Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: PeOVlqB1EVQiBEUhwipvJfM3ctxyt7IE8J28V/gKgP8=
Subject key identifier: 81:1A:DD:A4:C2:85:4B:EA:C7:5A:76:A7:04:94:25:DA:1A:03:D4:EE
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 019D27A9238120C8355890204F7D3EBF4B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 091D
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: 1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa (hash: F/RcT6jJFR9ljteJFuF0791elb6u75/JCwlm7zNLBlI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: 09oDaqyRlNQeFeGdHnQOKS5D0mei7mMT5CrguGETu8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:23:81:20:c8:35:58:90:20:4f:7d:3e:bf:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=811adda4c2854beac75a76a7049425da1a03d4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:a6:21:be:f5:53:57:82:9c:63:be:aa:31:
d4:e2:30:6a:34:c7:55:af:16:b7:4a:c2:e1:5c:8f:
5d:bd:f4:37:5a:de:c7:34:2a:27:10:c0:f9:78:17:
15:ba:1b:5a:4c:86:78:74:c3:51:a7:58:3f:6f:c6:
06:8b:5d:cc:bd:76:6f:67:95:2b:36:b8:03:26:1e:
22:67:e9:4c:c3:fb:ea:31:1a:8a:c2:aa:d9:81:a3:
d2:99:af:75:15:7d:49:17:18:9f:48:9d:ee:1d:ef:
64:39:c1:cc:7f:37:a3:0b:26:ae:01:c4:d1:a9:70:
ad:07:c2:ff:4a:3d:b6:18:c7:8d:4b:9a:00:67:da:
b6:c5:5d:ab:7d:58:58:1a:03:5a:99:b6:7e:8f:4b:
1d:a0:7e:ac:66:a9:ed:c8:fb:52:5d:f4:7b:69:28:
51:e2:64:72:5a:cc:e7:49:8d:72:a1:13:fe:dc:a4:
62:57:fe:e0:86:a0:11:0f:48:d3:99:cf:ad:a2:64:
1c:9f:98:10:8b:bc:05:95:f2:bb:04:37:02:bb:d8:
68:5c:cd:19:e3:c6:10:4e:4a:74:26:94:10:47:27:
a6:77:10:6d:82:48:f8:be:d3:6d:56:bf:84:03:a0:
5e:51:16:50:e0:8e:31:70:3b:ec:72:60:c9:e9:3a:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:DD:A4:C2:85:4B:EA:C7:5A:76:A7:04:94:25:DA:1A:03:D4:EE
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ef:e7:52:3e:d1:97:bb:8e:df:82:03:5a:a6:da:1b:d1:0b:
21:6e:c7:3d:8f:d9:9a:18:38:3d:85:ab:48:51:8f:12:7a:25:
10:92:7a:4c:cb:2b:ac:d3:89:35:4f:b0:12:39:5e:7b:51:ab:
3c:8b:9f:99:9b:12:a3:55:52:6f:ca:7d:b7:d6:fb:c0:f7:41:
18:25:22:ea:14:28:9e:ac:f4:96:af:a4:a2:8e:a9:2e:b3:2e:
51:ca:8e:d6:b2:2c:7d:91:2c:64:9f:e1:8f:19:1b:1e:d8:4a:
a7:95:65:b9:cf:03:f5:04:23:94:db:ac:a4:81:14:e2:25:1a:
79:1e:44:ef:21:2a:fb:7d:b8:0a:07:02:d5:a4:53:0f:06:63:
2d:45:d1:19:32:a3:19:eb:f4:1e:c7:9a:19:0a:66:3b:3a:d1:
5d:c9:37:8f:83:a9:bb:47:7b:2b:bd:08:b5:77:8e:51:e9:56:
4d:cc:44:37:65:da:27:2f:ad:c6:47:cc:39:1e:a3:80:35:e3:
5d:94:4c:04:8a:1d:b1:08:32:24:34:10:37:ac:d0:f9:e7:d5:
0e:47:a3:9a:39:33:4b:b5:9d:92:56:66:ef:11:4d:3e:19:33:
5a:68:08:8d:58:90:21:ca:ce:99:de:3a:76:3e:17:dc:0e:78:
f6:5c:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:47 2026 by rpki-client