Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: 0MBKukzFzw9v8g0DMGkBFVU0b3ahFKxkxnsLwkKA7iI=
Subject key identifier: C0:05:8E:AF:16:7B:B8:71:F4:D2:BB:72:C4:AD:95:41:80:D6:87:F8
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 019D26963FC9B05423520A7EECE81E0D1BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: zyVYx7MuFZM88pwRPIEHQ0kCSVpuGVhXiGOdyrKhEKk=)
2: lFmZ1r-ocL0yoqMbggjpkGrPea8.roa (hash: 6qzbhdeSH++M2Vfj/8glXhLo1pCgKlmjHvesyWCTjDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3f:c9:b0:54:23:52:0a:7e:ec:e8:1e:0d:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=c0058eaf167bb871f4d2bb72c4ad954180d687f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:76:42:9b:ac:0c:44:28:ef:a4:03:16:2a:
91:c1:b3:dd:fa:02:84:4b:2e:68:ea:a6:c2:1a:b1:
7f:02:6d:e7:33:54:e2:cb:6b:e9:a9:27:11:0d:b9:
bb:f7:6d:b3:06:c9:82:0b:5d:d1:b4:1a:b9:e0:9b:
99:ed:4d:b0:dc:51:07:16:64:bb:d2:aa:22:0d:11:
ec:23:8a:28:df:5c:74:6e:37:8c:0e:b1:fa:fb:bb:
3a:b9:9b:c9:1e:e7:f4:8b:c1:7b:fc:01:ae:9b:c0:
85:c3:86:c0:4d:5c:42:3f:69:f4:f5:76:2e:26:5d:
4d:22:d2:32:bb:7a:aa:69:83:8c:11:4d:fa:b8:8f:
a2:da:bd:00:52:86:09:64:62:0c:ed:9f:dd:26:41:
c6:ad:c0:fc:13:5b:07:b9:c6:9e:8c:db:ee:fc:1a:
9f:63:1f:43:79:93:f5:38:f9:6b:33:49:26:82:92:
d9:53:de:02:81:40:6b:46:a7:42:62:9d:a5:46:84:
3c:2e:65:95:71:6b:31:8c:a1:b6:63:8a:70:0f:a7:
09:7f:a1:1c:8f:20:8a:94:52:47:10:2c:1d:df:f4:
db:e6:15:4b:88:23:c6:81:21:e7:17:01:fe:9c:79:
93:ae:0d:46:00:63:4f:10:1d:f7:d0:8c:0a:b8:90:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:8E:AF:16:7B:B8:71:F4:D2:BB:72:C4:AD:95:41:80:D6:87:F8
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:95:a0:68:26:6b:b7:3f:53:ec:b0:a2:e2:09:3d:1d:c6:
09:16:30:0c:ac:eb:69:dc:e0:e8:59:05:5b:8b:fe:53:9e:ef:
06:23:3f:27:ef:8b:a7:5b:a9:22:b6:76:71:e8:85:29:a4:a1:
f1:fb:91:40:42:da:a8:58:bd:a1:78:00:91:36:d5:19:0d:29:
c8:a8:16:a0:be:33:21:e2:f5:f1:a9:1a:15:98:65:a3:ed:9e:
eb:1d:a6:0b:0e:2a:ac:33:1a:1d:b3:30:37:ce:1f:b6:60:61:
7d:3b:67:20:33:0a:33:98:cb:aa:e1:43:7f:04:71:36:05:d6:
9b:31:a3:95:04:9c:61:2c:4f:82:93:b4:01:49:0a:fe:a7:d1:
e8:d4:35:d4:d3:08:c6:59:b8:bd:f9:92:cf:4c:e6:fe:d6:34:
ac:81:2b:e5:61:be:cd:fb:48:f1:3e:de:cd:69:a1:29:00:64:
1f:70:b6:7e:73:e0:78:dd:0a:17:aa:2e:80:d6:7d:a9:a8:33:
27:02:2f:01:f1:3d:09:de:03:c0:22:7b:8d:a8:cc:8b:9e:79:
bb:02:38:c0:1d:c4:ed:02:39:ae:20:21:a6:bb:f0:71:0c:54:
cb:e0:e2:77:09:fc:06:17:15:a8:84:b2:bd:7b:14:93:29:45:
9b:9a:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:10 2026 by rpki-client