Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier: cnSNxfxCatuttEaUuVwQGeat4YXgI1tkuwZ4oQXSlZ0=
Subject key identifier: 09:F7:A2:80:E8:03:7E:A7:FE:22:CE:2F:D8:A4:D2:00:66:45:01:B7
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 019D2AE0669C334BE4B92C48AF441BB60D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number: 17CC
Signing time: Thu 26 Mar 2026 16:00:42 +0000
Manifest this update: Thu 26 Mar 2026 16:00:42 +0000
Manifest next update: Fri 27 Mar 2026 16:00:42 +0000
Files and hashes: 1: Istcmzehq60di9EHB3679PMyybA.roa (hash: i4Nhr+MwqYPQIB1uAMbj/cB5SkDAFuxudlJ6P9wPBXU=)
2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: rgrQX+sN21V2g4O7oR+/n82l2kSQCTG9rbI61QMqark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:66:9c:33:4b:e4:b9:2c:48:af:44:1b:b6:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Mar 26 16:00:42 2026 GMT
Not After : Mar 27 16:00:42 2026 GMT
Subject: CN=09f7a280e8037ea7fe22ce2fd8a4d200664501b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:40:fc:c6:ee:30:2c:ed:fc:14:d4:76:37:
00:25:eb:d8:ba:2c:49:1a:fc:a1:2e:0f:97:83:59:
6c:69:cf:68:75:e9:c1:bf:7d:1f:27:a4:7e:0a:49:
96:e3:f9:39:f5:87:df:1d:9e:72:df:96:68:18:c6:
e7:be:82:ca:96:56:f0:7f:99:ce:03:2b:55:0f:16:
d5:fc:c7:e2:41:2e:41:93:a7:2e:c1:ee:4a:08:af:
9c:59:9f:20:f4:26:78:0d:23:3d:54:f4:a4:bd:19:
51:71:1c:95:25:b8:06:a8:a3:31:0d:d7:20:67:ad:
09:c1:a7:b0:8b:69:37:72:7b:00:ef:65:c2:39:f2:
b7:78:d6:65:e1:e8:cc:22:60:ca:d3:70:0e:20:1a:
00:29:86:ae:a6:d0:3e:25:d8:a3:63:e2:c0:4f:1d:
a3:6b:d7:39:45:1f:cc:7c:ed:c5:48:27:58:f1:2b:
38:c4:49:25:10:b0:88:cc:19:e0:68:9d:70:2e:33:
b7:3e:56:b0:25:44:81:96:71:f7:b7:43:aa:ab:e5:
a5:da:e2:98:7c:ac:3a:45:a4:7d:e9:10:ca:e5:ee:
23:16:28:f4:95:65:4b:0d:bf:08:e0:b0:e8:59:de:
cc:9d:1e:b1:dc:84:7a:6b:48:c3:96:a4:6a:de:dd:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:A2:80:E8:03:7E:A7:FE:22:CE:2F:D8:A4:D2:00:66:45:01:B7
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:3e:e6:64:3d:36:3e:3a:ac:8d:ec:3e:ed:95:21:f9:47:
d4:75:7a:a4:69:96:78:75:e3:d2:63:39:a1:16:c1:ea:89:10:
6f:92:b2:c0:19:52:27:06:c8:df:f3:41:5d:d2:fc:7a:4f:40:
d9:50:70:4c:81:db:16:9a:ef:2f:8a:9a:d7:5c:9c:d0:fa:47:
e8:0e:63:e6:f3:3e:47:5a:9b:55:2c:02:f5:6a:f5:fc:b7:2d:
a2:58:ee:eb:60:81:00:22:ed:9b:b6:fd:47:d3:a9:b4:4f:c1:
21:c4:30:4f:a2:76:0c:56:89:82:fc:42:f8:eb:17:a3:3d:da:
58:30:a5:f1:f3:62:af:26:49:3e:18:75:8d:a5:4f:ce:8f:b2:
90:49:d7:1c:80:a0:b7:f6:76:e2:38:f8:ba:b6:ed:92:26:36:
6f:bf:9f:a1:1c:57:58:11:e2:ef:b2:7d:22:e7:a1:25:f3:95:
68:cf:2e:bc:da:23:3f:8d:ff:c9:1a:d6:90:46:68:be:13:17:
c1:77:fc:ca:cf:9a:df:1c:83:af:f4:0d:d4:19:9d:65:da:ad:
38:bf:68:60:f5:b5:7e:27:e6:52:6a:b4:f5:47:13:c2:a7:f5:
f1:07:a2:ad:8c:51:86:f6:93:2c:a5:0c:be:dd:00:47:d1:9b:
15:14:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:53 2026 by rpki-client