Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier: /8dkNp6eyQaqbvI3fNFlTyAKb4asclsUTsumpAqTI7c=
Subject key identifier: BB:86:DD:E5:A6:66:CD:C5:1C:4B:2D:65:D8:97:3E:63:C2:9E:47:22
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 019D36E4B7192183765E5356708C70A02DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number: 168C
Signing time: Sun 29 Mar 2026 00:00:51 +0000
Manifest this update: Sun 29 Mar 2026 00:00:51 +0000
Manifest next update: Mon 30 Mar 2026 00:00:51 +0000
Files and hashes: 1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: RKaCV1Vwl3my9eTIVLvdcQN/pTLHwSZPSHP+8f3TBT8=)
2: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (hash: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:b7:19:21:83:76:5e:53:56:70:8c:70:a0:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Mar 29 00:00:51 2026 GMT
Not After : Mar 30 00:00:51 2026 GMT
Subject: CN=bb86dde5a666cdc51c4b2d65d8973e63c29e4722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:cd:a1:a2:ac:c5:a8:c7:47:78:c6:61:b6:
41:a1:73:78:14:3b:94:d2:ae:ed:13:3a:08:c5:2f:
1d:5b:ac:ea:41:f1:a2:47:c5:b5:85:d9:90:0a:1d:
a1:74:c5:76:15:6c:ab:c0:48:f3:db:6b:47:ed:20:
f7:f1:e7:13:37:b4:29:fe:6e:fb:ca:bf:76:7b:22:
1a:9e:5d:59:8d:6f:f3:4d:66:ea:f6:a2:38:8e:d7:
0d:e4:8e:a8:02:da:61:8c:86:fd:ee:af:1a:03:ca:
c4:44:6d:90:69:cf:36:0a:26:51:97:40:b2:62:22:
c5:71:46:b7:48:c4:88:78:cc:e7:17:7e:70:5c:8b:
88:5f:47:d7:d3:9d:3f:b9:d1:9a:7c:77:0d:40:df:
c7:31:14:ca:85:5b:24:5f:f7:e6:f0:cd:14:c9:03:
d3:18:fa:df:11:e0:26:79:4f:cd:7f:39:80:a5:17:
c2:fd:6b:6f:34:b8:8b:98:7d:9f:80:4e:a9:19:d5:
8c:6f:17:e3:62:96:da:26:18:65:5e:d7:ca:06:72:
8b:cf:ec:2e:04:26:49:0a:9b:ac:ef:23:3b:36:3b:
2f:a4:4b:d4:9a:db:e1:6f:49:2c:89:18:01:53:9f:
4c:10:88:9e:93:d2:e6:7f:6d:12:49:1f:40:03:7e:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:DD:E5:A6:66:CD:C5:1C:4B:2D:65:D8:97:3E:63:C2:9E:47:22
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:8c:37:c9:e7:e0:58:d9:b5:c7:64:5a:6e:18:a2:8b:d5:
98:f2:cf:f2:cf:4f:76:12:0f:0d:13:3b:0c:44:7d:29:7a:10:
b9:0f:63:e8:a6:e5:c7:2b:55:57:93:76:33:f4:37:d4:86:0b:
55:27:92:b0:26:47:1f:9e:5a:49:47:0e:16:9f:5b:3e:05:09:
60:b4:30:2c:37:df:2a:fd:69:c9:62:f1:15:39:b4:bc:25:a1:
33:85:2b:70:16:fe:a0:38:e4:b6:81:58:af:5c:cc:0f:3b:b2:
b4:d8:70:4d:4e:3d:a0:1f:d6:f4:4e:6c:9e:f4:be:6b:e2:2a:
27:e2:2d:e2:34:bc:27:ff:e7:1a:b7:7c:02:6a:6a:2f:e3:b0:
dc:26:8d:8b:96:96:19:eb:63:6f:20:24:ff:56:f9:24:67:7e:
3f:90:ba:32:88:96:f2:f8:b6:63:3e:a6:ed:d6:12:51:e9:87:
80:58:61:9e:c1:f1:43:42:ac:a1:94:95:7b:d7:c4:73:5e:55:
a7:ea:db:e2:27:1d:82:d8:17:7c:50:15:a6:61:0c:4e:7a:e7:
8a:b7:6b:02:7f:d0:26:89:98:30:9f:da:43:47:41:f6:5d:79:
87:11:26:4e:b5:7e:d2:29:fd:b4:3a:2b:c9:3b:14:66:0a:cc:
59:18:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:25 2026 by rpki-client