Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
File: b6MuZYEYPyxIl6dlIzOQH39b7nM.mft (raw, json)
Hash identifier: Uqyab2NqLohfHRLpt1n002oKoYlSzM/UNEuw0wx7LdA=
Subject key identifier: 42:3F:FA:83:3B:BB:F0:3D:9F:00:EF:FE:C8:08:43:D2:5B:C7:27:09
Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Certificate serial: 019D382E675C6F9BB32D6022A465B031CDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
Manifest number: 0AF4
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: 2xQqDLCvOuKXU0QWRwmxAiQO60Y.roa (hash: gLXXy/0ag65FQy8diJqfn+SYTmGLvrjLmdVqH/urHFk=)
2: b6MuZYEYPyxIl6dlIzOQH39b7nM.crl (hash: +/6r6Ro3tU0jnWNSYmSrIvC3ARnmo/B0Ck47Mw4Lm6I=)
3: i4f87X_0C7m80wat_32uyA77P4s.roa (hash: NnithLavPGEPqVaUWB0SoEr6mdo3qwwkmSh7hW+SQRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:67:5c:6f:9b:b3:2d:60:22:a4:65:b0:31:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=423ffa833bbbf03d9f00effec80843d25bc72709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e4:57:88:cc:74:6c:aa:a7:fa:20:d7:f9:79:
08:91:0a:ec:fe:f6:ce:54:d4:c8:a3:9a:ec:d2:de:
6b:a2:48:cf:14:82:e3:11:07:1c:0a:41:82:2a:95:
86:27:43:7b:e7:05:ca:0c:64:50:f4:08:73:ab:f0:
95:81:0a:e6:6c:3c:61:2f:c3:80:03:93:61:5e:ae:
91:46:ab:97:be:be:45:bb:d6:da:e3:d5:25:fe:fb:
f1:29:86:f0:54:80:20:58:17:18:f4:f3:d8:29:eb:
ea:3e:ce:6c:0e:5a:68:5d:19:af:51:79:bd:b5:c0:
64:dd:30:e0:00:3f:f9:48:0f:d3:63:79:24:8a:42:
bb:92:99:60:6f:79:15:75:c1:f7:4d:b9:fa:81:2e:
27:b7:86:8e:01:f9:ac:c4:41:7f:72:56:73:3b:80:
ee:bb:9f:5b:20:33:ae:5c:fa:d4:7b:44:ba:52:a8:
48:63:d2:0d:a0:00:89:0c:bc:e6:32:15:58:95:2c:
ff:6e:5e:29:3e:3a:1d:98:29:61:31:7f:a1:f8:bd:
08:9a:ea:13:02:db:36:cc:96:2d:05:7f:5c:3b:7a:
5a:f4:38:fe:2d:0a:cc:5e:cc:29:b0:64:9f:c7:3b:
55:e0:5b:c8:39:b2:27:72:8d:90:cc:f0:0e:2d:aa:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:FA:83:3B:BB:F0:3D:9F:00:EF:FE:C8:08:43:D2:5B:C7:27:09
X509v3 Authority Key Identifier:
keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:82:76:78:65:74:aa:99:b0:d2:fd:da:5f:07:25:f0:a3:3c:
a6:50:b2:cf:b2:81:26:3e:65:97:0c:5c:c8:a8:46:a2:ce:ad:
10:00:47:f9:bd:5d:49:41:6b:74:03:a2:43:eb:9f:5e:7a:76:
ba:6e:94:0b:91:e4:4e:67:8f:6e:cb:94:dd:8e:03:0a:79:cc:
36:a8:a9:ea:51:8c:16:14:5a:61:22:0a:57:a5:2f:4a:05:b4:
43:07:fc:21:76:b6:af:10:74:f8:0f:9e:b2:c4:30:5c:e8:3b:
1a:d1:4f:4f:d3:46:fd:02:2f:f8:bf:1e:25:47:44:a7:07:ee:
0a:cd:8e:f6:31:9a:fa:26:5e:98:fb:d0:18:c3:10:2d:12:0a:
0c:6c:86:5c:6c:81:6c:0c:3b:11:0b:c3:18:5f:84:34:82:8f:
bf:d7:4b:ad:7d:55:c5:fa:d4:f9:dd:d6:0b:35:c5:9d:f5:f3:
1c:1a:fd:d0:9a:d7:5d:02:36:57:da:88:04:f4:ee:27:c7:73:
9c:86:0b:5c:13:25:fb:3b:e6:bb:bc:e9:c5:55:50:c6:89:9e:
03:be:89:4e:c9:b8:6c:68:f3:f6:7a:3f:33:de:ba:b6:34:2b:
99:02:4a:25:85:2c:29:a9:be:b4:9c:52:d9:a9:d8:50:6e:5d:
4d:c3:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:42 2026 by rpki-client