Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: nxtQh3jd9uKevurTsFvj7Jc9lLoWmDAQPWiYHRs1TS8=
Subject key identifier: DE:08:6D:88:B3:70:E6:BD:CF:50:89:92:08:7E:A7:4B:D9:F8:86:75
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 019D3940B4ED5C9CB65EFC0DA726723C4645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0C54
Signing time: Sun 29 Mar 2026 11:00:35 +0000
Manifest this update: Sun 29 Mar 2026 11:00:35 +0000
Manifest next update: Mon 30 Mar 2026 11:00:35 +0000
Files and hashes: 1: Uc8-vtLFC1N8lVj4ndp6unkcS6U.roa (hash: UrDkg/Sd+X+UaUrCGrnxftMeAYE4D59TadpDzTu8j1Y=)
2: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: hzwCdbS3Q2TiNX0vdZ9Jpaivaeug8tBfRoxwmk6cSqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b4:ed:5c:9c:b6:5e:fc:0d:a7:26:72:3c:46:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Mar 29 11:00:35 2026 GMT
Not After : Mar 30 11:00:35 2026 GMT
Subject: CN=de086d88b370e6bdcf508992087ea74bd9f88675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:5b:96:04:7d:e8:d3:e7:73:fc:63:cf:e3:
3c:61:d8:13:28:70:1a:14:b1:f9:2e:d5:39:cb:55:
d4:36:35:01:5d:09:ce:72:23:d1:87:59:55:c7:7a:
be:31:64:47:bb:0e:8c:ca:39:5d:82:37:41:b4:ff:
2f:01:94:f9:7d:e7:31:31:1c:cf:7d:32:eb:9b:12:
a8:6c:1f:f8:8f:cd:1c:fa:92:45:50:8b:d4:c6:ec:
e0:c2:2e:65:7b:ff:f2:3e:0a:39:3b:1c:1d:c3:cb:
bf:ad:09:5a:9e:65:cb:6d:41:8b:8b:33:a8:8d:fb:
38:35:e0:33:a8:ec:85:7e:7d:31:bd:99:d7:ae:2d:
c3:0e:e8:18:da:65:77:62:ce:0e:74:29:19:0b:60:
11:89:23:88:8e:7b:a8:2d:38:bb:c1:8a:68:d0:ff:
63:bc:42:94:c8:cb:d4:2a:80:86:a6:6a:e0:d8:b2:
de:bd:af:c7:29:52:04:19:d6:2b:39:8f:cd:28:ff:
22:f3:11:42:39:38:15:2d:58:3d:10:b0:b7:62:49:
3f:09:2d:a1:91:2e:4e:c7:da:f1:cb:ed:1c:44:dc:
a7:9d:2d:87:07:c1:2f:23:54:8e:2d:ce:c8:8a:6a:
62:b0:8a:07:11:4a:7f:dd:02:d6:f9:12:b0:11:40:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:6D:88:B3:70:E6:BD:CF:50:89:92:08:7E:A7:4B:D9:F8:86:75
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:10:71:14:19:89:84:72:4d:9a:e9:d1:63:67:d9:00:6f:41:
cd:1f:10:61:8d:37:c3:48:4b:73:03:59:de:99:19:92:d2:7e:
17:95:72:e5:7f:13:f7:32:e1:39:1e:05:04:9c:63:7e:87:73:
ab:67:11:de:b3:a1:4e:34:6c:99:ed:ae:d0:85:3f:30:6d:22:
79:36:8e:f3:dd:ec:d9:13:0d:72:ca:07:ae:5c:36:21:81:7c:
a2:3c:b2:b7:6a:2f:b5:32:d3:a8:b1:db:e7:d5:31:51:3e:41:
b6:ea:43:a6:98:08:f9:ce:ab:29:5d:7b:e4:99:af:63:91:53:
78:f2:b4:76:ca:ab:4c:1d:c1:31:d5:c4:a4:52:d8:22:d1:f4:
8f:77:01:55:96:38:67:50:4b:e5:05:30:ed:e5:7b:2f:23:90:
ea:29:61:6c:9b:b1:c1:1f:71:46:6e:2b:7a:5e:3b:eb:20:4d:
f7:1d:cd:ad:38:6c:43:a5:ff:8e:eb:99:cc:f5:09:9c:1e:fb:
4e:f4:67:2f:16:f0:cc:d6:3c:47:17:67:e2:01:3d:f2:3c:b5:
b4:3d:3e:44:0a:20:01:0b:e0:18:e3:ec:12:a4:c2:c5:c8:38:
6f:ac:a3:28:8b:95:06:c8:b0:97:79:16:65:60:fc:3c:e0:07:
19:48:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:54 2026 by rpki-client