Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.mft
File: b5-qkFz3lK2nDbbckw5fr-b_RV0.mft (raw, json)
Hash identifier: PF3Sbc8dtqhCN2+jP0+XOlrgI+/Aso4jrVIVQa0BP6E=
Subject key identifier: 00:64:A6:8A:D2:19:F4:1F:1D:17:16:C2:CC:78:74:87:4D:9F:52:9B
Authority key identifier: 6F:9F:AA:90:5C:F7:94:AD:A7:0D:B6:DC:93:0E:5F:AF:E6:FF:45:5D
Certificate issuer: /CN=6f9faa905cf794ada70db6dc930e5fafe6ff455d
Certificate serial: 019F1341008D41CB76E8E846ED3184E1BB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.mft
Manifest number: 15
Signing time: Mon 29 Jun 2026 12:00:54 +0000
Manifest this update: Mon 29 Jun 2026 12:00:54 +0000
Manifest next update: Tue 30 Jun 2026 12:00:54 +0000
Files and hashes: 1: aKfuRgldmmeW5HPQTqPYO9IR9Cc.roa (hash: g5DHP+nRl7+iBUAUtgDQvw6c+9sns+aU6YP4Iq3Tq4A=)
2: b5-qkFz3lK2nDbbckw5fr-b_RV0.crl (hash: MDWqlOVU9j/F33uXwd4sLaIMFgnxersYTfzxLIWDXLA=)
3: gc1RjZYMJQYuPIFTtak9aOk8EPk.roa (hash: NREtW74YdVoPV92NlFdVQ/8boqm5mf0joboSV71K7G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:00:8d:41:cb:76:e8:e8:46:ed:31:84:e1:bb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9faa905cf794ada70db6dc930e5fafe6ff455d
Validity
Not Before: Jun 29 12:00:54 2026 GMT
Not After : Jun 30 12:00:54 2026 GMT
Subject: CN=0064a68ad219f41f1d1716c2cc7874874d9f529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:05:d5:9b:04:39:3d:90:05:e1:93:dd:d0:
b8:8f:7b:07:95:a0:43:e0:c8:4c:d6:fc:0f:10:f3:
f0:ca:cf:38:f5:81:49:33:a0:3a:9b:33:24:ad:ab:
02:96:55:5d:32:3c:d0:3c:2c:d7:c4:68:95:df:d3:
21:df:3e:7a:c8:b5:8e:d2:f8:9a:99:b1:5c:ce:f9:
4e:17:31:fb:ae:92:dc:f3:fa:a5:42:f1:4c:b4:4d:
be:2d:87:56:40:84:12:4b:73:99:ac:7b:fe:8a:dc:
18:ec:c5:a3:a9:65:4b:58:5f:1f:86:52:a4:9a:30:
af:54:ef:dc:81:1a:a1:66:7c:52:63:90:fb:81:52:
73:60:c8:f5:b7:80:0a:a6:c6:20:fb:55:68:c6:e4:
b4:0d:0a:9d:86:86:f0:23:30:d9:06:4c:d2:87:15:
8d:3e:ab:e4:cf:1f:96:c5:1f:60:3a:8e:90:60:bb:
9a:9c:cd:ba:b8:e0:78:60:43:c4:d9:41:6b:4d:46:
b2:6e:6c:ff:06:f2:d3:73:47:b3:05:3a:55:3d:17:
83:8c:2a:18:c8:19:95:a4:ee:a1:09:ad:db:3e:74:
71:c6:51:b5:9e:31:31:19:1a:42:4b:46:98:1c:46:
1d:26:bd:46:bf:d7:46:ce:05:aa:b0:b8:7a:33:ee:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:A6:8A:D2:19:F4:1F:1D:17:16:C2:CC:78:74:87:4D:9F:52:9B
X509v3 Authority Key Identifier:
keyid:6F:9F:AA:90:5C:F7:94:AD:A7:0D:B6:DC:93:0E:5F:AF:E6:FF:45:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5-qkFz3lK2nDbbckw5fr-b_RV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/730bc2-2f03-4af4-9be9-907aee6312d9/1/b5-qkFz3lK2nDbbckw5fr-b_RV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:dc:37:b1:cc:38:bd:3e:46:b1:95:fe:48:da:cd:86:00:
86:6e:12:c6:73:a2:36:f6:ef:62:0c:ae:e4:f0:82:46:a8:d4:
ae:a4:b7:f4:11:01:dc:cf:3b:96:54:23:83:c2:d6:83:42:d6:
69:1f:05:f5:4f:4b:88:4d:b6:55:43:ef:88:ad:f9:87:82:65:
17:55:c0:44:b6:7a:7b:64:20:c9:4b:a9:79:b6:be:b9:d1:de:
b5:bb:6d:9d:7c:b5:cb:ed:7b:ac:59:cc:61:39:92:01:5e:86:
53:f9:62:30:4f:63:82:47:32:c7:0e:db:73:fa:81:c7:6c:6c:
5b:c5:59:50:a2:4e:c6:e3:dd:67:ee:d6:34:91:34:71:95:00:
91:b5:6e:c9:93:65:1c:f7:09:c6:db:3b:f5:5f:21:90:aa:92:
f9:05:68:12:4a:8b:0e:23:6c:f2:2a:5b:1e:7f:8c:20:2e:61:
e0:ba:51:f1:00:de:c3:e8:ac:ac:3c:af:b8:cf:f0:be:64:94:
8e:88:71:08:93:11:6e:77:46:ff:10:f4:20:20:08:27:b4:3a:
d7:c3:1f:df:39:d3:a4:aa:74:65:91:39:af:2f:8a:6f:3b:c6:
0b:03:14:52:fe:5d:ac:dc:99:c5:41:59:39:89:e5:db:ed:ac:
64:1f:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:33:18 2026 by rpki-client