73:
5d:82:d0:57:5f:21:38:34:1a:2f:1b:53:b2:3a:18:
e2:a9:3e:2b:cc:cb:2b:9c:2b:35:ce:03:16:69:78:
27:23:4f:4f:00:c4:e6:5c:e9:1f:72:65:f7:64:5b:
37:3a:10:c8:11:be:b6:18:ec:63:db:2f:d4:f4:19:
9f:c6:8b:d5:cd:16:11:49:0b:50:d4:26:51:ca:f2:
dd:10:6f:a5:06:ef:f7:e6:49:3a:b4:82:28:fa:ba:
a0:f6:ac:6d:99:14:89:fa:25:e5:ba:f9:0c:32:74:
d3:96:87:86:12:cb:31:c6:1f:90:aa:00:97:d5:5b:
4b:77:82:a1:4a:d2:8c:53:28:8c:9c:96:37:06:62:
cc:d8:58:f7:96:f8:b7:1c:79:71:6c:5d:d0:8c:d9:
8e:28:28:a9:11:58:6f:70:6f:db:94:c7:dd:bb:61:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:30:1D:21:15:BD:B0:CD:B1:6D:5E:57:13:86:C0:02:1B:32:B7
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:5d:90:e8:6f:92:45:14:59:a0:a2:79:16:50:fe:f9:77:
42:ed:04:90:1b:7b:52:7a:09:b8:99:e3:53:2a:77:51:7f:5b:
3a:a2:80:a8:83:42:47:29:df:6f:60:07:a4:fc:fb:c5:19:93:
48:11:b9:3b:74:64:d5:30:86:5d:9e:90:d1:3f:d3:36:42:5b:
e6:93:ba:8c:6f:ba:9c:f1:8f:c7:e8:ee:6f:c0:5f:7d:b6:eb:
b2:e0:94:da:ec:e1:c2:26:3f:23:af:54:3a:0e:54:a0:6d:25:
3f:af:4c:97:6f:34:30:4d:af:b0:6d:ed:4a:6b:7b:e7:01:71:
9b:61:a1:ab:90:43:0a:5b:e9:b6:f9:be:b6:08:c5:21:c9:c1:
68:a2:a4:48:0d:3e:c0:1a:97:83:6d:4b:79:31:30:7a:74:87:
d1:18:89:dd:44:5b:bf:5d:ae:85:34:fc:47:aa:02:4d:1a:9c:
db:6a:59:91:70:1c:9f:f4:47:e7:0c:64:3a:22:b4:10:5d:81:
ac:a7:c7:9b:9f:b2:5f:aa:6e:a1:b2:44:62:34:5b:69:ae:c9:
3b:3c:c8:8e:d6:39:8a:cb:0f:6f:8c:2b:00:53:e1:58:00:43:
aa:27:82:65:2b:89:80:5f:8a:a9:51:70:4c:a3:d2:8f:a2:c3:
e6:a3:48:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vdejo7aLRmCqIimkMizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDg2MTkyY2IzZjI4ZjU4YjIxNDRkZGUyZDkxYTIzMTIw
NTZmYzgwHhcNMjYwMzI5MDUwMDI1WhcNMjYwMzMwMDUwMDI1WjAzMTEwLwYDVQQD
EyhjNmFjMzAxZDIxMTViZGIwY2RiMTZkNWU1NzEzODZjMDAyMWIzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QBfSBgirjnYur4+peMdSwVulMIn
2WDOX8uk4+XCMi4ycZLRBHiCjnanmpGIQdog1R9BYawHnub+cpNzOB/tjUsrRpUk
KGHBFRJBZIFNK8aOZ9AeiXJB5nNdgtBXXyE4NBovG1OyOhjiqT4rzMsrnCs1zgMW
aXgnI09PAMTmXOkfcmX3ZFs3OhDIEb62GOxj2y/U9BmfxovVzRYRSQtQ1CZRyvLd
EG+lBu/35kk6tIIo+rqg9qxtmRSJ+iXluvkMMnTTloeGEssxxh+QqgCX1VtLd4Kh
StKMUyiMnJY3BmLM2Fj3lvi3HHlxbF3QjNmOKCipEVhvcG/blMfdu2EbNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMasMB0hFb2wzbFtXlcThsACGzK3MB8GA1UdIwQY
MBaAFGwIYZLLPyj1iyFE3eLZGiMSBW/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjkt
ZWVmNTI5YTQ3N2U3LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjktZWVmNTI5YTQ3N2U3
LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEpdkOhv
kkUUWaCieRZQ/vl3Qu0EkBt7UnoJuJnjUyp3UX9bOqKAqINCRynfb2AHpPz7xRmT
SBG5O3Rk1TCGXZ6Q0T/TNkJb5pO6jG+6nPGPx+jub8BffbbrsuCU2uzhwiY/I69U
Og5UoG0lP69Ml280ME2vsG3tSmt75wFxm2Ghq5BDClvptvm+tgjFIcnBaKKkSA0+
wBqXg21LeTEwenSH0RiJ3URbv12uhTT8R6oCTRqc22pZkXAcn/RH5wxkOiK0EF2B
rKfHm5+yX6puobJEYjRbaa7JOzzIjtY5issPb4wrAFPhWABDqieCZSuJgF+KqVFw
TKPSj6LD5qNISg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:23 2026 by rpki-client