Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: iyStW+FvxViZUBFpfxr5eFJExvri6r1JV8eDjlaeg98=
Subject key identifier: DC:AE:9A:A3:DC:BD:51:C8:9A:E0:7F:81:34:EC:1F:3F:75:B9:49:68
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 019D288456AA985A9359276167DA00830C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 1724
Signing time: Thu 26 Mar 2026 05:00:54 +0000
Manifest this update: Thu 26 Mar 2026 05:00:54 +0000
Manifest next update: Fri 27 Mar 2026 05:00:54 +0000
Files and hashes: 1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: zTv6n5ibtR0ERemUoz/PJn0lFONSUjNa3rL27r+912g=)
3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:56:aa:98:5a:93:59:27:61:67:da:00:83:0c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Mar 26 05:00:54 2026 GMT
Not After : Mar 27 05:00:54 2026 GMT
Subject: CN=dcae9aa3dcbd51c89ae07f8134ec1f3f75b94968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:2a:42:01:b3:3a:9b:e3:99:5e:14:f1:7d:
cb:53:fa:db:65:55:f4:90:3b:76:79:96:d3:12:73:
18:24:63:98:fd:c1:c0:37:ff:2a:30:ba:6d:80:97:
67:b0:4b:04:73:18:4a:13:47:20:09:27:f1:1f:f6:
d4:ec:55:dc:7f:40:a4:04:dd:40:26:d2:23:25:e2:
f3:75:ac:af:36:88:f4:1d:71:9d:c1:dc:ea:1d:cc:
e3:34:66:2a:d0:41:5e:f9:df:45:6c:2d:1c:34:dd:
b0:4b:fb:d1:6e:2b:0d:c2:6a:ea:b6:de:89:15:78:
15:53:62:c2:7f:57:ae:ff:a3:aa:51:1e:b0:d6:28:
38:9f:6c:e2:92:96:bf:44:9a:da:da:10:d7:ea:24:
11:f4:50:ab:d8:82:db:7a:6b:91:2f:03:22:de:b8:
a7:90:4c:9e:2f:c7:cf:64:ba:80:fc:ee:3f:de:fa:
6c:03:0a:dd:c4:a6:8d:6c:bd:b9:f1:94:63:36:38:
ca:ad:58:0b:9c:77:5a:f1:c6:cb:0e:1e:49:90:be:
76:8d:2e:b3:7e:7a:2b:5d:51:9f:cd:35:de:ba:ee:
ac:e3:57:52:0c:be:c9:70:98:00:5e:82:40:89:09:
4c:5d:04:80:d0:c4:07:e0:95:da:2c:c9:37:ae:a6:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:9A:A3:DC:BD:51:C8:9A:E0:7F:81:34:EC:1F:3F:75:B9:49:68
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7c:83:fd:86:80:4f:ca:d5:ca:02:74:fd:30:aa:c5:bc:92:
a5:0f:bd:26:7d:81:3d:2d:3e:93:fc:b1:d8:78:84:78:10:54:
44:4c:c7:d5:df:e3:7f:35:7a:e0:7d:2c:8f:31:16:51:b9:21:
c6:14:8a:53:35:5e:e3:58:20:6d:a6:8b:e2:0b:47:2a:01:92:
bd:55:62:b5:e6:8d:31:40:fa:cf:34:cf:8a:38:6b:41:ac:33:
d1:c6:39:78:0d:61:05:8a:fa:97:20:90:6b:78:92:7b:e2:14:
75:de:9c:e2:59:06:25:ca:3e:f8:7a:69:d9:3b:67:36:fa:17:
34:f0:7a:b9:cb:bd:87:50:4f:88:6c:a5:3a:cc:12:19:2d:3f:
30:bd:0a:a3:e0:f7:9f:c9:46:88:6b:1f:89:d4:e6:ce:81:91:
ef:16:42:bc:ec:78:aa:6c:40:ed:7f:5c:69:8f:b2:10:d1:1e:
5d:fe:08:ff:03:d4:47:13:08:0d:60:e2:a0:20:ac:5e:7a:e1:
47:65:de:64:a5:27:4a:4a:f1:94:4c:5f:95:1a:ce:6d:9b:c6:
86:68:8e:07:15:48:a6:2b:c7:ce:3b:d2:16:a4:6a:a8:c6:d9:
9f:99:c0:12:5a:b2:cd:6f:6a:06:0a:e7:25:a2:bf:44:42:d6:
9d:15:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:56 2026 by rpki-client