
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: SQTu+gwy3IUlEgH5CcFDQJI3Cb3flLUOeFxPy9o8gCc=
Subject key identifier: 22:B6:0E:14:81:36:16:08:8E:B0:91:78:08:B2:2A:CA:68:F5:8F:70
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 01A0D193193408AC7F1D3641F28D3040D32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 04:01:13 +0000
Manifest this update: Thu 24 Sep 2026 04:01:13 +0000
Manifest next update: Fri 25 Sep 2026 04:01:13 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: ij+VKV6+hy81WF/uzdv1IIyrizFa+9RPQ2+gIMxyJU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:19:34:08:ac:7f:1d:36:41:f2:8d:30:40:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Sep 24 04:01:13 2026 GMT
Not After : Sep 25 04:01:13 2026 GMT
Subject: CN=22b60e14813616088eb0917808b22aca68f58f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:cf:f5:2c:00:ec:a0:ec:d7:ee:ca:56:1f:
2c:3b:4b:1a:c9:fc:0a:23:f2:91:ea:b0:71:b1:63:
e6:38:db:ae:e1:dd:47:a4:99:cc:32:cd:3f:df:d7:
c2:60:b3:c5:32:0e:55:9d:6f:46:59:85:1f:1e:27:
19:34:1e:23:14:57:02:9a:b4:bd:01:ea:a1:f6:55:
2e:92:6f:0b:de:c9:4d:5e:45:88:12:33:04:ac:5c:
9b:de:c2:8e:28:ef:a4:65:86:d3:b2:9a:02:cd:09:
6b:8b:a6:33:f6:70:a1:1f:07:78:16:87:c0:0a:a1:
9e:d2:42:08:fe:ee:31:05:62:59:5a:06:6d:a8:0e:
9a:84:c7:a5:d4:46:40:f0:cd:56:bd:7d:18:5d:a5:
dc:72:35:5e:f1:5e:07:6c:b4:27:da:91:6b:1c:11:
95:f1:07:e2:f8:52:f2:a3:39:1e:33:b0:15:b4:e8:
12:24:4a:e5:b4:8d:23:87:f9:2f:56:39:f1:9d:1c:
66:f9:df:20:90:0a:fe:76:40:00:2f:d4:71:dc:66:
f8:d8:10:7d:05:4c:59:ae:3c:01:52:62:f5:11:10:
ee:94:a7:bf:73:d4:c9:9d:6f:99:7b:3d:2c:c3:d9:
09:11:10:01:c9:74:09:ed:dd:03:c5:a0:7f:bc:65:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:0E:14:81:36:16:08:8E:B0:91:78:08:B2:2A:CA:68:F5:8F:70
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:1f:ec:42:1a:84:6f:e5:1d:69:08:95:f4:bc:4a:47:68:
a9:03:76:d7:16:b7:d5:89:6e:73:e0:f5:27:28:17:03:15:b4:
48:4d:bc:22:b9:54:4a:c9:b0:93:96:50:4d:50:6c:86:ae:7d:
d7:44:78:bb:5b:3c:90:a7:4c:5b:26:d5:f1:3d:94:0a:b8:26:
68:82:df:98:0f:07:c7:fb:3c:c3:8f:cc:69:4a:38:1c:52:35:
30:dd:6b:28:6f:3e:bb:4f:7e:3a:09:36:85:7f:0a:58:d3:37:
c9:4c:e2:10:c1:1f:0f:94:2a:11:f9:f9:1e:9e:92:9e:00:62:
20:e8:41:b5:5b:25:94:03:89:d5:4a:09:51:b8:e7:2d:72:c6:
65:c3:b6:7d:1f:61:64:1b:b2:27:7b:8b:ff:60:fd:83:e4:e8:
a8:07:f3:70:0b:a2:ac:61:c6:25:1a:83:e7:07:0e:9c:16:32:
f2:44:cf:50:40:8c:56:e6:80:4a:11:66:86:9b:d1:43:e9:9e:
74:d0:22:08:93:05:27:79:c3:83:96:9f:fa:2d:f4:47:94:b7:
c2:b6:72:fb:23:63:e8:2d:30:5b:80:3f:27:f8:b2:e0:09:ae:
df:a7:72:78:12:38:bf:2e:be:7e:2f:27:10:41:40:ec:ec:ea:
bf:d1:45:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkxk0CKx/HTZB8o0wQNMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTkwODNlMDEyMTA1NWEyZDQ5YzU5MzA1ZjQzYTgzZGRl
NWQ5YjcwHhcNMjYwOTI0MDQwMTEzWhcNMjYwOTI1MDQwMTEzWjAzMTEwLwYDVQQD
EygyMmI2MGUxNDgxMzYxNjA4OGViMDkxNzgwOGIyMmFjYTY4ZjU4ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxHP9SwA7KDs1+7KVh8sO0sayfwK
I/KR6rBxsWPmONuu4d1HpJnMMs0/39fCYLPFMg5VnW9GWYUfHicZNB4jFFcCmrS9
Aeqh9lUukm8L3slNXkWIEjMErFyb3sKOKO+kZYbTspoCzQlri6Yz9nChHwd4FofA
CqGe0kII/u4xBWJZWgZtqA6ahMel1EZA8M1WvX0YXaXccjVe8V4HbLQn2pFrHBGV
8Qfi+FLyozkeM7AVtOgSJErltI0jh/kvVjnxnRxm+d8gkAr+dkAAL9Rx3Gb42BB9
BUxZrjwBUmL1ERDulKe/c9TJnW+Zez0sw9kJERAByXQJ7d0DxaB/vGVaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCK2DhSBNhYIjrCReAiyKspo9Y9wMB8GA1UdIwQY
MBaAFAepCD4BIQVaLUnFkwX0OoPd5dm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZrSVBnRWhCVm90U2NXVEJmUTZnOTNsMmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MDBiNTMtZWI5MC00MGQyLWFjMGEt
NWEwMTc4ZWNhYzI4LzEvQjZrSVBnRWhCVm90U2NXVEJmUTZnOTNsMmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MDBiNTMtZWI5MC00MGQyLWFjMGEtNWEwMTc4ZWNhYzI4
LzEvQjZrSVBnRWhCVm90U2NXVEJmUTZnOTNsMmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbkf7EIa
hG/lHWkIlfS8SkdoqQN21xa31Yluc+D1JygXAxW0SE28IrlUSsmwk5ZQTVBshq59
10R4u1s8kKdMWybV8T2UCrgmaILfmA8Hx/s8w4/MaUo4HFI1MN1rKG8+u09+Ogk2
hX8KWNM3yUziEMEfD5QqEfn5Hp6SngBiIOhBtVsllAOJ1UoJUbjnLXLGZcO2fR9h
ZBuyJ3uL/2D9g+ToqAfzcAuirGHGJRqD5wcOnBYy8kTPUECMVuaAShFmhpvRQ+me
dNAiCJMFJ3nDg5af+i30R5S3wrZy+yNj6C0wW4A/J/iy4Amu36dyeBI4vy6+fi8n
EEFA7Ozqv9FFwQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:36:43 2026 by rpki-client