Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File: G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier: Ej3Itho5erAiJ5GVMOJ2GonpWuCvFRmlKXFUPCkrHXE=
Subject key identifier: C8:9D:9B:A5:54:0C:31:72:8D:37:DF:42:8D:F5:7A:B1:27:73:A5:22
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial: 019D39AE58D5490400BF3188B9F9A0EF2C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number: 0674
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: FwOS7mlerXv7T7uFFB8t/+JeOPSLWEs6iJUTtEeKQBY=)
2: qchTwrqi0nAVLi_bl4CZl5ndb58.roa (hash: ldZEDUqRJgpdyT5wjo7UFqGO3TLrWDAMg94GFQn1Yls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:58:d5:49:04:00:bf:31:88:b9:f9:a0:ef:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=c89d9ba5540c31728d37df428df57ab12773a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:03:bc:72:08:94:51:5b:e4:81:86:17:c0:
9c:a8:d7:c4:6d:7f:65:f9:a9:87:ed:ac:f1:84:13:
6b:f2:5d:de:06:c9:2c:04:bc:26:40:89:8e:c1:02:
a3:f2:11:dc:23:a5:7e:8a:c9:a5:39:e0:1e:d6:2c:
b9:f7:61:04:dc:52:43:e6:77:98:78:79:56:97:92:
89:fb:93:72:46:ad:03:a7:26:ef:77:5f:28:7e:8c:
b6:92:9d:71:89:ef:be:dc:66:10:c9:19:b7:95:02:
57:b5:4b:a1:0a:3d:9d:bf:df:ec:81:e1:bc:74:78:
cf:b3:8a:d9:4c:8b:78:45:6c:16:76:25:ff:a5:26:
80:5d:a9:7a:0b:cf:aa:f6:a8:60:19:99:89:7c:72:
12:77:0f:88:fb:27:bb:7e:ef:aa:d8:c3:d7:57:d9:
f4:7e:6b:89:26:e4:07:57:8e:b8:2e:3a:a2:ca:33:
6a:4c:4c:73:b6:16:cc:e6:a3:77:ea:cc:fa:e2:ce:
2f:80:1d:9d:47:0d:c5:90:7f:b5:24:ab:75:b6:6b:
71:d0:e9:56:42:d7:5a:ad:d5:30:b3:24:ce:58:cd:
72:cc:11:34:32:47:73:bf:b8:47:28:33:a8:68:7a:
49:cb:33:34:1b:ca:da:68:99:a7:41:f6:74:a9:68:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:9B:A5:54:0C:31:72:8D:37:DF:42:8D:F5:7A:B1:27:73:A5:22
X509v3 Authority Key Identifier:
keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5e:2b:54:e2:aa:d2:f4:4b:45:6d:aa:10:09:39:a7:86:a8:
8e:d6:4d:92:61:53:97:d7:0c:87:77:70:80:fe:88:c9:1b:bf:
f1:30:9b:a0:c9:24:b0:e0:1d:8f:0b:20:1e:a4:83:1f:15:9f:
5e:33:06:d6:e1:2c:73:d1:57:97:2e:51:bf:87:eb:2a:c5:db:
21:9f:a0:36:c1:7d:47:f5:b7:18:1f:26:69:8f:10:a7:0f:75:
ba:14:9d:22:ff:75:7a:f1:eb:44:b8:bb:6b:9e:ed:cd:96:98:
12:5a:60:67:0e:2a:10:3a:f0:99:a3:07:7b:44:90:86:b2:40:
da:72:c5:2f:48:39:cd:b3:90:8c:e2:bb:3c:2a:93:69:20:1e:
e6:aa:b2:15:4f:2b:c4:d3:5e:f7:c2:5b:2a:42:8f:ed:85:d2:
4a:30:b2:6e:e1:c9:c8:4e:75:3f:5c:b9:57:35:dc:be:ca:41:
fe:74:e5:1c:c9:77:b7:96:53:49:d7:d5:dc:fa:40:4a:53:23:
ce:81:ad:fa:92:25:fb:92:a3:b5:5e:a7:de:e4:dc:63:df:8c:
8a:97:aa:67:24:bc:6c:36:33:0f:ad:b6:b1:51:40:7e:df:9b:
d6:94:be:f3:47:be:1d:5c:6d:ce:c8:22:51:a5:2e:b5:f6:a1:
e0:3d:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:53 2026 by rpki-client