Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: by9IWfKlkOGPO+Ix7KHby0SNuJglge+2XkCgcuPA0WY=
Subject key identifier: C7:67:27:E5:15:CD:6F:8D:A7:C4:3B:DA:47:01:AE:17:89:A2:62:89
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019E2091BCA1CF76FFF397F40418483B6C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 09:01:22 +0000
Manifest this update: Wed 13 May 2026 09:01:22 +0000
Manifest next update: Thu 14 May 2026 09:01:22 +0000
Files and hashes: 1: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: yDfB+vfTyMAsMrZ0EUpL3TmhZSaFyxcllotuy4il7hs=)
2: gw7haS9Eo4v-nJwtV0iha6TGNxg.roa (hash: kfj7TXq3aFYsD7hG7bIHLfXoq8dEC7iq1n7sdP2Bfpw=)
3: tYPo-JdyPV4KdsNSD7TTp6b2_Fs.roa (hash: pzKU3jxLQB7XiHy47QsandSzoGrUadAqBIVU3KmApNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:bc:a1:cf:76:ff:f3:97:f4:04:18:48:3b:6c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: May 13 09:01:22 2026 GMT
Not After : May 14 09:01:22 2026 GMT
Subject: CN=c76727e515cd6f8da7c43bda4701ae1789a26289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:87:aa:4d:a0:5c:7c:6b:b3:ce:92:9d:cd:
2f:00:c9:19:b6:b9:17:cc:19:3d:56:e1:00:e1:0d:
da:37:4c:2f:70:b7:7b:47:f0:8c:43:cf:47:c5:ac:
8a:4f:da:af:47:ec:fa:a1:dd:fa:f7:dc:5e:ad:79:
2d:cd:0d:2c:2a:c9:a3:dc:2d:24:2f:2d:f4:80:e5:
0b:1b:0a:27:1f:a7:97:9b:9e:d7:50:04:b6:e9:ce:
d7:9c:89:e3:83:9f:b3:25:1b:cd:54:f8:6e:69:35:
85:90:a9:8b:30:c0:79:e9:e4:11:e5:b5:6d:03:bd:
b8:88:f0:be:09:7a:cc:bd:76:94:c2:b8:70:48:c7:
ff:d4:b5:9d:68:6a:9b:12:2d:73:a9:b3:ae:32:26:
f1:5c:58:e3:37:90:62:43:3f:ff:f5:20:22:5e:f0:
1c:3a:2e:bd:c6:3f:1c:1b:3a:1f:e8:3e:42:89:3b:
b1:3d:50:3b:17:36:34:e7:c7:b1:a1:66:94:60:f6:
67:0e:17:75:8c:23:7f:22:16:65:74:95:8b:94:52:
1e:0a:c4:8d:ce:52:a8:a1:63:c1:0e:20:6d:24:76:
ab:9e:a5:f7:c4:82:6e:fb:9c:a1:29:e4:15:4a:fa:
38:52:c8:c4:d9:62:0f:a9:b2:5d:11:2e:b8:e7:01:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:27:E5:15:CD:6F:8D:A7:C4:3B:DA:47:01:AE:17:89:A2:62:89
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:43:15:05:77:23:35:80:e1:e4:b4:23:00:f3:95:ff:63:e9:
59:2a:a8:f0:9f:05:de:67:73:a1:be:bb:88:44:7f:38:9e:6c:
90:f3:d3:5f:af:6c:b0:63:0a:d2:57:71:96:d0:af:af:9c:6e:
2c:69:3f:d9:db:b2:f6:1a:61:79:20:6a:32:a5:a8:7b:ef:64:
fb:45:62:77:88:22:51:11:cf:49:35:07:54:92:d4:ba:da:82:
db:0f:16:b9:79:21:4c:a0:cc:77:94:d8:32:fe:85:6d:1b:ac:
be:aa:2c:1c:6d:75:4f:13:b1:44:7a:35:f4:9b:8a:9a:4a:36:
fa:c0:c9:1b:12:3c:de:34:a0:f2:19:f0:33:02:76:f0:ac:31:
7e:fa:c7:88:37:31:af:29:94:b4:fc:0f:21:43:69:25:b8:97:
db:f8:97:34:75:85:0c:0c:cd:21:77:51:e9:5c:f0:03:d2:2d:
4f:50:e2:a4:9e:0a:f8:9e:be:14:d9:08:b9:6c:09:c3:a3:39:
57:cb:1c:38:e7:70:65:c1:cd:01:85:0c:2f:4a:1f:5a:50:e0:
fb:83:89:a7:29:2e:72:83:5b:7e:e7:f6:c3:4a:a9:22:b5:7d:
23:04:8b:be:ea:cf:c2:14:b5:dc:8b:c3:00:c7:d7:1b:ca:2a:
bf:75:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:24 2026 by rpki-client