Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: J9/KEEBpAdGPEkOdTeF0Gy3vVzgx7venxWFGFg9CPVU=
Subject key identifier: 0B:18:49:35:10:DB:AD:8C:C6:07:7C:A2:B2:18:3A:61:8D:5D:5E:ED
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 019D394119018AE84FAE090031154170111A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 02FB
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: 9UrcwEBpzzSnZFbFEvxoUB4v3Le2mgyln0rjQyhb230=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:19:01:8a:e8:4f:ae:09:00:31:15:41:70:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=0b18493510dbad8cc6077ca2b2183a618d5d5eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:5b:7c:0b:e4:b6:3e:e7:7e:c3:18:e5:ec:
c1:34:d8:73:40:18:30:39:d1:ad:55:36:c5:33:ec:
27:05:37:cf:ed:b0:8d:33:e8:6e:53:3f:87:0b:7a:
c7:8d:a0:ba:ea:42:01:20:85:8c:e2:51:9d:16:7b:
30:73:16:99:7d:a9:5c:82:17:7e:fc:31:a6:f4:88:
f4:43:0e:04:95:18:99:fb:3f:38:b7:65:fa:0c:2a:
b5:89:20:3f:93:a5:81:55:29:86:33:7e:a3:c2:6d:
72:d4:77:2f:e2:ce:0d:3f:e4:7b:0e:e6:fe:49:e1:
14:fc:73:c8:94:09:70:39:f8:1a:d4:a4:9d:e7:91:
c3:98:fe:af:37:2f:db:be:36:dd:2b:0f:30:26:d1:
3d:f8:4d:21:df:bd:ba:57:42:75:0a:7a:6e:6e:76:
62:5f:cf:be:0f:02:64:97:d3:8c:c2:4d:31:b3:07:
65:9f:71:f4:c0:c2:36:80:c0:74:e4:cd:5b:ec:ea:
c9:ab:41:19:3a:87:fe:2c:ef:dc:b6:8a:35:85:4e:
49:c8:46:8d:e4:5a:ff:e9:02:20:38:a1:7e:69:52:
26:e1:db:c4:f0:ca:f5:63:e8:71:1d:2d:fe:aa:03:
ae:63:93:4d:4f:32:8f:2f:f2:d5:0e:51:b7:4a:34:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:49:35:10:DB:AD:8C:C6:07:7C:A2:B2:18:3A:61:8D:5D:5E:ED
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:df:08:4d:52:d7:b4:f6:de:2b:ee:39:86:93:8d:f8:06:fc:
dc:c3:ae:08:3a:38:e0:3e:d7:ce:90:d8:75:24:91:e8:52:57:
9d:c4:96:5e:d0:8f:ba:93:bc:0b:ba:c1:8d:43:30:c7:6e:89:
47:0e:34:d1:c5:f6:9a:b6:0b:be:d1:71:ad:45:09:74:c9:2c:
19:9f:4c:b1:03:d3:55:b1:3c:3a:9e:f5:ca:58:b1:71:bc:a0:
c8:4e:b3:e5:18:66:58:cc:f7:91:69:65:de:d9:77:d7:dd:8e:
9a:87:c7:9e:2c:6d:00:90:02:80:98:32:d3:38:ae:b6:d5:61:
ea:8d:30:de:ff:37:c0:fe:92:9f:c9:ff:24:ea:6b:11:d4:79:
be:44:c5:33:35:54:12:58:1c:29:22:df:d8:11:8f:e1:67:09:
27:1f:b4:87:2e:1d:60:d9:ed:28:c5:19:9f:21:d4:14:03:53:
b8:f0:f9:c3:60:dd:75:b3:79:d6:fe:05:6d:ac:85:23:4d:d5:
e1:e5:6e:c4:39:fe:4e:23:35:76:3f:f6:bc:96:53:09:17:21:
c7:7b:36:d7:0b:ca:ee:08:61:ef:fb:0c:64:66:02:e3:b5:9d:
07:36:83:66:bc:07:06:0c:20:1e:5c:be:71:64:4b:d6:f7:29:
66:78:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:59 2026 by rpki-client