Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: 3fnbdG/JymJe1E/BaaBcBQYBvjIYNV0ZdBh2bNFqtGk=
Subject key identifier: D5:6A:62:EE:74:3A:D1:40:A6:BA:06:90:10:42:35:1A:CD:F7:0B:7D
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 019CA97D389D74DCED237E5C4F0BBDE5A3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 13:01:21 +0000
Manifest this update: Sun 01 Mar 2026 13:01:21 +0000
Manifest next update: Mon 02 Mar 2026 13:01:21 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: rz8ioR6ynWpnS6RPZ4aeo1SW44jk4YKFqdtsmyQSm94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:38:9d:74:dc:ed:23:7e:5c:4f:0b:bd:e5:a3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Mar 1 13:01:21 2026 GMT
Not After : Mar 2 13:01:21 2026 GMT
Subject: CN=d56a62ee743ad140a6ba06901042351acdf70b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:6f:07:b9:11:3a:d4:16:ef:f7:61:b8:5f:
f9:c3:2a:fa:26:a4:f6:ba:bf:ae:ab:1e:d8:76:25:
56:a9:25:07:ab:09:03:74:14:98:00:9c:7e:bc:00:
11:5e:71:e3:b7:9f:87:ca:f2:04:e8:af:8d:da:f3:
14:bb:8d:4e:07:23:99:bf:f9:c6:be:94:37:4b:5a:
7a:ca:d1:b1:eb:3d:72:77:c2:98:30:5f:e8:ee:68:
21:d9:04:b9:02:d2:35:1e:2c:a3:23:1d:0a:a3:f2:
cc:38:de:c5:2b:27:9c:c1:f9:ff:ca:ff:c8:91:16:
55:40:55:50:da:15:a9:a3:e1:35:f4:e4:c8:d0:e5:
7c:2f:c9:89:03:d3:5b:34:3a:d7:85:50:f7:10:30:
9d:d8:e4:32:fb:60:32:a6:2e:7a:b6:d3:f9:00:6f:
49:4c:c5:70:7b:81:b4:b6:cb:6b:ed:b2:e7:1c:9a:
cd:85:65:1e:d7:fd:bf:3d:93:9d:4d:3b:12:3e:0f:
b9:85:73:55:8f:06:91:68:64:34:84:d1:02:89:23:
09:7a:c3:40:95:a5:8b:63:fb:eb:2d:bc:5d:97:c3:
d0:d7:d8:26:8e:d0:11:86:11:09:78:93:5e:d3:05:
bd:39:f6:f5:05:2a:4e:bb:6a:a7:3f:28:7b:2f:78:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:62:EE:74:3A:D1:40:A6:BA:06:90:10:42:35:1A:CD:F7:0B:7D
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:98:bd:1e:fe:8f:4d:dd:b3:cc:37:4c:1f:ec:9f:cf:73:
74:8d:ad:6e:1d:f2:69:d9:c3:ea:87:d9:11:42:58:02:01:83:
7d:34:22:a8:c8:11:3e:5c:14:4b:e9:f8:11:99:d6:87:eb:1a:
e2:d2:24:ce:e0:ee:c7:00:44:9d:23:54:e6:56:a2:a4:0c:a0:
b9:7e:e3:aa:d6:ce:7b:af:28:00:7c:16:85:46:d1:52:ab:20:
e1:13:22:37:ce:f8:f0:1e:9f:a0:ea:d4:fe:69:a6:5f:b7:b7:
a7:02:2b:b4:cf:03:de:b1:6b:95:ef:c6:af:13:1a:33:69:d0:
88:e4:f3:7e:a9:6f:ee:1d:90:21:fe:00:11:e4:36:9c:7a:9a:
ed:6e:af:f1:4f:d4:ee:e6:43:2f:7d:4b:37:b4:f6:94:23:e2:
78:69:e8:77:19:65:e6:00:bf:cb:cf:22:78:98:69:f2:cf:6e:
ef:0f:b5:e1:c1:8d:a8:c4:25:ec:94:b6:a2:2c:da:08:a8:70:
e7:71:94:28:cd:13:3f:57:64:d9:49:f7:4b:a7:36:d5:6b:e5:
8c:4e:61:f6:9a:b6:7b:b9:f9:cc:b9:14:d4:96:7a:26:6d:bb:
d8:7b:70:ef:be:13:3a:21:67:59:27:41:87:3a:7a:36:bd:34:
cf:ff:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:56 2026 by rpki-client