Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: 1zcmz54wBrdtwRHOXStqsOSZO02A7sIw6V8J0GQz3MU=
Subject key identifier: 1A:99:C0:FE:6D:7E:52:CA:5E:5E:A9:0D:09:22:61:54:B5:7B:7D:79
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 019D9AE290D40F74488C9A0F4A0DB41EAEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:00:32 +0000
Manifest this update: Fri 17 Apr 2026 10:00:32 +0000
Manifest next update: Sat 18 Apr 2026 10:00:32 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: 19vTy7sGDfoCyKSslUjgfP3ISsE13xn48MpHHkcEvfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:90:d4:0f:74:48:8c:9a:0f:4a:0d:b4:1e:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Apr 17 10:00:32 2026 GMT
Not After : Apr 18 10:00:32 2026 GMT
Subject: CN=1a99c0fe6d7e52ca5e5ea90d09226154b57b7d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:17:1a:5a:62:c1:0a:f4:7e:d9:49:e0:27:
f8:17:47:ad:7c:0f:73:c7:c1:a7:65:69:a9:61:84:
cb:ed:82:4f:d2:c1:64:b1:41:4c:3c:29:76:26:ec:
cc:15:52:fc:9b:48:0e:4b:6c:31:c9:1c:63:3c:2a:
23:aa:83:56:dc:78:10:e4:e9:de:b1:08:2f:8e:de:
23:db:2b:f0:1a:b7:27:a8:f7:af:f9:cd:39:d6:83:
d7:75:02:05:6f:e7:d5:d4:7a:29:83:99:3b:22:25:
49:98:11:57:ec:a4:1f:87:69:72:91:b9:cf:38:3b:
d2:cf:69:c8:27:01:2a:4f:ca:f0:4a:5d:46:c6:0f:
56:eb:5a:81:e8:b6:fd:2f:b4:59:da:44:67:a7:21:
63:cf:78:23:42:8b:61:f3:35:27:36:70:a2:53:15:
1c:df:28:6e:ee:b1:e0:13:82:73:69:07:a8:e2:49:
6d:a4:5c:c9:f3:38:50:49:9f:7e:b4:a4:84:ef:26:
b6:1e:d3:72:4a:a3:03:17:f1:f0:31:5d:da:20:4b:
56:05:b4:88:de:0b:65:53:93:84:4f:e0:03:21:ad:
52:29:8b:32:93:a0:fb:32:0a:c6:49:86:79:b4:60:
11:51:91:88:65:fc:e0:2c:5e:a8:cc:ed:27:ff:0b:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:C0:FE:6D:7E:52:CA:5E:5E:A9:0D:09:22:61:54:B5:7B:7D:79
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1e:08:34:db:b6:20:17:d9:45:7d:a5:84:25:e7:af:73:37:
bf:a9:85:dc:8a:00:90:30:b0:d2:11:91:1f:d5:23:0b:b0:5c:
50:bc:de:2c:f5:00:2d:68:b1:39:bd:11:d8:92:0c:ba:dc:7d:
37:8b:05:f2:33:6c:f5:f1:26:9a:11:fa:ee:ef:da:41:36:16:
63:0b:a5:85:49:80:0c:5f:ac:eb:df:5e:cd:a5:a3:12:7d:40:
b3:66:77:35:5a:de:90:ef:a2:22:54:1e:d1:4e:7a:5a:71:bc:
d3:f3:ea:6e:52:8e:0c:c2:bd:ee:1c:55:87:11:ac:f2:58:c3:
e4:19:d5:cd:8d:c1:55:91:a6:50:b0:a9:48:67:fa:45:ed:d6:
59:d2:7b:70:02:b6:9a:f4:cc:26:61:9b:f7:fa:0a:12:c2:ef:
73:bb:e4:df:bf:d8:ab:e5:47:23:4e:dd:26:2c:be:37:24:2e:
9d:9f:38:ed:93:9f:48:44:60:d4:08:7d:ee:1b:2a:2f:13:9d:
92:d5:90:bd:15:1e:0d:81:37:27:fa:d3:d1:ff:3d:cf:8b:a9:
c5:d1:47:02:30:98:3d:20:e9:d9:c2:8b:28:ae:35:cc:56:73:
7c:e9:3a:e4:56:40:5d:b0:95:8e:1d:15:c7:d5:5d:9a:4d:dd:
77:b6:84:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:23 2026 by rpki-client