Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: roRH4TNqnGwS3yMip8+SPJgczZACvi0AMk18EJbTXFo=
Subject key identifier: 1C:E1:7A:61:4C:89:11:F1:B0:FD:05:D6:5E:63:A9:F1:DF:63:34:1F
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 019D390A6A37A9BC82045F65A8DCCABA103D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 0926
Signing time: Sun 29 Mar 2026 10:01:16 +0000
Manifest this update: Sun 29 Mar 2026 10:01:16 +0000
Manifest next update: Mon 30 Mar 2026 10:01:16 +0000
Files and hashes: 1: 1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa (hash: F/RcT6jJFR9ljteJFuF0791elb6u75/JCwlm7zNLBlI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: 43MmUEKG56n3WrCCG4QSUlYQzB2irBqtPkrNaAng98s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:6a:37:a9:bc:82:04:5f:65:a8:dc:ca:ba:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Mar 29 10:01:16 2026 GMT
Not After : Mar 30 10:01:16 2026 GMT
Subject: CN=1ce17a614c8911f1b0fd05d65e63a9f1df63341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:1c:b0:8e:ce:c0:0d:0b:98:44:3f:17:9c:
87:59:e5:1b:55:f8:39:58:ba:b3:f6:db:f6:85:ff:
1a:c7:2b:12:9d:ea:09:6c:ae:3c:5f:c7:f0:7c:18:
44:34:26:e2:df:1b:63:90:0b:44:ca:59:d4:77:e2:
0d:a2:2c:03:a3:4c:a9:8b:c5:c5:5b:85:6e:1f:2f:
aa:9b:8b:57:c5:21:34:6b:0c:a5:a1:44:e1:e1:88:
c2:eb:4d:24:de:7b:28:71:87:53:9c:cc:ad:ad:c4:
62:c6:03:ab:0a:48:78:64:b9:91:64:57:07:c7:1a:
60:dc:92:5f:0e:4e:c2:20:cd:f2:d5:88:89:70:42:
be:de:0f:b2:94:9f:a9:0f:60:12:ee:f8:80:39:81:
f1:9d:55:38:5b:78:ad:5d:3d:e5:f0:50:73:d9:1a:
d1:58:3f:c3:c1:9e:ea:17:fe:80:8f:8e:ef:2b:e7:
2c:5e:2a:31:91:90:a7:f3:d5:56:1f:ff:4c:12:1a:
57:93:61:6a:35:9c:db:c3:51:15:fc:f9:65:aa:69:
3a:fd:86:0c:7f:ef:b3:90:ae:60:12:5e:3f:cf:d0:
53:f3:b1:21:c4:f3:e1:2a:f2:3d:e9:ba:91:5c:28:
14:cd:ad:46:11:1c:f9:86:33:b3:63:a9:82:cc:86:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E1:7A:61:4C:89:11:F1:B0:FD:05:D6:5E:63:A9:F1:DF:63:34:1F
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:91:da:80:45:ff:53:28:f4:36:46:43:8a:fe:c4:03:43:f7:
36:a5:70:48:39:e1:89:82:f4:e0:4c:0d:e7:aa:34:47:63:1e:
4c:f4:95:d3:80:42:b3:8c:2c:02:11:01:91:b7:3e:db:97:bb:
63:95:8d:39:f7:63:a6:42:82:70:4c:ec:89:23:fd:04:0f:52:
1a:fe:62:2f:d4:7b:3b:e1:60:63:6a:d0:e9:ae:b9:82:bd:fb:
95:ff:39:e8:c4:44:61:a1:d7:ab:87:ee:37:76:db:c0:90:92:
46:31:03:1e:a1:d3:a3:c9:19:c8:ca:6e:8c:99:45:54:0a:f3:
13:c8:43:df:ab:33:44:ce:dd:eb:42:60:5c:29:ac:81:92:25:
b4:fe:70:ae:ea:3d:6e:56:fa:ef:d1:5b:35:e0:02:22:59:84:
b6:ea:8a:b3:80:29:c9:53:61:fa:4c:99:9a:67:cf:00:28:6b:
ae:5d:2d:0c:30:fb:ab:d0:19:d0:f5:b6:7d:60:ac:df:d3:c2:
18:27:f9:04:ea:39:e3:75:d0:f9:d7:01:d3:50:ae:b0:d1:c1:
af:31:94:be:ce:b6:7b:79:72:1b:8f:8b:14:9f:e3:84:da:29:
b1:33:20:58:d8:cc:7e:76:c1:51:92:6f:81:35:c2:61:6e:05:
8a:cd:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:25 2026 by rpki-client