Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: ZkvFWca4nLdWw48CiTaZFl8poyu713FsFHEIDbOE5is=
Subject key identifier: 27:42:29:42:4D:E8:74:11:D9:8B:F0:F5:B7:02:52:9A:95:13:DA:82
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019FA0A87D596306D94A5FF9B4A473A8C8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 19D4
Signing time: Sun 26 Jul 2026 23:00:24 +0000
Manifest this update: Sun 26 Jul 2026 23:00:24 +0000
Manifest next update: Mon 27 Jul 2026 23:00:24 +0000
Files and hashes: 1: 5PGazdFPh_liL3kFgfMnHxWRG80.roa (hash: HNX+1XaPYWBsrIYwZejcUmK2cDVDfcpIdEhtxtXALt4=)
2: V_bmaqILKVIpM-9SxNLGnCOjn4I.roa (hash: l/DFJ86bXPhOa+7NYM23Hrd0CVOHHw75xc20OqUc3C4=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: RmepU5McnYXixfNOJ5aaAgb7xcJGgL7Nsm6pINWzBog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:7d:59:63:06:d9:4a:5f:f9:b4:a4:73:a8:c8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jul 26 23:00:24 2026 GMT
Not After : Jul 27 23:00:24 2026 GMT
Subject: CN=274229424de87411d98bf0f5b702529a9513da82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:18:41:83:6e:0d:db:ca:3e:ea:28:3a:f8:
f3:8a:0b:2e:15:d1:43:06:03:ea:29:f7:5e:b8:ad:
29:fd:a8:0d:a9:cb:2d:cc:4b:81:2e:2b:20:fa:69:
6f:be:ae:00:6e:61:93:09:04:0e:6e:93:d0:03:49:
bb:f8:25:8b:25:a5:9d:cf:9c:0a:42:d6:7b:7a:66:
44:cb:02:4f:98:a9:89:26:3a:e3:de:b7:65:ee:b9:
f3:db:b0:d4:17:51:6f:56:d5:aa:42:25:52:ac:e2:
e4:c7:f5:b3:e6:2c:be:54:b6:fc:1c:db:82:75:fd:
48:01:eb:94:1d:e4:b6:f2:16:ed:8e:ac:79:32:4f:
7f:7c:7a:20:68:f5:4a:aa:23:e0:8a:95:27:c0:47:
57:65:e8:b9:3c:ce:fd:14:29:98:53:34:21:bd:71:
4f:fe:51:20:b7:fc:9a:98:91:06:41:0e:83:99:a0:
12:a3:c6:e9:2c:80:e6:37:97:68:13:a2:91:1e:10:
b6:92:2e:45:85:58:05:ee:7f:4d:f7:7a:66:90:3f:
95:f8:92:a5:bd:8a:4d:54:b5:21:9a:f9:ea:ef:54:
2c:74:ba:8b:bb:50:14:4f:bf:9d:5f:b6:92:43:c8:
6a:08:25:32:16:d2:f4:fa:c9:5c:0e:84:cf:af:2a:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:29:42:4D:E8:74:11:D9:8B:F0:F5:B7:02:52:9A:95:13:DA:82
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8a:bc:90:1b:b7:2c:a6:12:0f:53:7e:63:2c:1a:fc:29:3b:
dd:19:c3:24:94:ca:90:c2:b9:a7:75:69:e7:50:18:16:5f:f8:
d0:ca:87:39:79:6b:61:95:4e:bf:7c:5e:3c:cb:8d:1f:ac:e3:
b1:65:c4:4f:e5:15:95:fd:c5:6e:40:7c:3e:03:43:ae:29:ee:
03:ba:54:ad:32:3c:54:7a:34:cf:c3:31:7d:55:b6:34:42:be:
1d:76:22:1a:5c:3f:7b:0d:22:4e:d5:89:5d:f7:b3:9c:0b:16:
a9:0e:ed:22:65:fd:56:48:2a:95:6f:43:d1:d8:67:f3:72:d0:
8a:05:ae:9d:78:d3:4a:38:c5:4b:04:47:8a:ac:d1:da:84:8b:
22:19:7a:e3:7e:f2:93:e0:23:30:6b:88:8d:cd:c1:de:39:38:
d1:4a:ff:ff:ad:58:dc:2b:67:8b:41:e6:e3:ef:c6:da:48:97:
f9:21:47:e2:2d:b4:12:0d:71:4b:ec:b0:4a:fc:39:1e:a0:27:
02:7c:89:69:79:c6:de:bc:22:8e:a9:cb:99:10:06:93:89:40:
bb:72:05:49:c5:32:29:17:26:86:41:49:77:5c:35:75:2e:bd:
f3:03:69:e5:99:ba:55:68:ab:69:14:dc:43:51:9e:73:5a:93:
08:96:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:42 2026 by rpki-client