Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier: kisDeWWgQ5oq4vYOzVYRq9jI4BaatiOnwmXDjW2J8fU=
Subject key identifier: 43:AD:68:FE:29:B3:52:02:D9:3B:06:1A:A8:70:C6:B9:10:0D:E8:B2
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial: 019CBDA859F57234BA880140AC1AD5DADCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number: 1853
Signing time: Thu 05 Mar 2026 11:00:52 +0000
Manifest this update: Thu 05 Mar 2026 11:00:52 +0000
Manifest next update: Fri 06 Mar 2026 11:00:52 +0000
Files and hashes: 1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: 9I8Yl5TXis3yC8pVc1/7GJrDPkk88tHVGBSZ6ilrUh4=)
2: nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa (hash: 7qt1S1ac2mzquZqXIpN+D95+VEOfMXy8eLXHEbsWSgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:a8:59:f5:72:34:ba:88:01:40:ac:1a:d5:da:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Validity
Not Before: Mar 5 11:00:52 2026 GMT
Not After : Mar 6 11:00:52 2026 GMT
Subject: CN=43ad68fe29b35202d93b061aa870c6b9100de8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:af:42:e1:c3:47:ae:d1:69:25:1a:ad:e0:
18:05:dd:b4:ca:c2:c7:a6:d8:9e:db:3f:eb:72:6a:
df:4b:eb:7c:ee:c4:53:b3:b4:70:ed:a2:fb:10:e0:
c8:b2:1b:7b:16:da:b3:b2:da:20:c1:31:c4:af:2c:
91:cb:6e:65:4a:11:2d:56:53:dc:10:65:85:e0:c4:
5a:c4:5a:05:2e:b7:be:50:00:ec:81:6d:1d:df:06:
e3:95:4c:7a:3e:c1:7d:45:2a:7a:e1:2e:c0:f5:f6:
3e:8d:1b:30:b9:a1:8f:5d:ad:0e:30:3a:f3:e0:df:
ab:30:ac:7c:0f:11:7c:d1:c0:f6:d9:4a:8c:02:11:
c3:62:ec:f6:28:a3:85:91:15:a2:00:e0:a6:37:5b:
73:ca:b0:63:ae:52:02:0c:c5:0a:b6:1f:7b:11:df:
f9:33:3e:e8:27:e3:ef:57:c8:4f:dc:81:6b:ef:07:
a6:be:46:93:5c:c7:a5:91:3a:78:53:f2:e1:48:1c:
59:47:2e:41:f4:6a:0e:3c:17:61:6a:b4:b4:67:b8:
a1:5f:6d:9e:f0:b2:2f:e8:c9:63:7f:0e:a9:b5:0a:
ce:36:01:45:d4:12:59:df:d8:c5:18:1f:fd:f5:93:
d1:1a:71:82:f7:ad:66:a1:41:e1:69:80:81:c1:69:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:68:FE:29:B3:52:02:D9:3B:06:1A:A8:70:C6:B9:10:0D:E8:B2
X509v3 Authority Key Identifier:
keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1b:1b:b2:2d:e7:a8:76:8e:77:4f:a6:20:02:0b:39:71:55:
fd:cd:cb:90:a0:c0:98:53:91:cd:a8:5f:bf:62:94:68:31:38:
ef:7b:de:a7:f5:8b:97:38:d9:b5:01:03:17:5c:0c:1a:d5:9b:
7d:c6:c4:24:66:64:fe:b4:bf:d8:25:05:82:f8:61:12:c8:a7:
5a:e1:c8:96:40:7e:6d:90:ee:b2:94:b9:50:8d:f2:c1:08:5a:
1f:88:2c:dd:a0:37:7f:d0:e1:78:cc:81:a3:85:ca:b8:1e:e5:
f3:1c:7f:54:29:07:f4:03:0c:51:00:ac:fa:75:2d:ec:54:9c:
6b:4d:c1:f9:4e:6c:a3:c8:ee:4a:d5:17:be:28:ef:c5:ab:c0:
55:1b:c6:55:f9:a2:8d:c0:d3:74:4e:e0:cb:49:41:a7:d3:5c:
ad:86:12:b0:d6:08:56:62:eb:a1:8b:a4:ee:fe:9b:df:30:e2:
ec:0c:9f:c0:50:9d:bc:d3:d8:f8:1d:9c:73:23:c7:60:f2:cb:
a7:54:7e:32:38:92:05:f3:d2:1e:80:5d:e0:81:dd:b0:04:cd:
54:d1:d6:eb:6a:70:27:6e:8b:8d:73:0f:bb:6c:69:8a:86:c2:
85:ad:87:59:5e:55:c0:b4:d9:f7:ed:0d:04:a0:60:cd:94:6e:
9b:4e:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:16 2026 by rpki-client