Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: P912DOoEmGEFIzmFe3AC+7/9VEVuCfpmjdKHquyX1KI=
Subject key identifier: DE:04:4F:39:01:F4:17:55:77:33:4B:4E:DA:2F:50:6F:CD:84:FF:2F
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019D39776DCE6A1BBD3AD113877B6387EC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0BFB
Signing time: Sun 29 Mar 2026 12:00:21 +0000
Manifest this update: Sun 29 Mar 2026 12:00:21 +0000
Manifest next update: Mon 30 Mar 2026 12:00:21 +0000
Files and hashes: 1: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (hash: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: PYIxD96M0qOFE8mFgZ6nCeM67j6o9TUmY5OViQpTZ+s=)
3: xWhq4pJqpBDCOAn9j2p-jZnUVxw.roa (hash: 1dUwvyE89fb3mgfozy7QJGPfLkBx30lg9K5/pQzltFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6d:ce:6a:1b:bd:3a:d1:13:87:7b:63:87:ec:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Mar 29 12:00:21 2026 GMT
Not After : Mar 30 12:00:21 2026 GMT
Subject: CN=de044f3901f4175577334b4eda2f506fcd84ff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:fc:de:60:98:fa:6c:6c:c9:ed:d0:7f:d1:
bf:30:3a:f4:5b:7a:75:2b:19:25:1f:7f:09:ef:5b:
5e:05:f7:6a:cb:ff:68:0e:88:38:22:ce:66:78:81:
86:f3:53:5a:91:f0:5e:74:7d:ab:ed:64:cd:fc:95:
a7:70:d6:da:1e:2a:17:24:0c:fb:37:3c:8e:37:41:
7b:05:e9:24:28:bc:6d:1d:03:4c:53:11:48:ec:b7:
0f:99:e4:60:06:ea:d9:8d:75:2b:03:20:a4:53:bc:
e7:d8:bb:ac:80:8e:74:96:cf:a8:dd:3d:2c:2b:73:
c4:f0:d8:58:0f:57:31:5a:a5:04:56:45:ae:c0:b3:
34:1f:1d:15:11:c0:d1:41:4f:0e:17:6d:f9:6c:b7:
39:4a:b0:27:41:6a:16:2d:1f:01:83:f1:d3:bf:6c:
b8:30:43:9b:f9:14:11:44:82:cc:95:a2:78:31:c1:
8a:47:e1:bb:34:db:c4:19:02:fa:aa:ba:79:be:a2:
a4:6c:67:7a:a4:4b:23:a0:48:4b:7a:0e:72:7e:60:
d9:17:14:0c:5f:40:23:34:de:81:ec:7c:f1:1e:35:
b6:0a:b1:ea:ab:60:3d:56:12:fa:dc:f4:50:13:e7:
89:ba:c3:25:e6:c6:86:de:2b:e9:db:a6:c4:f1:a8:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:04:4F:39:01:F4:17:55:77:33:4B:4E:DA:2F:50:6F:CD:84:FF:2F
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:36:28:63:6d:11:42:bc:34:43:0a:e1:0d:14:7b:d8:07:
04:ce:9c:a8:33:cf:0d:8f:e8:76:50:ff:6c:f2:53:e5:0d:96:
88:10:a5:7a:46:23:3b:3a:4a:3c:c3:e1:2c:20:9a:d2:93:0d:
e6:52:40:62:13:e6:b7:7b:54:9d:4d:62:e3:ce:5b:dd:11:fa:
3a:b0:04:77:cf:0d:59:14:24:f9:5f:58:9a:7f:5f:f4:96:46:
3e:90:c4:df:6e:f2:a1:40:30:d2:bc:0b:34:3a:7a:d5:06:15:
d2:d4:2a:26:55:e5:9e:c7:93:ba:08:41:81:1c:d9:c1:e6:1a:
6f:f9:57:0c:7a:40:eb:ab:e1:7f:04:b8:cb:61:9d:6b:1e:d3:
b6:7a:a6:6c:10:3b:8d:52:2a:5b:4b:ee:79:59:8f:5f:7b:6a:
ed:d4:fe:c9:9b:00:df:b7:a9:a2:fc:77:73:c1:cd:98:89:93:
1c:44:17:0d:1f:c4:c9:bb:1c:9b:65:b6:63:ce:8c:90:2c:85:
29:ce:ad:17:c7:41:aa:7a:59:65:ac:3f:be:87:d2:c4:41:96:
b5:0f:d9:bb:82:a1:9d:ae:68:6c:93:a3:96:b7:c0:40:11:ca:
e9:04:42:78:0a:46:83:09:14:49:33:10:5f:df:d7:2f:7c:15:
51:6a:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:17 2026 by rpki-client