Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: WEZxC0DV3rkCgENJi+0YNSAt2Aq2sRJFRR0hdWroyH0=
Subject key identifier: 6C:2E:34:85:9A:86:80:1B:A1:8B:F5:A6:2B:E5:BD:29:E8:BD:1E:E7
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 019D39AF761AB5A828202DB1B7463FE90B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 136B
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: V060t6JNUi1vfEsa62qo_X0iJE4.roa (hash: AduE5hrvzuYfk+rxNc4doqIVoG5+EDDcPuZpuiYxofo=)
2: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: cnAObwxyY6Q0iLKuyLEoL2yhSD4TgOHhTufwKdRA8Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:76:1a:b5:a8:28:20:2d:b1:b7:46:3f:e9:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=6c2e34859a86801ba18bf5a62be5bd29e8bd1ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:11:db:d1:bb:30:44:4c:f0:e0:13:5a:25:
1a:d7:2a:d6:2d:e8:6c:da:f6:ed:93:05:f3:6f:c1:
2e:ea:0c:c7:f0:fa:3c:9e:af:e3:c2:ea:46:77:6f:
e0:c6:e5:01:21:00:20:81:32:8e:b2:b8:08:2c:16:
ef:2b:00:e5:1a:d8:76:06:53:ed:81:ca:43:4c:1b:
08:3e:1e:96:64:45:f3:30:63:ae:c3:c1:70:9d:64:
3d:cf:db:4c:e9:32:8a:11:cd:3b:d3:d1:12:36:7d:
16:da:ad:b6:3a:4f:2d:fb:c5:83:ca:da:0d:28:1b:
e9:15:0b:18:8b:52:fb:98:e9:48:12:98:50:e1:b3:
6f:56:79:e3:91:51:44:db:a0:3f:32:1d:0c:d7:3f:
71:7b:67:da:51:e9:3c:27:7e:02:83:23:30:d5:aa:
1b:54:b0:79:6a:4d:86:6e:20:9a:54:bf:dc:7b:23:
44:e0:7d:e5:dd:a8:c7:e4:cc:8c:5e:2c:44:46:f7:
2a:49:e8:32:84:26:cb:99:7b:c8:cc:d1:32:2a:8d:
4b:ef:4d:c3:58:46:08:57:cf:ef:0e:fc:97:99:ec:
32:ae:fe:20:05:86:d8:f3:f5:5e:82:c4:c8:37:75:
c0:d2:7b:d1:6e:81:0b:0c:38:7d:29:d3:0d:84:7f:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:34:85:9A:86:80:1B:A1:8B:F5:A6:2B:E5:BD:29:E8:BD:1E:E7
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:83:a9:79:a0:46:c4:43:59:ee:75:96:29:8d:42:5c:54:3c:
90:f1:26:b1:bf:9b:a7:fc:52:95:63:83:25:70:38:6c:95:8c:
88:87:e7:b6:9e:49:de:72:22:34:1c:05:d9:6b:bf:f9:db:59:
c9:4c:1e:61:26:4a:5c:ea:3a:3a:07:02:97:5f:54:bd:c3:29:
ec:bf:39:75:b7:60:58:ac:2a:51:3b:a3:a4:34:54:da:30:e0:
1d:59:c5:c0:e1:13:99:67:58:24:59:b8:59:b7:d5:95:df:d7:
3c:3d:5e:1f:ca:93:59:5b:bc:54:23:f5:e4:a7:a4:16:fc:20:
14:cd:44:16:e1:42:5d:8d:4f:9f:8e:4e:f9:7f:fa:31:4a:b5:
28:3f:dc:5b:78:fe:69:33:e8:1b:82:8a:5a:5e:af:80:8c:47:
f4:a8:1f:2d:16:23:86:00:94:21:f9:cf:43:9d:b5:d5:fc:de:
6d:93:36:3e:6d:8a:9d:f4:50:27:27:bc:07:bf:08:a7:f5:75:
a2:c7:f6:73:dc:8b:ed:90:8e:00:6d:6a:39:a5:03:eb:23:63:
ad:10:85:5e:f3:a6:36:fe:c4:cf:3e:f7:7d:01:f9:80:1e:1e:
95:4e:f8:ac:31:2c:ac:fe:53:cf:ad:4d:9b:13:db:40:77:0f:
50:8e:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:20 2026 by rpki-client