Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: HaXftTXIyfQ2ECd/0X+hfvS0fjVyRFR0Sn1fDlT2V8Q=
Subject key identifier: 33:72:F8:CC:82:32:0A:73:DF:9C:0C:C9:E3:BF:1A:53:D7:BC:20:F1
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 019E1C4EA5FA00782D854B73153DD1F829E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 0371
Signing time: Tue 12 May 2026 13:09:36 +0000
Manifest this update: Tue 12 May 2026 13:09:36 +0000
Manifest next update: Wed 13 May 2026 13:09:36 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: 9KcLH-08xp9bTu3iU1LcZBGH8Qo.asa (hash: 3lMyXLFpUnbxFEEAepRspDKIQvKIBFYX/ZM2xRZKoIs=)
3: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: Jq3TWoo+ljMgznoV72azkrL4TXe3iwJbAcjvkckIVz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:4e:a5:fa:00:78:2d:85:4b:73:15:3d:d1:f8:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: May 12 13:09:36 2026 GMT
Not After : May 13 13:09:36 2026 GMT
Subject: CN=3372f8cc82320a73df9c0cc9e3bf1a53d7bc20f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:4d:aa:5d:ce:68:75:16:0c:5c:ab:cb:5c:
83:4c:30:f0:42:32:64:54:67:6b:ef:ec:44:2d:d8:
fd:e7:66:c0:03:43:f8:75:b3:40:3d:7e:dc:5e:ab:
ad:99:f0:e0:cd:cd:3b:b4:3d:4b:86:c2:d0:ae:f3:
c8:a8:49:d1:d2:a8:f5:a3:4c:cc:23:d5:9b:5c:52:
77:f2:94:8b:2f:b5:15:bf:a7:9f:f8:9b:e7:2a:d3:
d0:39:f2:62:cf:70:b1:ab:6f:36:dc:67:6f:80:67:
6f:17:be:30:7f:cf:1a:65:4e:01:9c:d7:6f:e3:3a:
4a:b3:78:bf:b3:01:5f:19:cf:46:d6:4f:e9:76:3f:
9c:66:75:45:d5:b9:0a:d4:ba:4e:7f:fb:7b:29:84:
f4:5c:54:4f:c9:bd:2d:41:c4:78:1e:6c:dd:1f:ea:
72:47:7b:e2:ae:cb:dc:8f:3d:1a:6c:0a:3a:6c:90:
10:6b:60:bf:ce:d8:b8:7a:62:4f:1b:73:59:86:59:
12:0f:8d:ca:39:71:99:8c:70:e1:f9:69:dd:03:3a:
5c:15:ea:2e:53:b3:5b:09:a2:d7:38:f8:84:26:ad:
8a:61:92:d3:8f:05:16:da:37:11:ce:7a:23:a4:65:
ce:fb:6d:f3:40:41:07:ba:f7:fe:7d:43:bf:c8:cd:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:F8:CC:82:32:0A:73:DF:9C:0C:C9:E3:BF:1A:53:D7:BC:20:F1
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:0a:7d:c5:aa:05:2c:22:9f:18:c8:57:29:2a:c0:75:15:
a3:a1:6f:a2:9a:51:53:00:c1:20:da:90:bb:6e:34:c7:c4:27:
02:cf:83:33:e8:bb:8c:8b:95:a6:89:93:41:d3:0b:49:e9:a6:
8c:7b:bb:f6:ba:5f:29:c6:01:64:d6:34:19:a8:ba:91:f9:0f:
7a:4e:d2:c8:eb:00:b8:27:0e:30:c6:31:2c:4e:1d:92:f0:eb:
53:a2:44:0f:8f:25:c5:42:5e:65:e7:78:14:f2:81:ba:7c:e6:
64:dd:fd:55:d0:1e:9b:05:fe:f2:37:db:0d:f8:c1:7f:ba:b1:
f0:a0:18:d3:d3:63:87:a7:0f:aa:35:f3:20:88:6d:d9:7d:2b:
8a:bc:e5:47:19:7e:14:d8:07:3f:38:7f:38:e8:22:65:a2:1a:
18:bf:bb:ec:50:85:ad:d1:42:d5:55:da:65:92:71:7d:58:8b:
7d:15:d3:6f:ce:d6:cf:25:a4:92:cb:66:40:34:b6:f1:ea:52:
62:ea:fa:13:49:6f:35:f1:4f:6a:24:b3:84:2f:dc:f4:73:60:
29:98:b6:8e:3c:f5:f9:10:df:a7:4a:eb:3b:52:4f:e3:e6:c7:
bb:66:d8:4b:6b:30:eb:b0:5b:31:69:f9:c6:64:ac:fd:4e:63:
e6:8b:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:15 2026 by rpki-client