Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File: C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier: gW3Z/qjMa11O6u+jTT1er08NZr2iQORB3+8yHHg4zoM=
Subject key identifier: D2:64:43:10:8F:05:97:10:7C:43:89:47:C9:C3:F7:F6:B4:E7:93:1B
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer: /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial: 019D2703B7826A69FBAE9A607DA0DFF8A06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: NwmMV7QrDWaNmlN/NH8/v45uGpLwJhEMP90olm/Ggnk=)
2: g9UJbML95L_TyHitniLbb9E7L0g.roa (hash: xAbi3dR1ksPLZFCaHva+G7hmMyWiUrNdlBOJzZB47WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b7:82:6a:69:fb:ae:9a:60:7d:a0:df:f8:a0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=d26443108f0597107c438947c9c3f7f6b4e7931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:d1:e9:bb:23:b3:81:6b:b6:7b:0a:5e:72:
e4:da:c4:d5:76:5e:a7:eb:2b:3d:b1:17:b2:b5:87:
9d:ef:e3:ff:30:72:88:86:d7:e4:c4:2c:76:aa:98:
ae:33:cb:16:f2:d2:58:fa:0b:ca:64:75:d9:7d:39:
ee:c1:01:39:f4:66:de:30:ac:35:5c:e8:c3:04:b7:
50:78:3a:7a:40:3e:c4:f0:96:87:30:c8:18:74:d3:
e9:c3:a4:be:34:be:a4:ef:16:35:0b:30:37:5a:37:
87:7e:67:c1:73:88:42:04:f3:8b:c7:e5:80:7e:1a:
2b:63:d7:93:09:bc:c8:c4:0d:dc:5b:a6:3d:64:8b:
72:cd:5c:26:78:1c:c8:22:09:46:d6:9f:9c:bc:1e:
e9:08:c9:5b:07:26:d8:33:58:dd:91:86:2f:0b:b2:
75:21:c0:42:dc:0d:ad:2f:a4:b8:0e:54:59:27:e3:
a7:9e:43:a2:3e:a9:dc:71:77:9d:b8:5e:8c:a9:a3:
b1:1b:a8:b6:e6:d2:31:29:de:e2:0b:47:fc:d1:b1:
9b:c2:a3:7f:27:68:34:62:a3:8a:ad:7b:6a:27:f3:
a4:29:12:5d:ab:94:5c:bf:24:e2:e8:34:90:b3:79:
e1:98:e8:bf:d1:83:24:a1:da:b5:71:d6:ee:1a:81:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:43:10:8F:05:97:10:7C:43:89:47:C9:C3:F7:F6:B4:E7:93:1B
X509v3 Authority Key Identifier:
keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:77:6a:c9:7d:99:9c:7c:b3:d2:ce:52:61:24:64:b4:88:
60:e9:f4:82:db:2d:54:fd:f8:70:57:dc:1f:d3:6b:34:79:b3:
6e:a6:57:54:ce:7e:ee:6b:65:d0:e4:0d:32:40:da:98:88:04:
87:49:fc:0d:6a:75:6a:c5:17:be:a4:b6:61:f4:2f:61:d9:c0:
a3:93:f4:c1:9a:ab:27:05:74:d7:7b:3d:33:6d:7b:ad:34:a2:
19:8c:a4:6b:e9:44:f2:96:f6:e7:39:5c:12:49:bf:26:d2:5b:
ca:f6:91:6f:e7:f0:a0:f0:09:e7:d7:60:d0:fa:99:42:3e:7d:
84:d8:39:28:24:1d:80:16:44:f1:d1:1f:cc:2b:19:d9:83:51:
09:63:e4:85:0d:07:cf:2c:f8:dd:1a:b9:15:6e:17:ea:a4:60:
b7:b6:4f:7a:e9:16:25:2b:1d:79:c5:96:4c:ac:e7:7f:17:0d:
ae:71:73:c0:4f:c7:ab:76:4d:18:24:7e:2e:d5:d7:c5:a4:de:
6a:c6:72:29:e7:e3:f1:29:71:28:20:f8:01:fb:23:09:02:03:
c1:87:3a:c7:3b:2b:45:c5:e5:82:30:53:7c:3e:74:43:59:74:
bb:10:4e:67:f8:33:4a:3f:23:2b:9d:da:72:d2:99:07:b6:67:
1f:f7:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:59 2026 by rpki-client