Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier: pC8DEtacjLBJTyM9J7qNVr5zWUxbh1nst8xkZG1Aswk=
Subject key identifier: 36:CC:B8:40:9C:69:B2:B6:AD:B9:DF:0B:AE:E0:8F:34:45:E3:EE:0C
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial: 019D375294E9D6A0A23DF95005AC321F8230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number: 0515
Signing time: Sun 29 Mar 2026 02:00:52 +0000
Manifest this update: Sun 29 Mar 2026 02:00:52 +0000
Manifest next update: Mon 30 Mar 2026 02:00:52 +0000
Files and hashes: 1: 4EQFHPchKGJRSlfAMbJURA8f5Vw.roa (hash: r/Hza9cO99krJK0iZfoHSiR1NTC0AWSrrarH8tZXu0g=)
2: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: o38ueNJXMsoBOKpYbE8sB5friHwPAhNQ4qIyjwNeFaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:94:e9:d6:a0:a2:3d:f9:50:05:ac:32:1f:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Validity
Not Before: Mar 29 02:00:52 2026 GMT
Not After : Mar 30 02:00:52 2026 GMT
Subject: CN=36ccb8409c69b2b6adb9df0baee08f3445e3ee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:89:11:bb:6c:28:2e:d6:38:43:6c:48:b8:
f3:07:0f:69:6d:45:5e:d3:59:2a:f4:49:07:f2:cf:
f1:d5:a3:b3:da:62:50:07:3d:be:08:50:2e:bf:40:
de:36:09:17:7c:14:c8:c0:fb:7b:eb:20:61:84:13:
c9:09:b8:e6:3d:d1:0c:ed:ce:4a:70:9d:d4:9e:2a:
5c:f6:3d:f9:d3:4d:86:45:8a:01:b5:be:b4:14:b8:
fb:1e:9f:a1:3e:23:77:a1:62:67:11:73:87:8e:fb:
c1:9e:c3:52:a9:40:7d:d1:ef:8b:85:b6:d2:38:5e:
c9:59:be:43:21:87:26:09:eb:e9:92:f3:a8:92:27:
e9:d6:05:5d:1b:e8:ea:c8:a7:e3:63:eb:e4:0e:0c:
df:90:b4:5b:fc:0a:53:33:2d:0f:66:d5:db:c5:7c:
17:9b:11:ba:a0:1d:81:82:0a:ba:f4:e4:5c:c8:71:
7c:33:b4:72:93:44:16:65:1b:ae:53:b4:82:2a:a6:
63:a5:9f:a2:62:07:b2:07:fb:7e:6b:5f:a3:3f:aa:
70:d7:91:c1:22:a4:45:36:1b:d8:07:91:67:56:7d:
e4:fb:70:f8:7c:65:2e:1c:66:14:5a:9c:77:1c:9c:
b2:73:84:b2:d9:f3:87:dd:8f:80:a9:eb:ca:49:c9:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:B8:40:9C:69:B2:B6:AD:B9:DF:0B:AE:E0:8F:34:45:E3:EE:0C
X509v3 Authority Key Identifier:
keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:80:dc:70:ff:ea:17:d0:11:44:f4:1f:4b:b8:6b:1b:ec:76:
ee:3a:20:9e:1b:01:c0:7c:66:4c:26:ed:83:ed:26:8e:49:e7:
12:26:d7:92:a7:e8:7c:1b:25:1e:b1:98:01:b7:13:63:83:0b:
3e:5c:10:0f:6d:5e:40:9f:83:ea:6c:56:de:16:91:c1:f0:70:
91:75:29:21:d6:c9:6e:9a:6d:89:f2:af:e6:30:1a:1d:57:f9:
81:bc:2a:8a:11:e6:6b:cf:51:68:b7:8f:b4:ba:5d:6d:90:5d:
10:80:3d:f1:4c:ac:e9:e1:77:d3:0b:39:77:90:a6:43:9a:c6:
02:aa:77:f8:ca:28:f4:22:d2:a2:18:ac:50:01:13:82:a3:40:
b7:d3:11:0d:ac:2d:58:4f:76:71:21:2c:eb:a0:e3:60:ec:43:
e5:ae:11:78:41:2d:c2:c1:38:96:13:98:1a:95:62:bd:77:9a:
60:6b:6e:98:2e:ac:3e:5e:d8:59:f0:4d:3c:6d:7b:15:df:3d:
00:36:7a:35:ae:01:98:67:02:d6:71:24:b7:36:23:9c:a1:10:
53:86:51:df:0e:ad:10:34:85:b7:d8:87:d4:d1:84:77:36:2a:
38:95:37:8b:9c:86:44:9e:ba:ad:d7:2c:69:1c:c7:0a:c3:68:
93:1c:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:27 2026 by rpki-client