Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: hnVrcsA+9dmqxnrZq4/fa7+1ayO7A+AcridoU+HOOcM=
Subject key identifier: C7:5E:57:4D:24:58:02:6A:01:4E:0A:10:DC:98:FA:86:F0:66:FA:FF
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A0F2D65A98993DF22449674D5DB1CFFBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 1A84
Signing time: Wed 30 Sep 2026 15:02:09 +0000
Manifest this update: Wed 30 Sep 2026 15:02:09 +0000
Manifest next update: Thu 01 Oct 2026 15:02:09 +0000
Files and hashes: 1: a0weMcNAZgut6KJeiI7ueC7zVOM.roa (hash: zgHkvmbB4MQLp9DGNfh2vkVqkvatMLgGZS95Rl5f0lE=)
2: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: 0cSLA5bEy3eVD6uX2kA5D4LwvuH0wjBffDMjPIugCG4=)
3: pD_xNHnOAMbeZJKhoUzaiXkFd20.roa (hash: AnGfdXwmS+PgJxnhVgGvzIt9eAIBS9X+x8tmddcb5p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:5a:98:99:3d:f2:24:49:67:4d:5d:b1:cf:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Sep 30 15:02:09 2026 GMT
Not After : Oct 1 15:02:09 2026 GMT
Subject: CN=c75e574d2458026a014e0a10dc98fa86f066faff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:e0:a4:b9:73:86:2d:20:35:22:5d:9e:cc:
3c:93:2b:7f:23:a2:65:bb:0c:6d:14:e6:c4:8a:ce:
db:0e:80:c4:51:0b:dc:7a:6a:c7:4e:5c:8f:4e:41:
1f:6f:a6:95:eb:5c:e4:be:a2:d7:8f:24:55:68:d4:
ea:67:0e:aa:72:f0:4a:b0:5f:89:47:20:c7:6b:69:
81:c8:8b:2b:07:39:40:fd:8a:9e:f0:cc:c1:52:49:
ee:dc:c5:0c:e5:ac:15:96:d4:56:10:d1:94:56:e3:
be:ac:a7:35:f8:ba:22:8c:8e:ac:da:53:36:af:69:
44:5b:96:d7:86:06:9b:e7:ff:8e:81:52:0f:d9:35:
a8:87:ad:55:e2:0a:ad:b6:99:36:b4:4f:36:17:89:
17:55:27:cf:e2:b8:dc:91:56:68:55:48:31:17:be:
b4:99:6f:78:d7:7b:6c:1a:69:dc:1f:da:7a:21:7e:
80:05:e5:15:45:4a:b9:ce:e4:04:b5:5d:de:a3:a1:
27:17:14:88:7e:c5:f8:af:51:bd:82:37:d8:74:c9:
8e:ff:a4:d1:85:cc:71:f0:e1:3d:2c:be:5b:95:59:
33:68:99:80:0d:fd:e0:08:f2:8e:02:55:ee:91:91:
15:86:74:5c:9b:66:cf:25:fe:c6:a0:50:e7:04:52:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:57:4D:24:58:02:6A:01:4E:0A:10:DC:98:FA:86:F0:66:FA:FF
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:99:2a:f4:5b:7a:5b:a7:19:f8:a2:0f:0a:e4:0f:39:38:c2:
16:9c:8d:c2:52:2c:31:4f:bc:a4:f4:c2:ec:3a:48:b4:34:80:
59:f7:b2:5e:1e:4b:e0:96:78:f9:31:2c:b7:e2:94:df:98:4e:
98:b7:72:b9:5d:1f:49:c1:a3:6d:ad:b6:2e:83:6c:a4:19:70:
09:54:96:7b:74:b2:13:cb:96:62:f1:4d:ec:2f:bd:0f:59:a7:
2b:7b:e2:7f:e0:99:a5:75:03:3d:f2:11:aa:d6:8d:d3:af:af:
34:32:85:fb:b5:1b:00:fa:aa:19:aa:6f:61:a0:6d:e5:a8:64:
35:e8:79:b9:aa:3d:47:4a:1f:0c:1f:fc:c2:83:21:67:9f:d6:
7f:03:eb:7b:6e:30:82:0f:68:c6:04:b3:62:46:b7:c9:c7:57:
9a:8c:66:75:c0:43:f7:91:0c:72:ae:cf:bd:b8:6e:3e:d2:97:
d6:a0:c6:ea:a1:19:66:00:13:e6:29:eb:8c:37:0a:b0:e9:a8:
de:06:bc:1f:56:1a:73:e5:48:19:7c:a8:e0:34:84:9b:82:e1:
f6:e7:ce:0c:06:e6:55:e0:34:2a:77:89:72:3a:ef:3e:f9:e9:
91:5b:5c:dd:c7:3f:0c:f3:4f:82:7d:f4:f3:9c:c8:e2:c3:f7:
db:cf:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:07:22 2026 by rpki-client