Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: vhi8wFqrEZKH4hcrMDjUrrM0tNzMPp5ERw+3BMTtHDw=
Subject key identifier: 6F:5D:9E:01:AD:24:38:C8:24:E0:FB:94:99:6C:45:1C:64:C7:C8:5A
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 019D37F76910DF37FBF1F7570CA0B7CE126D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 172C
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: gQIEloA+oz7OnGym4xjKpE7YpZoemCtiWX7n8TQYUAc=)
3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:10:df:37:fb:f1:f7:57:0c:a0:b7:ce:12:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=6f5d9e01ad2438c824e0fb94996c451c64c7c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:c5:58:66:48:e6:47:98:29:ce:99:8b:82:
f3:3e:8d:73:7f:9f:db:7d:99:c5:e6:4c:0f:10:bc:
6d:18:fe:f3:53:c7:a6:fd:b8:45:ec:a5:51:7d:66:
9c:ef:01:37:df:e0:c4:ec:a9:f1:9a:dc:77:14:b6:
d5:ed:0f:22:b4:3d:5f:d3:56:2d:bb:75:d0:21:d8:
f0:22:45:1e:29:fc:b8:2e:b4:2c:0f:0d:e9:fb:74:
8f:b3:3e:aa:30:be:05:35:b2:5b:ba:db:53:7b:7c:
0c:c5:f1:13:4b:be:be:b8:da:de:b3:b1:81:4c:ec:
d7:a6:87:f5:81:7c:f3:ff:ca:a8:95:a0:bc:d4:b1:
d7:ff:36:62:36:59:40:19:74:d4:e6:c7:03:43:c7:
db:36:e5:8f:51:ec:87:d4:ee:70:61:fc:56:cb:ac:
27:a9:83:a5:80:55:4c:1c:6b:5f:db:6a:5c:3d:df:
36:01:a9:cc:96:bb:ae:ac:8c:6c:ad:5c:b6:26:4d:
4f:3c:b3:13:82:75:90:31:f7:9b:91:e1:7d:78:61:
c1:c2:23:b0:8b:7c:63:6b:b8:a5:8c:74:d7:ad:a6:
9c:ee:90:fb:2c:85:14:9f:17:fb:8d:fb:0a:3c:10:
e1:55:57:0d:f0:34:27:d1:21:93:d3:d3:e7:86:08:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:9E:01:AD:24:38:C8:24:E0:FB:94:99:6C:45:1C:64:C7:C8:5A
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:63:b3:a0:5d:83:35:c2:8b:69:81:73:71:1d:83:e6:23:
1d:af:d6:83:33:f5:38:c9:00:5e:f2:c1:bf:71:76:8b:65:b5:
d1:88:9f:84:77:55:04:e2:0a:43:4c:ce:bf:44:cc:6f:f8:72:
27:e4:b0:98:17:db:38:5d:2f:bf:d4:d3:4b:5c:11:25:0e:77:
2f:e4:52:99:db:8b:7a:a8:cc:1b:e4:57:ff:ec:83:86:81:e7:
bd:4d:8e:0b:06:a5:78:d3:04:7c:4f:a8:88:f6:1e:fb:fc:d8:
b9:ad:71:a1:58:3d:85:3d:26:c2:b3:f8:7a:3c:87:8c:99:6a:
37:df:a9:87:d1:52:e2:ca:01:b5:26:db:47:46:82:47:82:87:
d2:ce:fa:a1:cf:4b:2c:30:a6:06:a8:01:39:67:e8:95:ef:a0:
99:40:a0:b8:50:c0:11:79:f0:cf:32:55:b2:3c:2f:a6:32:a2:
7f:a7:1f:e9:67:8c:5a:e6:80:d2:8b:05:4b:e6:e0:e9:3f:18:
fc:95:71:4c:fb:da:e2:2a:be:45:ce:3f:4e:3f:d7:67:fe:50:
16:a9:cf:17:45:50:6b:9e:60:01:db:90:f9:7a:ba:15:89:a4:
48:17:88:45:a4:80:7e:1e:93:f0:29:d4:2c:92:1d:76:90:e4:
bf:40:72:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:37 2026 by rpki-client