Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: wPdNIYjyLe0UDvS84gMsQgbxgUOk6qNj9Qqd5BLpFOM=
Subject key identifier: BD:A2:CF:17:95:A0:7C:21:5A:60:CA:AD:5F:C2:80:0B:15:C3:7E:6D
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019D38D33CA54E9495AC9BC69FC921A2961B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 08E9
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: j/kPWNDiums5AcpS5wNQcTnni4rlhnalbkTtR/1cDS0=)
3: sDDyHkEYz6b-uuUFfohEajuP1a4.asa (hash: NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3c:a5:4e:94:95:ac:9b:c6:9f:c9:21:a2:96:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=bda2cf1795a07c215a60caad5fc2800b15c37e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:ea:b4:5f:c7:4f:c8:d0:df:63:3d:46:47:
bd:c2:02:b1:e4:45:56:0f:fc:03:35:97:91:45:51:
bb:57:f2:14:79:52:a3:70:57:74:f4:e3:2f:2c:7e:
44:7e:c5:51:d2:5a:8b:f3:f1:d2:a5:27:74:b8:33:
9e:89:77:16:25:21:f8:df:ff:db:46:2d:20:28:a8:
3a:43:93:6e:f1:12:b4:61:62:5e:18:71:73:f0:b4:
39:9d:bd:da:c7:f5:fd:77:3a:e8:1c:12:17:e4:83:
d2:e8:b0:4d:2a:6d:18:3e:ba:3a:a6:2b:dc:a6:9d:
fc:80:27:20:41:82:8d:69:ab:12:bd:19:b0:85:dc:
95:00:45:28:bf:d7:97:c7:ae:d1:e6:91:5c:c9:fd:
66:07:1a:7f:68:1d:79:81:08:f2:47:3a:58:8c:48:
67:60:3b:f4:ca:77:38:c2:7d:41:cd:cd:67:66:c3:
08:e8:5a:c7:a2:5a:4d:05:6a:91:36:85:28:55:b3:
cd:f1:cb:c5:2a:e7:37:65:2e:3a:4c:e5:ae:41:e3:
5f:80:71:2f:98:3e:b3:96:5a:3b:9a:52:ba:dd:79:
4f:c4:4c:7f:53:df:67:2d:b7:1b:12:58:d3:15:fe:
75:71:b9:5c:30:b1:f9:fa:1c:12:4c:6f:6c:e9:83:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:CF:17:95:A0:7C:21:5A:60:CA:AD:5F:C2:80:0B:15:C3:7E:6D
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ab:bf:50:2b:f3:d2:47:4d:e2:3a:9a:9c:09:86:42:1f:20:
ae:96:ad:95:ec:42:c5:4e:8c:cb:28:0b:f5:e9:92:61:ff:e7:
d9:3c:b7:58:a0:6c:3a:f6:19:da:df:ee:2d:1e:e1:00:68:8c:
d2:bf:68:2f:21:c5:9d:b7:de:2c:12:56:52:59:f4:84:51:2c:
fd:cd:01:84:cb:74:08:30:ef:49:94:d9:e7:e3:dd:80:1c:ba:
9f:04:0d:1f:95:eb:b0:02:d1:67:6b:3d:0f:d5:99:43:92:83:
6c:b6:ff:b7:c3:d7:30:ba:f5:71:a4:b4:a2:96:96:50:ef:55:
3c:8a:1c:44:a3:b7:a6:9f:6d:83:4c:fd:14:4c:24:a5:65:59:
e7:7a:f8:5f:75:0c:49:fb:6b:a2:5d:0f:be:cf:ae:3c:8e:22:
45:a9:af:88:b5:f7:ec:66:42:a2:11:b7:11:00:da:08:0a:68:
2a:6d:13:be:79:4c:a6:09:5a:da:14:84:38:aa:0d:8d:16:f0:
d3:37:19:dc:30:5a:35:ee:9b:cd:fd:8b:18:76:8c:13:f6:b0:
98:fa:75:31:69:d1:17:e5:cd:25:cc:f0:d1:ee:bc:6f:8b:10:
f2:71:7f:10:8b:f5:44:9d:1c:94:c4:6f:35:4a:48:c7:24:83:
bd:c7:1a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:32 2026 by rpki-client