Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/B1xAKT98g9hxAXp9eefKumHIH54.mft
File: B1xAKT98g9hxAXp9eefKumHIH54.mft (raw, json)
Hash identifier: SDcWP3AFviqeOdA+6ay92FSjNr8ZKALt1NC6gvuHZDA=
Subject key identifier: DB:36:E3:8A:41:32:59:4F:8B:2C:D5:56:93:C3:52:9D:46:2B:C4:89
Authority key identifier: 07:5C:40:29:3F:7C:83:D8:71:01:7A:7D:79:E7:CA:BA:61:C8:1F:9E
Certificate issuer: /CN=075c40293f7c83d871017a7d79e7caba61c81f9e
Certificate serial: 01A0D2013EB7968914672F1FCFB34C470A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1xAKT98g9hxAXp9eefKumHIH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/B1xAKT98g9hxAXp9eefKumHIH54.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:01:31 +0000
Manifest this update: Thu 24 Sep 2026 06:01:31 +0000
Manifest next update: Fri 25 Sep 2026 06:01:31 +0000
Files and hashes: 1: B1xAKT98g9hxAXp9eefKumHIH54.crl (hash: QNcnnmEuCD54ZHIRmX2uDDRBdQTM4k6pUSMaj2aQoII=)
2: clfBd62Ct-ggKCupEDDgrpgbJnM.roa (hash: nmizqgQl3inOH0CHiveoAOO7C6enaYfhy2yaRfu6Jzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/B1xAKT98g9hxAXp9eefKumHIH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/B1xAKT98g9hxAXp9eefKumHIH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1xAKT98g9hxAXp9eefKumHIH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:3e:b7:96:89:14:67:2f:1f:cf:b3:4c:47:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075c40293f7c83d871017a7d79e7caba61c81f9e
Validity
Not Before: Sep 24 06:01:31 2026 GMT
Not After : Sep 25 06:01:31 2026 GMT
Subject: CN=db36e38a4132594f8b2cd55693c3529d462bc489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:e3:58:9e:69:4f:3a:d5:10:eb:4f:68:2f:
67:77:e5:d9:90:e4:a8:61:4a:1e:db:ff:10:44:80:
f6:04:ee:95:6c:84:dd:f5:bc:48:81:7e:fc:da:75:
2a:d7:8b:48:48:5b:3a:98:79:ab:34:7c:fa:5c:b3:
5b:cd:57:79:12:56:c1:b6:60:97:68:99:f4:c3:5c:
c0:41:f6:12:36:cd:50:0b:bb:d7:af:7d:e1:99:03:
01:e7:1a:0e:55:05:54:5a:a5:fe:aa:59:a1:5f:07:
e7:98:ce:1e:67:fc:3c:bd:f6:36:22:2b:ad:23:e7:
28:37:88:46:d3:69:8d:1a:8b:86:4b:b2:4e:91:0c:
8d:57:1a:5a:17:b1:26:2a:f3:ca:08:d2:e6:01:a2:
aa:ec:5b:75:26:2b:96:4b:7a:89:f9:41:2b:67:a3:
70:26:59:92:ad:72:65:ef:b5:e0:12:42:ba:89:99:
55:8b:c0:31:12:1a:d6:97:12:7f:fa:ad:08:18:2e:
c2:18:68:5f:ec:66:5b:8b:a8:8b:7a:0f:10:24:10:
c3:f9:36:58:88:3a:52:6a:96:f6:2c:94:d8:9d:fe:
d9:a8:ed:d7:66:fb:40:3f:68:fd:c9:6e:a9:f6:89:
ac:9a:0c:24:fd:ec:dc:5d:a4:19:3e:13:5e:a8:0e:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:E3:8A:41:32:59:4F:8B:2C:D5:56:93:C3:52:9D:46:2B:C4:89
X509v3 Authority Key Identifier:
