Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: ny/tviayus+DEAxcOsWF/vvp8LoO+s/Cz1NYy6quZrs=
Subject key identifier: 75:CF:27:91:8F:42:5A:49:ED:A5:D0:52:11:30:BF:A8:D8:41:CD:63
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 019D0A7A01983140A3B9C7F00371861C1315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 07C2
Signing time: Fri 20 Mar 2026 09:01:01 +0000
Manifest this update: Fri 20 Mar 2026 09:01:01 +0000
Manifest next update: Sat 21 Mar 2026 09:01:01 +0000
Files and hashes: 1: aMebyeYsCSmSS_1lFCfJ1iL_LRc.roa (hash: JMJQMDh4awwPLboVZjlFyeGOEIJWV3eJSMK2QvujR/0=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: h1QQMg2CpfQLiFo0Jy9R+jZe3Y1AQPCP2r7JhqtBwlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:7a:01:98:31:40:a3:b9:c7:f0:03:71:86:1c:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Mar 20 09:01:01 2026 GMT
Not After : Mar 21 09:01:01 2026 GMT
Subject: CN=75cf27918f425a49eda5d0521130bfa8d841cd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:74:d6:49:9c:9e:61:d5:b9:b5:89:54:ad:
2a:c4:f8:c9:bd:87:a9:c1:d5:28:f3:f0:33:b1:1a:
e6:19:83:3b:ec:27:d6:89:1f:b7:cd:5f:ed:4b:c6:
da:32:1d:77:1e:c3:bd:4d:84:d9:84:e8:3e:70:27:
f4:86:f8:67:67:f3:c3:c8:79:0e:4f:88:63:90:d3:
cb:bd:ce:8e:9b:e5:12:c9:41:26:9c:22:b9:e3:d7:
28:38:10:17:1d:07:92:ab:bf:90:22:66:05:a9:df:
69:f6:1a:22:ea:c7:81:8b:09:47:b9:71:12:08:93:
9e:5c:29:54:b2:da:2b:e9:c8:e7:9c:4f:18:d3:30:
6e:53:bc:93:d2:69:93:ef:1f:a1:9f:77:2b:aa:35:
0b:5f:ac:f9:7f:9a:c0:48:9e:31:60:5b:62:a0:81:
3e:15:3d:da:9f:f7:03:61:6a:97:94:46:0f:8f:fa:
5d:b2:36:e4:23:83:35:86:5c:08:c0:4c:2e:25:50:
0c:39:72:38:b6:2a:d3:08:b3:89:a6:a8:85:50:00:
01:48:92:3c:6a:51:3b:bc:d2:03:5b:05:56:78:4e:
44:f0:eb:f0:54:22:8a:ad:6c:f0:9e:be:94:9b:47:
2d:4b:64:7a:0a:11:30:b0:f6:fa:3a:82:33:66:da:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CF:27:91:8F:42:5A:49:ED:A5:D0:52:11:30:BF:A8:D8:41:CD:63
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:72:c5:88:87:fe:84:bc:0c:a0:b9:5c:73:7f:f7:8a:d4:e4:
03:0b:d7:bd:a5:20:ba:a0:c8:14:0f:53:06:14:c4:f7:ae:5d:
05:4a:d7:f0:de:cc:e7:f2:55:b5:3a:7a:50:55:7e:f1:e7:be:
11:f0:da:2a:bd:ea:83:a8:ff:93:fe:11:64:45:4c:6d:a8:a3:
ef:53:29:0f:32:73:e6:13:0d:86:42:f7:34:dd:77:0e:f4:2a:
98:ec:55:e3:5d:b1:0a:63:83:c3:d9:60:c6:da:6d:87:d7:1c:
76:d6:f9:27:40:c6:70:99:93:9d:64:d6:1f:46:f3:43:fc:9a:
86:a3:70:1c:bb:3d:5e:3d:9d:85:d0:3b:e3:d0:3f:ab:ef:88:
5c:31:e0:46:3d:41:60:4d:37:e5:65:10:63:56:58:dc:be:ea:
cb:9e:f1:60:19:4b:c2:d7:01:03:98:11:9f:7a:b5:f0:7a:9a:
5e:f6:f9:1d:c3:66:45:c7:7d:23:11:9f:28:83:f0:05:e2:28:
74:0a:c0:b3:ea:9a:00:b0:8f:93:54:63:42:ef:ca:a9:1f:4d:
9b:6b:dd:3e:5b:9a:da:d0:d5:14:17:dd:cd:50:d8:24:a3:94:
3f:42:4b:c6:f6:03:2c:ad:83:7e:01:c2:bb:cd:81:34:23:18:
b0:4a:3c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:02:19 2026 by rpki-client