Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File: C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier: tyxAA5YNGWc5IdbGjAOoL9nrFp3yD7K0EawwK0r7yII=
Subject key identifier: B0:5D:7C:BE:A0:29:AA:EB:7E:5E:3C:04:F5:CA:31:C7:3D:5E:39:5B
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial: 019D2BBCB51C40B1C81DF07C1A3C05B51736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number: 0F31
Signing time: Thu 26 Mar 2026 20:01:20 +0000
Manifest this update: Thu 26 Mar 2026 20:01:20 +0000
Manifest next update: Fri 27 Mar 2026 20:01:20 +0000
Files and hashes: 1: 59tmjDQfU-ncRC8Varmb6pF2lz8.roa (hash: 3aX8v2tZST5i3tJwk6iAtRnox6a+RxiF+ijUKhsx+YE=)
2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: HBsI0blPG1syu2OaulLpiKVejtt0/+Ri9Fvb8RT/XDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:b5:1c:40:b1:c8:1d:f0:7c:1a:3c:05:b5:17:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Validity
Not Before: Mar 26 20:01:20 2026 GMT
Not After : Mar 27 20:01:20 2026 GMT
Subject: CN=b05d7cbea029aaeb7e5e3c04f5ca31c73d5e395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:db:c2:42:10:64:18:cf:9d:6e:bc:e3:f4:
3d:8b:58:94:f3:b0:8e:a9:28:d4:bd:d8:57:33:0d:
1e:5d:16:4d:f2:72:3d:ce:12:ab:99:35:51:89:39:
8e:01:98:5f:d3:d3:27:f4:c3:ff:ca:bf:d6:05:0d:
5f:9a:29:25:1d:e8:d2:93:89:95:02:8e:9c:17:f4:
b0:f7:a9:1a:8c:01:60:a8:12:6a:c3:cd:a9:1d:d3:
b7:5a:d4:af:59:f7:76:bf:5a:79:37:9c:21:fd:d9:
31:41:47:94:d5:c5:3b:85:2a:08:f4:90:c6:b4:24:
91:a0:1f:24:b1:cb:20:e3:fd:4f:b8:cd:de:7c:9c:
e6:59:9e:be:ab:b0:6e:c0:a3:10:1e:67:13:ea:1e:
e4:8f:19:d3:d6:f4:d3:88:fa:28:a7:16:7c:36:7b:
57:cf:0a:17:8f:17:cf:7f:3b:63:a4:f8:ba:2e:72:
7a:95:48:db:f0:dc:5e:83:c8:e2:ab:e5:32:7f:26:
f3:de:1e:28:58:4f:79:5b:19:73:7b:ca:7f:4a:47:
f9:8c:91:15:6d:2a:1a:b6:46:73:ac:8b:db:1f:cf:
5c:c3:9a:22:9f:e9:f1:d7:ca:60:0d:20:73:6e:99:
c6:94:33:8d:ea:11:06:af:8f:8a:db:94:5a:94:02:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:7C:BE:A0:29:AA:EB:7E:5E:3C:04:F5:CA:31:C7:3D:5E:39:5B
X509v3 Authority Key Identifier:
keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:3f:06:72:d7:d9:38:97:26:04:ca:48:0d:86:80:7d:97:
3d:2f:4a:08:b0:bd:e4:bc:5f:f8:2e:30:58:d8:1f:bd:49:f5:
56:a6:ef:4a:04:a5:f5:1f:eb:df:a1:77:5a:ce:64:3b:80:44:
6c:3e:d1:fe:8c:4a:83:37:8c:b0:6f:5a:c5:3f:91:9d:a8:ab:
ff:af:23:5e:47:8b:e0:5e:f5:e4:68:60:40:fb:26:6c:ff:41:
aa:c4:9a:3e:86:17:7e:45:99:a7:a6:ed:97:05:13:c2:3d:84:
b7:02:0e:61:bf:db:fd:b8:47:21:76:a5:e5:c8:a9:3b:6b:b7:
f9:21:a8:3f:7a:ce:5a:00:5a:4a:13:a1:fd:a0:b3:19:c4:11:
af:e4:a7:7c:25:01:c8:38:e0:04:6f:4a:20:aa:1a:a7:bc:e0:
4b:35:b2:37:ab:02:a0:7d:21:cb:2e:6d:8e:59:d8:a2:dd:e3:
4a:0a:6f:02:c3:60:91:88:d5:b0:16:ef:d6:0a:53:1d:ec:c8:
33:22:9e:8e:e0:84:3b:28:21:e8:50:17:09:e4:9a:10:1c:ea:
5e:e7:ad:1e:5b:98:b7:23:2d:18:fb:91:02:c3:f6:60:76:4b:
9c:ff:8b:00:ac:45:26:ee:bc:41:52:8c:b5:33:2b:42:18:19:
86:fc:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:56:22 2026 by rpki-client