Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: ntwPT/hxv3TcsWPYAaW0tE1VSmSUvC7ycn7aKjYfjI8=
Subject key identifier: EA:45:15:93:78:CD:4D:D1:D3:38:86:DE:55:7F:C3:FF:09:35:FD:67
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 019E1BD89F4EF57584823CDFA9BDE973796C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 17A2
Signing time: Tue 12 May 2026 11:00:41 +0000
Manifest this update: Tue 12 May 2026 11:00:41 +0000
Manifest next update: Wed 13 May 2026 11:00:41 +0000
Files and hashes: 1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: PYQiTaelwYZtVYIe72xPg/nWzyCnyGhUYHq/CXiXqck=)
3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:9f:4e:f5:75:84:82:3c:df:a9:bd:e9:73:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: May 12 11:00:41 2026 GMT
Not After : May 13 11:00:41 2026 GMT
Subject: CN=ea45159378cd4dd1d33886de557fc3ff0935fd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:71:84:61:64:42:63:87:b1:63:ee:91:52:
77:6f:ff:4e:72:c4:3e:34:0e:19:16:cd:a6:c8:84:
aa:3d:21:fd:62:37:d7:73:e0:98:64:bb:05:0c:1b:
69:56:a4:5d:7a:24:46:79:57:f3:eb:a4:6c:25:28:
06:0c:db:2e:3b:9e:a1:7a:48:bb:08:51:46:e1:7c:
04:ca:1e:e8:ba:7c:5a:cf:4d:6c:82:89:27:fe:8d:
63:26:a9:65:2d:dd:e6:28:7e:f2:f4:e2:43:ab:5c:
16:8a:16:b5:01:86:e8:44:aa:85:cf:d9:f1:b2:06:
3c:36:c9:8d:93:30:71:30:a8:dd:52:43:04:b9:53:
72:13:44:d2:63:93:f7:28:c9:de:cc:e6:df:95:16:
05:af:fa:b5:ac:fa:9d:9b:4e:e5:9a:6f:44:d6:35:
cb:86:5d:4f:55:5d:00:a5:1c:96:fd:b1:85:42:24:
92:65:16:d6:ad:4c:a9:d8:be:ef:ed:70:09:2e:ae:
e7:f3:19:dc:2f:30:bf:c9:15:83:2e:7d:60:d7:22:
b6:41:4f:b9:21:99:8f:86:19:93:59:63:95:67:40:
40:13:4c:e1:71:68:94:f7:19:dc:b8:ac:98:33:c0:
22:61:95:8e:7c:b3:c6:bc:c9:4e:37:06:22:d2:92:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:15:93:78:CD:4D:D1:D3:38:86:DE:55:7F:C3:FF:09:35:FD:67
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:02:c4:04:7b:ab:7e:52:02:b4:bf:e0:b0:41:12:df:a2:33:
f5:c6:34:b5:a1:90:30:df:e8:34:c4:ee:a8:a8:f2:e9:87:db:
38:f3:a8:c4:27:57:cb:70:0a:55:87:e7:65:98:7e:80:5b:a0:
ba:e0:75:79:71:5e:97:3e:37:d6:b3:a2:7e:c0:bc:35:80:e2:
38:16:ff:c7:eb:c4:f7:ec:94:26:df:ab:d0:f8:46:99:1d:a1:
a2:e7:60:08:dd:d9:84:00:e0:71:ba:de:58:29:8b:96:d1:d4:
77:ad:e7:fe:4a:73:a2:5d:56:55:44:56:15:dc:dc:c6:9c:d3:
69:3f:c9:bc:34:54:b7:d3:fc:19:66:ee:83:50:26:37:32:7e:
79:4f:65:5a:6f:81:f6:a9:be:97:04:49:0a:cf:0d:91:49:bb:
13:3d:d9:9c:c7:77:bb:84:ae:25:d3:4d:ec:a1:10:80:67:21:
fc:97:3f:01:a4:3c:c0:72:5d:bd:98:e1:5e:11:1f:24:f4:83:
37:bd:0e:fb:36:d5:b9:9b:d6:47:c8:09:8d:0d:c5:fd:4f:d9:
b7:d1:b2:05:1e:1f:da:7b:95:c5:93:e1:69:de:ad:e7:9a:f0:
f7:3c:5a:95:c3:9d:57:bd:66:31:46:49:00:b3:bc:63:76:af:
bc:f8:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:02 2026 by rpki-client