Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier: KNJ97U0kof86m76tWykdpZ+8a/kbnjZlKdnRJNja+cs=
Subject key identifier: B6:64:0B:2D:9C:1C:59:0A:DA:41:B4:E9:37:08:AD:4B:DE:36:E9:C1
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial: 019D3941628230BF703CC586D71A57334C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number: 09B5
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: yCBCc4/z4LOsILeQ1bFGUJwZHS/GL9aFNV/i5ClrROM=)
2: betqUpBNxt2fw8P1gRb-nmRchZ0.roa (hash: TA1LiGt+yd3esB5iVavjPJEuxZ2ixHs066seZWy0AXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:62:82:30:bf:70:3c:c5:86:d7:1a:57:33:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=b6640b2d9c1c590ada41b4e93708ad4bde36e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:90:2b:b4:f9:d2:e8:68:c1:8e:9e:55:80:
ae:46:11:fa:67:d4:a2:8d:7b:ee:c0:65:56:cf:52:
a5:ef:ef:50:e6:17:c2:37:91:f7:8a:f3:d9:df:50:
2b:5c:49:6b:31:e9:89:46:3b:0c:cc:86:8f:ae:5c:
64:bd:ae:a9:74:3e:ad:3b:3b:70:b6:ba:1a:ba:e5:
80:0d:e4:8e:a6:a0:fd:0f:ef:36:22:f6:0c:76:76:
8d:ee:a4:10:a3:7b:91:c7:a3:18:1d:c3:a6:1d:0d:
65:74:75:16:4a:af:f1:53:f1:ad:cc:a5:75:c1:8c:
d2:3f:d0:7c:e3:0f:de:1c:30:b2:9b:0b:4e:d0:31:
23:fa:b4:9f:9d:77:6c:dd:ae:55:b6:cf:bd:3d:7e:
7c:fc:d2:48:31:c3:2b:fe:b2:8f:a9:d1:27:57:1a:
1e:12:73:84:55:f9:71:7d:24:41:1c:35:27:81:d7:
96:df:be:62:2e:3a:39:3e:d3:52:b9:12:41:04:9d:
07:a0:5e:d7:73:f6:86:38:89:d8:08:94:6f:73:0b:
73:60:96:10:bf:b4:84:53:d1:8d:af:c6:46:26:7d:
44:2e:35:f1:50:e4:ed:ba:cd:92:9b:1b:d4:a5:58:
fc:1f:df:0c:54:60:97:24:8c:d9:64:1d:5f:c1:36:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:0B:2D:9C:1C:59:0A:DA:41:B4:E9:37:08:AD:4B:DE:36:E9:C1
X509v3 Authority Key Identifier:
keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fb:14:b7:7c:8d:c2:0c:13:76:51:3d:34:64:2f:b2:f9:e2:
ef:bb:b0:96:3b:59:03:66:ba:56:d3:71:31:43:a7:e6:8b:47:
7f:61:a9:ed:c4:e4:14:5c:ba:66:e3:c1:0a:0f:5a:a8:3c:c0:
d7:7a:d0:bc:4d:00:99:9a:27:a8:8b:82:26:0d:19:51:f2:fb:
62:9c:32:c9:16:12:ff:27:a3:a0:ed:f1:7f:cf:6c:23:b9:18:
40:25:39:df:e2:9c:93:35:07:ec:4f:52:82:a7:b8:65:37:37:
9e:37:d7:52:22:d3:d7:18:de:71:f7:27:d9:2c:aa:6e:13:c4:
a5:9d:61:f0:6b:e0:ff:cc:fa:94:c5:11:27:30:09:42:50:b3:
a1:8e:1a:70:e7:4b:e7:e3:cd:a5:1f:56:39:14:ed:b9:0f:83:
81:05:49:4c:02:99:24:b7:af:12:17:62:50:4e:5f:39:47:cd:
5a:2f:00:c2:a1:c6:d0:18:17:34:45:09:0e:c2:f7:70:e0:65:
70:54:71:65:da:50:b0:32:41:41:f7:af:a2:39:94:8d:9e:c3:
40:be:da:29:fc:08:b2:e2:6a:56:e9:10:ae:95:c6:f0:fd:82:
f4:d7:0f:bf:01:39:07:0c:3c:8d:e8:a7:88:80:80:4b:3e:f6:
82:58:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:12 2026 by rpki-client