Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: dYT5B2RxT1R57n12i6rLooIeMKIwoPDN3xZBHb3vDfY=
Subject key identifier: E6:D6:BD:81:AD:84:95:8A:9C:82:58:A9:9A:47:BD:7C:8E:DD:4C:DE
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 019D27E00486344B17DEC947F5969C284DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 02F2
Signing time: Thu 26 Mar 2026 02:01:25 +0000
Manifest this update: Thu 26 Mar 2026 02:01:25 +0000
Manifest next update: Fri 27 Mar 2026 02:01:25 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: iv69hwssxUv6Hd624o4X99W/suTsVjsPrC7HL+lGhY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:04:86:34:4b:17:de:c9:47:f5:96:9c:28:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Mar 26 02:01:25 2026 GMT
Not After : Mar 27 02:01:25 2026 GMT
Subject: CN=e6d6bd81ad84958a9c8258a99a47bd7c8edd4cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:52:2a:0b:1b:35:13:71:05:20:ff:2e:a4:
48:7f:3b:85:55:8c:f4:a5:88:93:a8:fd:a5:af:89:
61:93:0a:0e:b5:47:11:f1:60:64:b1:7d:bc:b3:b3:
60:65:dd:fd:88:83:8f:50:c5:1a:2f:de:2b:e1:34:
73:ec:d9:ac:49:70:af:99:80:5d:6b:e6:4d:fb:eb:
e7:e8:b5:03:96:5a:88:29:17:c4:49:07:a2:13:6b:
b2:43:40:2f:c0:ca:fa:b5:74:6a:f9:31:06:31:08:
95:9e:c4:41:c4:c9:65:40:f8:d7:e7:ab:26:19:e7:
94:47:19:95:85:de:47:c7:8d:c3:ae:0c:33:42:84:
b4:dd:f3:00:17:30:a4:f6:14:80:6a:c5:31:8d:58:
c6:ff:77:6e:90:d7:8f:54:f2:69:c4:63:06:61:33:
90:55:9c:f6:a2:d7:4b:1c:76:8f:08:de:9e:35:3e:
9e:b4:c9:2b:29:52:36:67:8b:09:36:f6:0c:d5:9c:
d5:ba:eb:2f:93:a7:ca:91:0e:f0:ef:95:c8:5a:0d:
c8:33:a3:de:e2:91:08:b0:03:54:1b:4e:c1:4a:f0:
b9:fd:6b:7b:d9:37:15:6b:1a:6e:a6:29:f3:b2:53:
ac:18:92:04:b7:34:2b:13:74:d5:03:2a:af:6f:f2:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:BD:81:AD:84:95:8A:9C:82:58:A9:9A:47:BD:7C:8E:DD:4C:DE
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:59:73:54:d6:11:29:0b:d0:18:f4:33:f2:08:9b:b5:97:83:
d7:b1:b9:12:e6:88:ec:02:c2:ef:c4:f5:3b:a0:76:96:74:4b:
44:68:e4:c5:a4:54:b1:c9:06:7d:9b:99:70:94:eb:17:74:35:
32:66:c8:5d:77:87:0f:b4:30:aa:c2:85:c7:16:3a:8b:7c:d0:
bc:b0:92:14:0b:e1:14:eb:b7:89:33:22:2c:09:c4:f8:98:2e:
15:8b:77:2d:91:24:e6:5c:ae:7b:7e:72:92:5e:2d:22:f5:61:
7f:1e:90:a8:7f:fa:35:40:5f:51:fa:0f:e2:88:c2:19:a9:9c:
f6:c9:58:a4:48:b4:e6:63:a5:61:37:59:06:9f:e8:6f:d3:c1:
47:7d:df:e4:f5:a0:53:e9:79:7b:f0:15:c3:26:e2:34:d1:83:
4f:01:f1:2e:b3:07:5e:39:55:fd:72:d5:62:57:06:d1:9c:7e:
ce:41:38:41:08:fd:f7:9f:04:00:cd:01:fa:9d:e0:2d:e1:ae:
a1:5c:ba:61:1b:f0:d7:50:6f:fa:d8:77:0e:d8:e4:54:34:96:
ad:01:b6:ac:7e:89:81:1b:a3:43:43:e2:a5:e6:cb:d6:66:57:
a9:5b:a0:e4:7e:8b:c4:fb:2c:7f:9c:91:fe:28:c6:a9:8f:04:
4a:3f:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:16 2026 by rpki-client