Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: 2+Airu41UY4LSO7LdE/o4q+YJK8vQ972Sr4+ENsRT/E=
Subject key identifier: 57:D4:24:51:B2:F4:BD:D6:62:09:EC:1C:7E:7D:C6:64:F0:0A:9E:8E
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019D2772D402106661D9DE498649ADFB149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 08E0
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: C9Uqio6ql22OPVmYYpskflQKnPxTEt0rhsn4P1mjDW4=)
3: sDDyHkEYz6b-uuUFfohEajuP1a4.asa (hash: NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d4:02:10:66:61:d9:de:49:86:49:ad:fb:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=57d42451b2f4bdd66209ec1c7e7dc664f00a9e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:43:ec:ee:78:26:28:59:ae:db:ad:21:5f:
a6:2e:15:6b:65:5b:95:d8:1b:b3:4d:d2:3a:46:cf:
a2:1f:48:07:c9:dc:38:47:0d:06:92:11:7c:e4:69:
21:6d:cb:da:3d:fd:7a:b6:c1:53:7f:82:af:4a:7f:
d2:7b:b7:05:31:0b:c3:f1:72:4d:54:23:8f:18:55:
39:dd:ee:ff:3f:0f:15:12:3d:b4:7e:3d:e3:c4:b1:
85:45:f6:56:4c:34:e1:fd:b1:e5:38:dc:31:ec:aa:
d4:2f:99:af:25:cd:93:30:4a:a4:7a:78:fc:4c:18:
22:56:f6:5d:cc:0c:f3:b9:eb:6d:29:64:dd:9c:60:
bc:d6:38:30:7c:15:dc:17:f7:ee:44:02:3b:c5:07:
55:4e:80:60:cc:54:2b:c1:dc:45:0b:85:07:45:a4:
be:9a:2e:a1:af:b9:bc:f1:ae:f8:5b:c7:7e:81:e4:
6c:1a:15:77:9f:dd:f0:8d:87:32:35:3c:85:c3:9d:
e4:b8:86:8d:2a:4f:1f:e2:a3:17:45:2f:80:83:9a:
af:a0:a6:e1:be:92:94:71:5b:59:ac:c5:2d:41:49:
af:13:e5:7e:cd:48:a7:30:e2:67:2d:68:a4:29:35:
fc:93:45:df:8c:a4:44:d8:9a:38:b3:0a:62:74:85:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:24:51:B2:F4:BD:D6:62:09:EC:1C:7E:7D:C6:64:F0:0A:9E:8E
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:86:d5:62:1c:dd:1d:15:cd:bc:c3:49:35:fa:b3:31:59:
7c:e9:52:e8:98:3a:f4:02:7a:d7:2b:62:96:82:ff:bf:44:46:
1d:89:39:43:9e:98:48:e2:42:ae:7c:c7:d6:f9:f3:2f:ac:0f:
cc:0e:a1:0c:8d:e7:65:57:f9:85:05:62:e6:36:6b:fa:32:06:
cc:45:d3:47:e4:f7:a5:4f:2e:67:ee:7f:8b:95:ec:28:00:69:
80:ce:91:c4:34:56:85:5d:ea:9c:d5:e3:fc:7c:55:27:f0:10:
20:8c:01:2f:42:aa:20:a8:86:ca:0b:4f:84:37:d7:a6:e7:cc:
8a:0f:ac:cb:26:d6:af:cf:80:34:ab:f5:9e:f4:29:76:a1:d7:
39:15:cd:24:00:e7:e9:5e:a9:84:7b:21:50:1e:ca:40:48:be:
58:8f:c4:6f:ed:33:93:24:ec:98:16:e2:d2:ce:63:9f:6b:a7:
45:ec:7d:9e:f7:a5:16:58:79:98:11:58:18:d7:38:5b:cc:53:
3f:5b:32:48:a3:9e:e6:ea:18:22:2e:72:b2:6e:a7:43:b7:01:
a8:e9:35:b3:e3:41:d9:26:00:c6:d3:40:ff:a0:c9:3e:45:68:
aa:40:94:15:b9:52:75:56:af:cb:e6:08:aa:69:8e:f0:1f:80:
89:d3:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:30 2026 by rpki-client