Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: SfCS89mSD2V8/ZEux6CEyHe31mwW9Pqh9me+pTqKN9g=
Subject key identifier: 90:20:4C:F5:A7:79:42:CE:98:9F:23:1C:B6:09:5F:5E:A5:CC:71:CB
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 019D273AB24FDB5E2E9B6B30123F3C056937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 1037
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: eENo7+S4SaQJ+0N1ScN+amdZXhxIgqvEzRFerMOv3tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b2:4f:db:5e:2e:9b:6b:30:12:3f:3c:05:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=90204cf5a77942ce989f231cb6095f5ea5cc71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:d7:57:aa:d7:52:cf:55:b0:1a:89:2c:89:
dc:a7:c0:4f:79:f2:ca:df:b4:ae:03:8d:0b:b3:e1:
c3:29:27:02:ef:98:f5:8c:92:ab:7b:5d:95:8b:5d:
19:d6:59:21:95:4e:57:d8:62:22:39:7c:e8:8c:a6:
3c:4b:a4:2d:0f:a2:e9:3d:26:12:8a:e7:a4:76:97:
29:ce:e3:7e:3f:14:31:15:f9:57:96:7d:c5:9f:08:
6b:3b:b8:e4:61:98:eb:c4:2c:be:26:ea:94:b9:a6:
a8:3e:7c:3e:82:cd:7b:d1:5b:3d:43:f1:06:52:aa:
9c:0a:ae:47:3b:d7:92:b8:33:00:bb:c7:0f:9a:55:
37:55:94:31:fb:07:89:df:0b:c6:f5:65:f2:af:26:
46:9b:d1:51:2a:c2:18:3f:7a:95:45:64:1e:a2:e1:
a3:9a:bf:ff:8b:82:73:57:2c:f2:f3:0e:ea:fa:e2:
a4:5f:4a:b6:43:88:c9:0a:aa:b2:1a:1a:1d:8d:0f:
22:4f:2b:75:78:29:27:17:15:20:6e:6a:bf:37:3b:
73:5e:d9:f2:53:00:91:c0:a8:51:35:a6:79:cb:65:
c6:fb:f8:f9:33:fd:0a:1a:25:44:1e:15:65:b3:02:
7a:0d:33:df:4f:d5:da:31:b0:71:91:0f:3e:ca:33:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:4C:F5:A7:79:42:CE:98:9F:23:1C:B6:09:5F:5E:A5:CC:71:CB
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8a:2d:f3:48:73:5f:7a:bd:a8:a8:81:96:af:06:76:9a:2c:
88:51:7f:35:41:9d:8e:c5:2c:2a:8a:78:e0:e7:ce:6f:14:6d:
b8:1b:89:4a:5c:53:32:5d:01:cd:1a:02:da:38:f9:2f:99:a0:
cf:2b:d4:66:f3:d0:ba:2f:42:f1:14:97:66:8a:74:02:d3:c9:
e8:a2:8b:f5:b0:78:29:6b:25:58:1f:15:14:e2:3c:72:a8:77:
bd:d1:c8:8e:40:85:f0:b8:cf:13:a5:34:a1:15:f9:6a:e5:02:
2e:01:7d:0e:2a:e5:7b:b4:62:d8:6e:e4:d9:8f:0c:c8:ee:8d:
92:d9:bf:8b:87:a5:57:85:7c:74:42:24:83:81:ef:79:3f:4a:
dc:14:02:07:31:ab:6e:41:dc:53:3d:58:0c:7a:c9:ad:36:74:
42:b1:a5:7d:5a:c8:f5:df:b9:b0:2b:8f:4b:dc:57:9d:bc:2e:
5a:98:8e:e3:02:c4:35:61:f6:d8:67:d3:e4:90:53:8a:bf:72:
fb:de:10:e8:e6:f9:95:a8:bc:3d:19:6c:0f:de:53:e4:02:20:
96:76:59:7a:a2:b1:35:0b:55:10:ab:1a:d1:4e:ac:da:c6:dc:
56:dd:11:d1:5f:77:af:73:07:db:b4:57:f3:7f:64:9a:9b:3b:
6d:74:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:49 2026 by rpki-client