Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File: C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier: 5jTpPYxPr3psG1h3UWakCjP3Hvpsu8VtHzHOKMfbZhM=
Subject key identifier: D4:02:BE:2E:A8:F9:E9:DB:69:C8:D3:2A:82:B0:E5:23:C3:56:C4:59
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer: /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial: 019D2B17105DFBBD1CE81678B6DF7DC122C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number: 9B
Signing time: Thu 26 Mar 2026 17:00:24 +0000
Manifest this update: Thu 26 Mar 2026 17:00:24 +0000
Manifest next update: Fri 27 Mar 2026 17:00:24 +0000
Files and hashes: 1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: 1kXD1Ixd5sbIgtZDl1AKY9YU+Us+GF7R/LBhJHrSNjw=)
2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:10:5d:fb:bd:1c:e8:16:78:b6:df:7d:c1:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Validity
Not Before: Mar 26 17:00:24 2026 GMT
Not After : Mar 27 17:00:24 2026 GMT
Subject: CN=d402be2ea8f9e9db69c8d32a82b0e523c356c459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:c2:ba:e6:d1:9b:c5:f3:d2:34:8d:cb:f9:
44:8a:f5:de:84:08:79:f4:0c:f4:aa:a5:00:92:5c:
a5:ef:07:15:3f:88:0a:1f:bd:11:c4:f2:38:1a:53:
ea:06:08:e1:c0:f2:46:1d:8d:98:78:b1:62:4d:6f:
d9:08:58:f7:0c:49:0d:01:29:2c:c2:ba:2c:48:b1:
de:65:a9:2a:5f:46:df:39:72:f4:3e:be:10:0b:0c:
d3:ff:89:0a:c6:66:6f:d4:71:65:30:9e:ad:56:77:
b5:dd:1a:39:64:95:8d:d2:6f:73:41:0f:3c:c7:70:
d9:8e:62:1e:82:d9:b1:0a:a6:b5:ad:17:c3:40:1b:
2c:53:b1:3a:23:ec:47:96:33:e0:e8:9a:92:02:95:
81:52:cf:0b:55:fb:5b:be:cf:2b:11:c7:b2:63:8a:
5a:cd:91:ca:1b:05:09:a3:0d:2c:df:da:ef:8c:5d:
65:5c:85:0e:d2:64:72:c2:40:7a:90:d5:53:f8:7a:
a5:89:d5:be:72:bc:7f:1c:81:b3:a0:13:ab:b2:8d:
f9:df:db:d6:3d:7f:9b:7d:71:6e:db:73:bb:a2:22:
fe:a2:57:95:d4:d7:17:53:d1:c2:ac:aa:e2:5d:3d:
2b:e0:d6:f7:8d:40:f8:0c:5a:02:00:a7:99:04:f5:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:BE:2E:A8:F9:E9:DB:69:C8:D3:2A:82:B0:E5:23:C3:56:C4:59
X509v3 Authority Key Identifier:
keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b3:8a:08:8d:a1:48:d3:16:77:6d:34:eb:10:90:41:69:82:
a7:e8:ca:4b:88:1e:71:63:4b:4f:2f:ea:cd:ad:a9:d7:11:c8:
50:60:19:41:a2:4d:e2:96:2f:20:57:9e:dc:1e:3d:0e:d8:78:
4b:1c:e9:fe:9a:3f:d0:a1:60:db:4d:f5:c4:25:b2:6f:3c:5d:
90:87:5b:55:79:b4:d2:83:35:5c:8d:e2:88:de:6b:9e:41:77:
f7:bc:7a:1b:1c:40:82:3d:51:b9:50:83:cf:c7:f7:c2:86:ef:
80:6a:fa:f3:0c:2d:72:80:52:9a:7f:c7:bd:f2:b9:88:97:a2:
d4:1a:fc:09:20:31:ca:bb:ea:f4:1a:b6:84:e2:af:46:0b:a8:
ad:36:3b:6b:e8:a0:6a:29:86:44:c2:e6:43:8b:f0:85:80:a9:
3f:e4:d0:3a:f7:0b:b8:91:a7:01:06:e3:6d:a2:c4:8a:03:1b:
22:3e:94:9c:8f:b2:b3:04:55:d3:a8:a0:13:a9:72:c5:20:3e:
b5:41:dc:25:1a:88:49:43:7a:46:48:0f:8e:61:a4:4c:72:f2:
e4:04:75:90:76:3e:ac:b6:9e:f9:1f:3c:96:b5:45:75:8f:52:
8d:e0:30:cb:84:bd:6d:4c:fd:98:25:74:a4:c0:27:7b:67:71:
d8:c5:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:33:28 2026 by rpki-client