Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
File: bW-CVvrIKqy2grohaoMDO1FFalI.mft (raw, json)
Hash identifier: /B7BJhC8MkOEonLAh2iZbziQWVhoTVY3l0WYameLJ3Q=
Subject key identifier: B2:67:CC:81:BE:C5:88:5B:61:8A:20:18:79:90:DB:49:E3:86:EF:E9
Authority key identifier: 6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52
Certificate issuer: /CN=6d6f8256fac82aacb682ba216a83033b51456a52
Certificate serial: 019D326388E6B6BD2EAE2B672BFAB168FB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
Manifest number: D9
Signing time: Sat 28 Mar 2026 03:01:17 +0000
Manifest this update: Sat 28 Mar 2026 03:01:17 +0000
Manifest next update: Sun 29 Mar 2026 03:01:17 +0000
Files and hashes: 1: YLdG9gSP6tOA5nRVAr6Czesuu7c.roa (hash: Esw0AP/etP1/+NNzQ2J+2kPKUVRATKNpi71gEgTw88k=)
2: bW-CVvrIKqy2grohaoMDO1FFalI.crl (hash: ATS+wLwObkXaO4sfZ83esXdULDPlYmdBJV5Q/Hs/u4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:88:e6:b6:bd:2e:ae:2b:67:2b:fa:b1:68:fb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f8256fac82aacb682ba216a83033b51456a52
Validity
Not Before: Mar 28 03:01:17 2026 GMT
Not After : Mar 29 03:01:17 2026 GMT
Subject: CN=b267cc81bec5885b618a20187990db49e386efe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:8d:b7:fc:23:06:6d:a9:12:eb:65:dd:6e:
71:68:27:aa:fc:a9:c6:da:99:e3:d6:89:f2:40:0c:
dc:b3:48:55:43:9e:4c:60:01:cc:a6:d2:35:f5:d0:
df:25:eb:c3:2e:9e:33:d4:86:33:26:1e:c9:c8:89:
a7:d5:ee:53:52:7e:a7:d4:18:f8:f1:c2:8a:0b:43:
b5:9a:e4:e1:a2:10:57:00:e1:8d:89:8c:4f:47:ab:
10:d4:ef:42:eb:5a:69:b5:9b:c9:de:4f:7f:a6:4f:
98:29:71:48:87:4c:a4:8e:df:96:a2:9c:78:16:84:
35:fa:af:68:9b:55:d6:87:4e:c1:82:79:49:95:04:
2e:69:43:a9:22:73:ba:5a:c4:73:8f:01:62:e6:1b:
ff:52:fc:7b:b1:09:45:a2:38:0b:88:32:4e:ee:ee:
5d:c5:2d:9e:32:53:e7:e2:1d:60:99:99:d6:fe:83:
8c:cd:a8:16:07:55:7f:16:e8:7b:73:09:69:49:ef:
7d:c7:18:cc:6f:e8:a8:46:ab:bf:21:38:9d:81:bc:
76:dc:2c:91:a9:08:cd:96:c2:4f:05:89:f9:9d:d2:
f5:6f:bd:6a:af:11:79:67:10:19:1f:4d:d4:e3:a4:
74:be:ed:4d:cb:5a:6b:0c:78:f3:e2:7c:75:16:28:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:CC:81:BE:C5:88:5B:61:8A:20:18:79:90:DB:49:E3:86:EF:E9
X509v3 Authority Key Identifier:
keyid:6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7a:fc:5d:ea:01:f4:47:a1:73:f6:21:03:4a:16:7b:7d:da:
03:2d:dd:2b:a6:16:d6:43:0e:40:ae:3c:d8:37:9d:de:20:20:
2b:dc:6d:53:91:9b:89:df:db:ac:24:2d:b7:8e:e1:ec:31:0e:
6e:46:52:94:91:f5:34:15:f3:67:74:3c:d0:c5:62:9d:40:0d:
04:d4:44:29:83:88:d7:be:e6:d8:18:a7:15:e5:a8:25:b4:7e:
71:68:6a:0d:1a:55:29:00:fd:53:4b:47:86:93:fd:bb:00:e1:
08:42:f8:bd:0b:07:af:ac:51:91:37:21:72:59:a7:f6:fc:ca:
5a:67:60:5b:a5:50:c1:d2:27:0d:89:9b:c4:65:a5:29:5a:a8:
6f:ac:7e:73:e7:b2:c4:99:8b:53:75:d9:81:c0:07:6b:97:51:
29:c4:42:e9:18:3a:8d:1f:ee:5e:04:35:b8:ce:d5:59:fe:68:
f2:8f:b4:71:82:50:bd:13:53:40:c3:4c:67:f8:bd:2e:fb:59:
1b:38:d5:7c:bb:82:b5:d6:31:81:67:24:56:b4:0e:c5:c6:c4:
72:dd:6d:67:94:9a:9e:e3:de:b7:4d:f6:00:66:fe:7d:ed:59:
fe:65:f6:d7:ef:d8:21:dd:85:84:9e:af:9a:93:19:25:9e:cd:
3d:f1:8e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:55 2026 by rpki-client