keyid:07:5C:40:29:3F:7C:83:D8:71:01:7A:7D:79:E7:CA:BA:61:C8:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1xAKT98g9hxAXp9eefKumHIH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/B1xAKT98g9hxAXp9eefKumHIH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/B1xAKT98g9hxAXp9eefKumHIH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:ab:d0:20:36:58:5f:cb:a5:b6:44:79:41:5e:41:25:47:
17:c9:87:c0:e4:05:e7:1c:52:2c:13:be:cd:2b:18:38:03:82:
9c:ba:f1:92:a5:56:93:71:86:f3:91:51:02:2d:28:df:ac:e9:
71:38:c6:52:8a:f1:30:3d:73:89:ce:3c:8b:a7:ec:8f:e4:49:
b5:3c:d2:53:1f:70:be:8d:cb:cd:d9:1a:1b:a2:7d:0d:3a:33:
91:a5:c1:90:6f:48:99:25:4d:1a:13:76:93:94:73:59:3c:ca:
0c:57:4b:13:08:63:99:ba:2b:ae:10:90:93:6b:cb:94:9e:12:
75:11:19:ad:e9:e5:83:83:d1:5f:03:a8:09:18:8c:ed:c0:72:
a9:77:3c:b5:4f:c0:b8:ff:ce:ff:25:33:7d:b9:27:16:b8:cc:
cd:72:f6:83:58:33:34:0f:fc:20:14:52:ab:c9:4b:b5:b3:17:
63:b9:05:5c:6b:76:18:49:31:98:58:e6:19:3a:32:a7:74:51:
29:4e:56:64:dd:16:3f:f5:8e:27:1a:e5:81:a9:e7:d2:d7:4f:
4f:c9:9c:5a:4c:b6:39:8d:fc:9b:c4:34:54:86:26:6c:17:93:
82:49:9b:9f:9f:03:20:ff:5f:60:81:76:39:5e:e8:e8:b6:3a:
bc:7c:6c:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAT63lokUZy8fz7NMRwpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWM0MDI5M2Y3YzgzZDg3MTAxN2E3ZDc5ZTdjYWJhNjFj
ODFmOWUwHhcNMjYwOTI0MDYwMTMxWhcNMjYwOTI1MDYwMTMxWjAzMTEwLwYDVQQD
EyhkYjM2ZTM4YTQxMzI1OTRmOGIyY2Q1NTY5M2MzNTI5ZDQ2MmJjNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpDjWJ5pTzrVEOtPaC9nd+XZkOSo
YUoe2/8QRID2BO6VbITd9bxIgX782nUq14tISFs6mHmrNHz6XLNbzVd5ElbBtmCX
aJn0w1zAQfYSNs1QC7vXr33hmQMB5xoOVQVUWqX+qlmhXwfnmM4eZ/w8vfY2Iiut
I+coN4hG02mNGouGS7JOkQyNVxpaF7EmKvPKCNLmAaKq7Ft1JiuWS3qJ+UErZ6Nw
JlmSrXJl77XgEkK6iZlVi8AxEhrWlxJ/+q0IGC7CGGhf7GZbi6iLeg8QJBDD+TZY
iDpSapb2LJTYnf7ZqO3XZvtAP2j9yW6p9omsmgwk/ezcXaQZPhNeqA4MaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs244pBMllPiyzVVpPDUp1GK8SJMB8GA1UdIwQY
MBaAFAdcQCk/fIPYcQF6fXnnyrphyB+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjF4QUtUOThnOWh4QVhwOWVlZkt1bUhJSDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjkt
NDQyMjk5ZjQxMmZkLzEvQjF4QUtUOThnOWh4QVhwOWVlZkt1bUhJSDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjktNDQyMjk5ZjQxMmZk
LzEvQjF4QUtUOThnOWh4QVhwOWVlZkt1bUhJSDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTyr0CA2
WF/LpbZEeUFeQSVHF8mHwOQF5xxSLBO+zSsYOAOCnLrxkqVWk3GG85FRAi0o36zp
cTjGUorxMD1zic48i6fsj+RJtTzSUx9wvo3LzdkaG6J9DTozkaXBkG9ImSVNGhN2
k5RzWTzKDFdLEwhjmborrhCQk2vLlJ4SdREZrenlg4PRXwOoCRiM7cByqXc8tU/A
uP/O/yUzfbknFrjMzXL2g1gzNA/8IBRSq8lLtbMXY7kFXGt2GEkxmFjmGToyp3RR
KU5WZN0WP/WOJxrlgann0tdPT8mcWky2OY38m8Q0VIYmbBeTgkmbn58DIP9fYIF2
OV7o6LY6vHxs4A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:45:31 2026 by rpki-client