Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: KI7U/Dgjfkf663dye2huOn+2TBY5yOJJOWdqQZc8qyY=
Subject key identifier: AE:34:59:E5:14:22:8F:97:BE:75:32:6A:F1:2D:BF:17:AF:09:11:D0
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019D37C1089ACAC933AD761223F7243FB7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: krYBBx0QJcHaoYqkKmk2w6qT1oyqvRcRbRZkCC7tsO8=)
2: gw7haS9Eo4v-nJwtV0iha6TGNxg.roa (hash: kfj7TXq3aFYsD7hG7bIHLfXoq8dEC7iq1n7sdP2Bfpw=)
3: iAwmrYPmQo2d9WkyTIdj-CB9OP0.roa (hash: Igxirsw6JjTxDRIc2Eryuocze4souahIl7Q4rVmCOOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:08:9a:ca:c9:33:ad:76:12:23:f7:24:3f:b7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=ae3459e514228f97be75326af12dbf17af0911d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:b0:4b:97:8e:c2:5c:aa:f5:16:b0:14:d8:
ad:e4:cb:90:8f:9a:cf:c9:ca:b2:31:e7:93:e3:4f:
14:88:73:af:d1:e8:fb:f2:d9:3b:22:10:5a:d6:82:
01:39:3f:0e:80:4a:49:4d:6a:b0:5d:17:f0:d9:06:
54:c1:fc:ed:a8:d7:cd:c1:ce:d0:66:af:b3:cd:14:
46:12:a8:a9:9b:bc:96:3e:fe:eb:c0:b3:53:81:23:
cb:51:dd:42:56:87:a9:78:06:69:8d:19:c3:a9:27:
e0:0c:6a:75:ce:b7:c4:bb:b5:12:5f:f1:fd:80:c6:
49:43:9c:3e:0d:53:53:6d:04:9a:2f:a0:67:24:eb:
b5:7b:61:82:d2:ee:40:36:59:e9:cc:3d:4e:74:b2:
50:50:17:8a:f8:16:53:80:b5:0a:da:97:a6:4b:a5:
8e:fe:7b:be:35:76:ef:dc:68:4f:d9:68:de:58:6a:
6f:cd:b9:05:30:5a:bc:6d:57:bc:62:41:7b:e9:15:
62:45:2f:a5:5e:d1:db:b3:14:42:c5:1d:90:76:13:
31:69:41:6c:04:ac:06:cc:fe:5c:57:a9:a0:a1:d9:
d5:6c:b9:20:94:11:5b:da:70:15:a4:9b:d1:ef:51:
f8:66:3f:70:75:2d:a6:45:5d:c6:85:c4:c3:8a:3b:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:59:E5:14:22:8F:97:BE:75:32:6A:F1:2D:BF:17:AF:09:11:D0
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:32:af:dd:d0:ea:ff:06:c6:6d:43:fa:ea:98:ef:e0:6d:
4a:a5:91:df:a7:4a:9e:e3:50:b5:87:78:fd:ec:93:4f:6e:36:
79:b4:ed:3b:e5:28:f0:db:2b:7e:b8:11:47:b8:bd:8f:f5:02:
1e:14:b8:b3:79:d7:e6:c5:2b:38:54:d7:6b:db:9c:6a:21:7a:
a2:cc:d0:d7:6c:ca:f2:17:81:f4:7f:3b:15:d1:a7:26:d4:d4:
40:a7:f5:d6:e0:b5:a4:1c:3e:4c:51:98:58:d6:fc:e8:ca:c9:
b7:88:13:1c:06:e9:67:c3:33:ff:a8:62:b8:00:cc:a2:8d:ed:
2e:3b:5f:55:13:4c:b2:3d:97:db:1a:38:3f:75:3d:c0:4c:b1:
f4:b1:cc:0f:7e:98:5a:93:12:5f:41:1f:82:05:58:2f:09:5d:
f3:ca:71:31:10:c2:d5:9c:8b:46:11:fc:3f:de:e4:74:c4:c3:
f1:68:7b:f5:80:54:90:4b:6c:d5:73:05:d6:c1:2d:f6:3a:11:
cf:ad:72:81:60:79:ac:78:56:76:a1:8c:42:a9:7a:4f:12:6f:
cf:14:df:04:de:06:7c:d2:56:e7:a5:6f:28:96:5e:5b:61:b5:
fd:6f:7e:35:0c:0e:d3:56:37:01:e3:42:96:81:37:56:90:ad:
95:23:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:12 2026 by rpki-client