Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: LpvLH/5d/hM3OnziY+cTS+BEWn+AwFlqNESR5Cb29J8=
Subject key identifier: 52:77:97:B3:CE:DB:32:1A:30:25:06:16:41:E1:4F:91:C2:C3:A1:CB
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019D2628A91437DB9189252BD5ABEA3087B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0BF1
Signing time: Wed 25 Mar 2026 18:01:31 +0000
Manifest this update: Wed 25 Mar 2026 18:01:31 +0000
Manifest next update: Thu 26 Mar 2026 18:01:31 +0000
Files and hashes: 1: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (hash: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: 2wR/qHQ2EO4onJRNyUXxy/EsqAoH7l6F6kiwfG9gV8g=)
3: xWhq4pJqpBDCOAn9j2p-jZnUVxw.roa (hash: 1dUwvyE89fb3mgfozy7QJGPfLkBx30lg9K5/pQzltFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a9:14:37:db:91:89:25:2b:d5:ab:ea:30:87:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Mar 25 18:01:31 2026 GMT
Not After : Mar 26 18:01:31 2026 GMT
Subject: CN=527797b3cedb321a3025061641e14f91c2c3a1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:8d:b8:1e:61:89:b0:c3:08:20:d3:94:c3:
c9:50:8f:d8:06:44:30:14:2e:0d:25:1f:2e:b5:ea:
84:5b:ac:0c:fd:2f:cb:14:66:bd:76:0d:cf:1f:ef:
3d:e4:b2:5a:f2:ee:b1:71:2c:b4:9e:f0:f3:80:41:
49:df:27:52:63:57:db:0a:93:1a:00:b2:0b:53:c6:
68:76:31:f6:ea:5f:00:54:1d:3c:4c:f3:14:8b:b8:
fd:ef:74:6a:a6:d8:af:a2:b4:c4:7e:8e:ff:03:d2:
ed:d7:3b:6e:bb:22:8f:39:bc:6a:9f:b8:3f:c6:7e:
95:fd:42:00:15:02:fc:09:c8:33:99:54:5a:17:56:
0e:06:dc:f2:96:10:8f:1d:ab:20:45:57:62:49:2a:
44:03:76:71:51:d7:62:f0:45:3b:81:07:31:86:be:
b1:40:b7:43:ca:f6:10:07:39:0f:33:db:3f:ce:4a:
f9:99:fc:6f:fa:2b:0f:cc:12:81:b8:db:32:e3:b9:
86:b5:d2:c6:f6:3f:12:e3:d2:9a:16:cf:dd:be:b9:
bb:d8:08:5f:fa:47:e7:a7:52:58:cc:64:5e:64:af:
0b:82:69:aa:9e:6f:ea:50:b8:8b:35:e5:ec:8a:6b:
6e:7d:18:4e:46:fd:61:cd:80:78:41:7f:ad:23:ce:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:97:B3:CE:DB:32:1A:30:25:06:16:41:E1:4F:91:C2:C3:A1:CB
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:b0:44:be:ef:8b:0c:82:c0:22:9a:e4:f8:52:86:5e:6c:
30:3c:8f:be:83:c4:55:ce:bf:45:d1:ed:dc:5c:97:03:25:2e:
9c:d4:17:25:ee:cb:19:27:c0:55:21:71:c2:50:9c:c6:21:27:
f8:7e:6b:cf:cf:8a:67:30:f3:21:8c:57:ae:83:5c:86:22:9e:
c2:84:11:c2:cc:8f:4f:18:08:b9:3c:9e:d7:b7:69:e4:d9:21:
ae:c3:11:42:85:e4:ce:87:6a:02:58:11:49:7e:ea:00:02:97:
95:c7:b6:7b:81:0e:4f:72:96:7d:20:a4:fd:51:86:cd:f0:37:
ea:93:98:09:01:07:59:15:30:e4:ce:70:5b:32:ee:73:e3:8c:
87:27:94:12:bc:b9:df:16:13:e5:6c:6a:36:b3:0b:e3:7d:d0:
03:f2:a4:d8:25:62:ba:8e:91:ae:d4:d6:b2:d2:88:19:0b:0c:
87:1a:10:57:41:b8:3c:1e:06:a4:df:eb:7c:fb:74:bd:36:49:
fa:0c:f5:25:0b:a2:0a:65:fc:e5:36:02:43:f3:38:3b:49:90:
59:56:71:53:7d:06:b0:d6:6b:90:b2:e6:c1:c5:26:98:4a:99:
a5:c3:c7:c2:9d:de:a1:8f:6f:2f:aa:be:cb:42:c0:01:e8:39:
fe:f1:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:40 2026 by rpki-client