Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: Gg7PMQHaGC4Y34If+2/73q8AAVH4of37+mZfdvs3Q2I=
Subject key identifier: D6:6E:C8:AC:9C:AD:73:F8:5B:BA:38:76:36:F4:E8:FE:C3:12:B3:F7
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 019D3A5442395346C9EF6F5C870A27699843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 0BE6
Signing time: Sun 29 Mar 2026 16:01:33 +0000
Manifest this update: Sun 29 Mar 2026 16:01:33 +0000
Manifest next update: Mon 30 Mar 2026 16:01:33 +0000
Files and hashes: 1: WseAFri0IbJVLS_17n9KVrn46U8.roa (hash: FwcN+EP7M1WYCm+EEp4GaqVFfXeQyTGsWFqoQ+nRBec=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: /5ewP8zahPs/b/52Bd3+0yHf9E3IQ/5vjNPGd5VTNlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:42:39:53:46:c9:ef:6f:5c:87:0a:27:69:98:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Mar 29 16:01:33 2026 GMT
Not After : Mar 30 16:01:33 2026 GMT
Subject: CN=d66ec8ac9cad73f85bba387636f4e8fec312b3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:8e:3f:51:4c:c5:e0:bc:44:8c:86:c5:0b:
2b:ed:41:e5:79:c0:3b:d2:ab:1b:66:db:96:48:f7:
37:bc:d0:20:d3:14:0b:9e:fd:d7:e2:25:27:21:6c:
76:b9:a4:55:c5:35:9b:32:c7:c0:12:b8:46:ae:73:
89:e4:b7:72:c3:69:07:ac:85:7f:7a:fe:2d:14:4f:
14:00:a3:40:16:97:1b:35:bc:d4:44:64:76:cd:c2:
62:74:d3:6e:f1:98:59:8d:d4:6a:d4:e7:41:40:01:
a3:fb:5b:a0:47:a4:28:b6:99:d2:5d:51:0c:4a:05:
50:57:bf:55:09:6f:a6:85:f2:21:d0:2b:c3:43:82:
f6:d5:f9:df:f3:96:cf:83:d6:ce:db:87:2e:5a:d5:
de:ed:e0:55:39:fc:a0:32:2b:2a:ca:6f:47:0f:91:
41:69:b2:c7:f1:f4:eb:38:85:e3:21:5b:cf:01:79:
84:62:d6:13:67:91:fc:bd:ed:d8:1c:30:8c:30:bd:
63:36:f9:b3:c0:1d:d7:75:b9:d8:d1:2e:f0:4a:40:
03:15:2a:3d:a2:42:8e:99:f8:da:79:8f:ca:7c:28:
e9:86:c1:6a:fe:2a:03:67:c5:dc:59:bf:3b:08:22:
e9:a0:f2:58:76:59:d9:38:0c:b0:5c:6a:cb:b5:11:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:C8:AC:9C:AD:73:F8:5B:BA:38:76:36:F4:E8:FE:C3:12:B3:F7
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:29:c0:86:d2:91:71:75:d4:57:af:fe:d2:b5:0b:62:58:26:
aa:96:bb:a4:aa:d7:0a:7c:9c:bf:82:1d:82:14:ab:35:6f:ed:
d2:a4:06:0b:68:9a:01:f2:58:57:57:cb:4a:aa:eb:92:ef:28:
b4:6d:f7:2b:b3:4c:28:a9:b6:c6:40:10:9a:41:76:10:1e:77:
17:70:0c:53:24:45:ed:a9:fb:19:cc:f8:6a:db:0e:79:aa:62:
a4:2b:7f:8e:72:e8:3c:a7:4e:a8:8c:c9:48:dc:fb:31:79:4b:
71:86:e9:24:4f:2b:9a:13:da:85:7c:f7:ec:45:90:85:c4:ed:
6f:46:29:0a:58:14:e4:0a:94:f2:91:1a:6b:26:02:af:be:85:
ab:33:c9:90:d3:ce:14:24:75:b4:ad:68:6d:04:a5:2e:74:1d:
ea:e7:18:49:f7:65:1e:48:3c:00:3f:69:e8:01:9e:51:b6:13:
9c:60:9c:b4:14:69:ee:54:83:70:29:a8:b0:33:ee:be:60:9f:
e4:25:60:29:36:7a:a4:45:c2:f5:54:f2:4b:d1:63:6c:72:ca:
1a:3d:46:03:f4:d9:35:b2:9e:ad:10:89:b2:d5:b2:1f:37:fb:
32:3b:4e:44:de:54:77:53:e1:11:8e:02:8a:ee:d2:f2:19:e7:
be:f1:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:05 2026 by rpki-client