Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: Rw70Nf8l16TONNyDyduaKeI73zZowKlEXVJjE6OtlT8=
Subject key identifier: AE:EF:2D:D6:F9:2D:9F:AE:32:44:69:23:F1:A2:60:CF:A0:EB:3F:FB
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 01A0028199EF40C60C592FD530CAE0BF1198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 0A5B
Signing time: Fri 14 Aug 2026 23:00:42 +0000
Manifest this update: Fri 14 Aug 2026 23:00:42 +0000
Manifest next update: Sat 15 Aug 2026 23:00:42 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: IUydnBdv+nscw+8yUDwp+bi+0fPPNufN/iwX1bpVo7I=)
3: ekljz6keL0jMzgXLL61-BbfOA_o.asa (hash: 6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:99:ef:40:c6:0c:59:2f:d5:30:ca:e0:bf:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Aug 14 23:00:42 2026 GMT
Not After : Aug 15 23:00:42 2026 GMT
Subject: CN=aeef2dd6f92d9fae32446923f1a260cfa0eb3ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:99:25:df:a6:4e:84:2a:a2:56:ff:03:f6:
8f:6c:86:56:dd:8f:97:85:e5:82:55:8f:b4:7b:69:
91:5e:88:ed:b9:d7:53:4c:bd:b7:71:52:c6:0a:86:
6f:2b:30:04:2d:70:af:fe:a1:9f:8c:22:23:53:8c:
ec:27:06:a3:53:85:34:9f:97:ea:f7:20:f0:d2:d6:
b2:45:90:78:d7:7b:c0:b0:37:d4:89:30:b4:9c:be:
2f:d0:1e:2b:96:a3:9a:d3:f7:5e:14:b8:c3:02:f7:
39:9b:56:05:56:8b:ba:af:03:40:dd:fa:0d:56:e7:
47:3f:6a:be:56:b9:74:65:8c:21:47:dc:d3:fc:6b:
ec:d5:c0:cc:72:43:ac:b5:38:60:cb:c5:3f:ec:8b:
aa:0d:8e:72:41:8d:88:12:31:02:ed:d6:74:a0:22:
83:7b:9e:5f:03:c5:e7:b3:d3:00:33:9c:33:e7:5a:
97:b2:88:71:74:a0:ab:64:f2:c3:0a:82:d4:31:96:
56:fa:1c:7a:3e:91:07:b8:64:85:d6:3c:32:f2:7f:
16:c4:f6:a7:9e:dc:26:ec:f7:3d:70:75:07:e9:1d:
9d:0d:4b:18:ef:d4:8c:22:29:89:97:4f:e6:3e:60:
8d:11:46:37:59:c6:94:f4:a9:50:bb:72:32:f3:26:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:2D:D6:F9:2D:9F:AE:32:44:69:23:F1:A2:60:CF:A0:EB:3F:FB
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:77:08:d5:dd:42:b7:7f:dd:c2:b7:fb:47:85:73:2b:88:
f7:af:10:24:ff:b9:b9:fc:d6:bb:99:b0:f1:9a:ce:5c:bc:65:
79:74:be:b3:48:8a:0c:71:fe:57:9c:44:d7:4b:1e:e1:bf:c3:
54:fd:95:8c:ff:06:c2:b4:9c:b9:a8:c7:10:90:58:e6:33:36:
4e:be:a6:d0:16:20:01:f2:67:5e:3c:f6:43:42:df:52:46:59:
63:26:47:43:e5:c1:f3:91:62:cc:82:0f:16:96:34:e1:e9:33:
1f:15:ee:61:c8:77:e2:b1:4e:83:02:aa:a2:4b:ab:5f:cc:c8:
23:ba:05:6d:5f:a2:5e:64:8d:4e:24:72:e5:29:bd:6f:27:c8:
fe:17:bb:b3:16:f7:18:02:ff:64:d0:ee:92:4f:98:ad:26:8b:
c3:07:6e:87:e4:e4:39:d1:93:3c:9f:06:87:21:fb:47:5b:ee:
05:a9:1b:21:6e:21:70:9b:48:ce:75:dc:53:97:91:99:65:8b:
c6:8f:f1:f0:a3:74:d9:4d:e8:a4:12:8f:79:9f:ea:57:47:03:
62:d6:e9:f2:67:d8:8e:dd:a8:21:9b:e0:fc:3b:5e:3c:6e:04:
fb:a5:45:9c:21:40:0a:6f:b6:d6:2f:60:59:3a:94:a6:fd:f0:
63:b8:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:15 2026 by rpki-client