Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
File: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json)
Hash identifier: U5xuCunQC3v/DrOhtdUiENJCFXLJuMY/w4GpSLvnWMc=
Subject key identifier: 1F:85:B2:16:F1:2A:80:37:98:A6:91:7E:C9:BF:54:26:1B:29:04:37
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial: 019D37C0E174B3FEEAFADB8D3167B5956D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
Manifest number: 08FC
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: icKx6L0YUUcl/1GUPRJkoVsgrc5A4M5ZEUzbHV6m+qw=)
2: lZT1fZgUQ-ZPsP-PoHQBy-u9gnU.roa (hash: 9BM64257Y/MfjC+0Pp/O4gJQJeSisM84XVJJJ+9Ww8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e1:74:b3:fe:ea:fa:db:8d:31:67:b5:95:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=1f85b216f12a803798a6917ec9bf54261b290437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:63:3e:17:35:53:34:4f:23:b5:18:c4:08:
07:32:52:a1:a1:45:25:29:7c:72:eb:aa:21:12:b4:
d9:f9:18:44:a8:67:fa:81:b0:43:b7:bb:d7:83:80:
6f:15:0b:a9:93:15:14:32:93:af:d3:48:10:87:55:
5c:c6:68:ff:2e:88:c5:48:75:30:7d:9e:d0:12:f6:
82:6b:99:c7:46:64:df:ae:67:3f:d4:8d:27:ee:4b:
17:54:22:29:e6:15:cc:40:9c:80:94:71:2d:44:cb:
fc:9f:2b:ef:30:b8:3c:54:04:3b:97:6f:64:9b:2c:
2a:5c:df:81:d6:fc:0c:4d:5f:ab:d7:06:d8:3e:a2:
b1:e5:cb:9e:68:5b:4f:29:19:5c:a3:d0:09:22:01:
ed:f1:78:dc:fb:da:34:a3:c1:4c:81:7b:3c:0d:b3:
87:f8:2c:c8:a3:3f:53:d7:d0:d2:63:b2:82:96:9a:
54:0c:c2:55:45:fe:ef:93:de:8f:08:f4:c1:d4:aa:
e7:bf:ed:15:b5:95:e5:a9:87:18:87:c4:f5:2a:b7:
2c:7d:7d:0a:57:fc:1e:a8:53:da:ab:1d:3c:55:ae:
56:49:4e:65:d8:ec:bf:6e:a3:19:5e:66:87:ab:3b:
08:51:51:e2:50:ce:60:9b:26:63:10:8f:87:2c:30:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:85:B2:16:F1:2A:80:37:98:A6:91:7E:C9:BF:54:26:1B:29:04:37
X509v3 Authority Key Identifier:
keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:a2:ff:27:6d:06:90:7d:b5:4d:bf:67:b8:17:d5:b7:ab:
13:4a:2a:53:93:ae:9c:5d:7c:82:24:f9:1b:ca:57:bc:07:85:
d9:51:a0:91:f2:b8:83:80:49:92:56:c7:a7:50:c1:e0:3b:85:
e8:ab:e0:43:5b:01:9b:fc:5d:c9:27:f5:90:a2:cb:b1:b3:4e:
6c:8c:46:10:a3:1b:46:f6:5f:62:23:2f:b0:fc:2d:ff:ae:30:
3d:aa:79:e0:c0:53:7a:8e:a9:21:75:54:15:9f:eb:82:67:69:
7f:a6:d7:3b:2c:a3:c9:83:82:ea:dd:4d:7c:3a:12:b9:c2:55:
31:28:4b:07:10:74:85:6a:0d:cc:d3:75:15:de:f7:c2:1a:7e:
fe:d1:23:bb:d6:53:81:e9:a6:c7:04:bb:04:58:5e:70:5e:a3:
92:b4:61:b4:84:61:79:0b:15:d6:91:0a:77:30:bc:27:6e:e6:
e1:39:62:b4:6c:e8:d1:e2:a3:39:0f:bf:92:7f:33:43:05:5d:
e4:05:f8:d5:d2:96:38:05:37:05:05:1f:56:31:24:4d:b5:e4:
6d:76:9d:20:6c:e1:9b:6e:91:f2:c6:bb:88:95:51:99:45:30:
f9:e6:55:9d:84:67:81:0b:fb:b0:ce:f8:f8:86:8a:ac:23:eb:
2d:d4:cb:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wOF0s/7q+tuNMWe1lW1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkN2VhNDNhMWM0NzU1Nzg3ZDQ5MWZiYTU2M2I4ODgxMWRj
Y2M1ZjgwHhcNMjYwMzI5MDQwMTIwWhcNMjYwMzMwMDQwMTIwWjAzMTEwLwYDVQQD
EygxZjg1YjIxNmYxMmE4MDM3OThhNjkxN2VjOWJmNTQyNjFiMjkwNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKtjPhc1UzRPI7UYxAgHMlKhoUUl
KXxy66ohErTZ+RhEqGf6gbBDt7vXg4BvFQupkxUUMpOv00gQh1Vcxmj/LojFSHUw
fZ7QEvaCa5nHRmTfrmc/1I0n7ksXVCIp5hXMQJyAlHEtRMv8nyvvMLg8VAQ7l29k
mywqXN+B1vwMTV+r1wbYPqKx5cueaFtPKRlco9AJIgHt8Xjc+9o0o8FMgXs8DbOH
+CzIoz9T19DSY7KClppUDMJVRf7vk96PCPTB1Krnv+0VtZXlqYcYh8T1KrcsfX0K
V/weqFPaqx08Va5WSU5l2Oy/bqMZXmaHqzsIUVHiUM5gmyZjEI+HLDA5UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+FshbxKoA3mKaRfsm/VCYbKQQ3MB8GA1UdIwQY
MBaAFG1+pDocR1V4fUkfulY7iIEdzMX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81Yzk5OTYtNmY2Yi00YzMxLTg2M2Ut
NTg5ZDMwZmZhYThjLzEvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81Yzk5OTYtNmY2Yi00YzMxLTg2M2UtNTg5ZDMwZmZhYThj
LzEvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6Si/ydt
BpB9tU2/Z7gX1berE0oqU5OunF18giT5G8pXvAeF2VGgkfK4g4BJklbHp1DB4DuF
6KvgQ1sBm/xdySf1kKLLsbNObIxGEKMbRvZfYiMvsPwt/64wPap54MBTeo6pIXVU
FZ/rgmdpf6bXOyyjyYOC6t1NfDoSucJVMShLBxB0hWoNzNN1Fd73whp+/tEju9ZT
gemmxwS7BFhecF6jkrRhtIRheQsV1pEKdzC8J27m4TlitGzo0eKjOQ+/kn8zQwVd
5AX41dKWOAU3BQUfVjEkTbXkbXadIGzhm26R8sa7iJVRmUUw+eZVnYRngQv7sM74
+IaKrCPrLdTLOQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:41 2026 by rpki-client