Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: GTWlwb1EDL+42NDQnDpjAxznlbg2Zt83oPqu5SVyOr4=
Subject key identifier: E7:24:EB:54:09:6E:16:6C:64:7A:FC:4A:55:73:29:E9:95:7B:A2:DB
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 019E21A408E6B0606D412E8577A769787A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 14:00:58 +0000
Manifest this update: Wed 13 May 2026 14:00:58 +0000
Manifest next update: Thu 14 May 2026 14:00:58 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: /c7IAb7/Sq0NkWmgGOagm0yy+KGesUw0IRqWLy2gTOs=)
2: lFmZ1r-ocL0yoqMbggjpkGrPea8.roa (hash: 6qzbhdeSH++M2Vfj/8glXhLo1pCgKlmjHvesyWCTjDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:08:e6:b0:60:6d:41:2e:85:77:a7:69:78:7a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: May 13 14:00:58 2026 GMT
Not After : May 14 14:00:58 2026 GMT
Subject: CN=e724eb54096e166c647afc4a557329e9957ba2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:2b:da:89:64:c1:95:ea:68:40:63:db:b0:
63:63:90:cd:4f:dd:11:4d:d3:65:29:10:59:a5:e0:
c9:5b:37:d0:3b:d7:af:b1:b0:9b:70:8d:34:ee:8a:
0a:16:12:ad:46:53:6a:ec:06:59:d5:b8:05:9d:b4:
fb:f9:c3:58:f4:79:39:58:52:fa:1b:ea:aa:8b:c6:
98:aa:a9:d1:e6:6f:41:db:ae:d8:09:d2:fc:6d:a1:
a8:76:52:fd:b3:54:ba:1f:45:bc:53:2d:3f:7d:e1:
7b:86:bf:1a:4d:9f:17:a8:a7:15:6b:c5:6a:6c:ea:
08:92:b7:07:8c:10:e6:66:23:a1:27:d1:8d:d2:ca:
44:66:06:b6:bc:be:0e:69:58:27:8b:74:be:d3:a7:
79:04:7b:78:b7:ad:07:02:b7:79:01:22:1d:1b:6f:
a6:66:02:8e:56:d1:4b:7b:d8:96:6a:dc:a6:22:7d:
67:97:df:21:70:bc:0b:d5:aa:5f:08:d6:ab:11:af:
94:37:e5:17:29:49:ef:2a:ea:44:a5:05:24:30:f5:
8e:b4:5f:f0:fc:4b:c2:b5:ce:f2:b3:df:4c:7a:2e:
2b:27:db:07:a5:1d:02:97:53:e7:fb:a3:6c:a7:e2:
88:9a:78:bf:3d:b1:81:f9:a0:61:8d:c0:b8:45:e7:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:EB:54:09:6E:16:6C:64:7A:FC:4A:55:73:29:E9:95:7B:A2:DB
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:0f:79:1a:55:bd:30:8b:7f:26:8a:48:5c:43:2c:a4:b2:
75:a6:bb:ee:d0:d5:22:c6:be:2b:c2:0c:c0:9e:3b:b8:a5:64:
f4:8c:c2:f0:d9:e3:8e:e0:c5:5f:33:8e:c6:92:43:f6:56:51:
b8:a7:60:f9:e8:e6:af:29:8b:06:18:7d:61:8c:86:98:28:44:
69:3a:18:34:c0:58:86:ee:7f:90:c4:98:53:0d:0c:04:0a:70:
65:ca:b8:b3:bf:e9:2e:5d:82:bf:e7:cf:f3:13:ec:f7:88:ff:
15:ea:8d:92:7c:bf:df:a6:32:a3:6d:1b:f3:8d:95:bd:66:bf:
19:8c:88:6b:b6:c7:d0:70:14:ac:53:9f:c1:d8:b4:b3:50:6e:
fb:99:77:22:d2:6c:85:39:36:7e:09:4e:ac:ff:fc:88:5e:04:
e6:8c:b2:8d:4c:9f:ba:ab:fe:0d:f6:04:91:0f:a3:50:c6:a6:
b8:53:17:5f:06:16:b8:3e:5c:f8:d2:38:69:44:97:a4:a4:3d:
db:55:92:f0:96:97:51:55:4a:f1:51:e7:be:3a:64:4d:25:af:
fa:2c:d2:97:65:12:50:c6:b3:9a:12:79:52:d1:36:ce:0e:fa:
e4:40:50:a2:74:22:11:3b:14:78:b2:fb:92:38:5f:a8:b1:d7:
be:b7:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:40 2026 by rpki-client