Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: qRXhQZNrCdRr3RMaSTpit0FztzJ8wZDs4nBQpntb5gg=
Subject key identifier: 18:3A:18:33:9F:4F:0F:55:7B:73:83:E3:3B:AC:0E:42:19:47:1C:9E
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019F11F7CD4C6AA0A3D55D40F8F1DBF16E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 09DE
Signing time: Mon 29 Jun 2026 06:01:20 +0000
Manifest this update: Mon 29 Jun 2026 06:01:20 +0000
Manifest next update: Tue 30 Jun 2026 06:01:20 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: zJBsdEPYsXeqYEGmux2sGkZuQ2VBxqCSkny4rm0mnaE=)
3: sDDyHkEYz6b-uuUFfohEajuP1a4.asa (hash: NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:cd:4c:6a:a0:a3:d5:5d:40:f8:f1:db:f1:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Jun 29 06:01:20 2026 GMT
Not After : Jun 30 06:01:20 2026 GMT
Subject: CN=183a18339f4f0f557b7383e33bac0e4219471c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:35:81:bd:b6:46:0e:82:9e:f0:2d:a5:68:
63:3a:1e:13:91:98:cf:df:2b:ec:f5:ea:91:55:c3:
27:54:6e:66:84:d2:88:7e:23:cb:27:6a:99:c0:b5:
e6:80:64:31:22:5a:47:f1:ad:48:6c:16:e1:ae:bd:
28:b7:83:a8:d1:1f:bb:34:1b:7c:7d:13:36:74:c1:
d8:4e:e1:aa:49:e7:84:b3:bb:77:fd:c6:c9:83:ca:
2e:8d:56:9c:51:6c:20:5f:47:11:90:3b:54:3a:c3:
9b:8e:b7:45:08:e1:89:4f:11:bc:5a:41:f0:64:75:
7d:b1:79:ac:40:f3:59:9f:ea:04:9c:2a:da:bf:7c:
69:50:70:f0:47:44:4b:e2:a9:53:56:a2:3e:d3:4d:
a0:3e:c8:65:55:a1:83:ec:87:21:a0:62:63:07:4e:
f3:7a:8a:1a:09:bc:23:61:8f:df:20:7b:7b:aa:79:
a8:10:10:e8:8c:0b:27:94:7e:21:1c:da:c2:c5:a2:
51:e8:ca:0d:7c:11:26:43:6b:48:13:e2:b0:43:58:
b0:4b:22:a3:7b:57:76:a4:ef:97:76:24:23:75:45:
89:18:d4:31:06:a0:a7:1b:4f:06:7f:f4:54:5f:8d:
d5:04:4d:7a:ee:a5:25:4b:3d:0e:3e:c4:f2:7a:b3:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:18:33:9F:4F:0F:55:7B:73:83:E3:3B:AC:0E:42:19:47:1C:9E
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:20:52:5f:a7:7d:c7:8e:84:70:c1:12:0a:9e:3f:79:41:
4f:06:09:3d:ef:26:08:ff:0d:35:a9:bf:5b:26:59:c3:83:8d:
33:dd:8f:cb:0f:47:a9:2f:25:05:65:91:31:4d:4d:cd:a4:5f:
0d:21:26:05:68:76:19:7f:5c:bc:7b:dd:47:bd:84:95:c6:b2:
77:9f:42:20:a0:eb:2a:7f:5e:fe:69:6f:fe:06:90:d6:7b:fe:
ab:29:c4:52:15:5d:f5:de:f6:4a:ae:44:5d:0b:64:6e:26:43:
a6:41:ba:24:51:d4:79:45:5c:99:44:43:33:3a:85:41:56:4d:
3e:76:0e:7b:b2:e7:ee:9d:9b:06:5f:5c:ba:c2:fb:2d:7b:72:
27:cb:d6:2a:0d:ef:80:c5:eb:9a:fe:7a:8e:df:14:6b:16:57:
d6:3e:7f:aa:5e:28:95:c7:be:25:eb:07:bc:8a:de:39:4f:aa:
46:26:49:e8:1c:a9:9d:fa:55:96:9b:d3:d1:31:ef:8e:bf:1e:
cf:97:9f:fc:a7:12:dc:4d:cb:db:c5:96:06:81:2a:c7:58:3c:
37:4b:5c:bd:81:18:f3:4a:0e:d9:b2:ec:49:bf:f8:f7:a7:5c:
a9:aa:f1:4d:34:43:90:34:1a:dd:be:c1:de:92:70:fc:96:34:
68:78:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:07 2026 by rpki-client