Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: 6rqbcmlIXt7vZlbqRJ7QcNJAYIC6H7qmtVohuAFqOzQ=
Subject key identifier: 5A:88:63:88:8B:86:DB:BC:DB:4F:16:12:53:ED:AC:CB:55:D3:6E:17
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 019DA4C17F8BE735B2ABC80157373E80577A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 1078
Signing time: Sun 19 Apr 2026 08:00:37 +0000
Manifest this update: Sun 19 Apr 2026 08:00:37 +0000
Manifest next update: Mon 20 Apr 2026 08:00:37 +0000
Files and hashes: 1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: w4Jv5AiPH4uDt10nGblUWr1CRjv8ybRAdmy9ktHqyq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:7f:8b:e7:35:b2:ab:c8:01:57:37:3e:80:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Apr 19 08:00:37 2026 GMT
Not After : Apr 20 08:00:37 2026 GMT
Subject: CN=5a8863888b86dbbcdb4f161253edaccb55d36e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:b9:36:9f:12:1d:fb:c2:33:35:42:50:26:
e9:3c:80:02:f4:10:9c:49:7c:07:f6:b6:90:a1:db:
86:7d:42:65:0d:79:f5:9c:ae:ff:2d:41:6d:e6:27:
3e:bd:3a:41:17:70:0f:81:a1:0a:1d:d0:da:90:6f:
df:4a:ee:ec:4c:78:4b:64:76:25:79:c0:b2:3a:1d:
09:db:74:05:60:3a:89:97:6d:5b:ee:bc:d2:5e:f3:
c8:86:b0:8e:fc:5a:e3:8b:1b:28:52:49:c0:07:71:
c6:0a:d6:3e:52:dc:13:02:db:90:89:3f:ef:bf:fd:
a0:95:99:97:22:1e:eb:15:70:0b:5a:7b:74:d0:6f:
be:01:ae:cd:90:0c:23:fa:28:35:2e:18:f4:e3:2f:
a0:8f:48:3e:01:28:a9:4e:68:7a:2c:4a:88:88:9d:
bf:94:4d:db:66:f4:29:35:6a:65:95:6a:2e:cd:b5:
cd:a3:6c:9c:14:03:08:3c:a1:2a:84:d6:5f:14:79:
c1:2d:f0:e7:08:36:d7:75:83:1c:6a:db:df:ce:9a:
bd:7d:ee:3f:fc:96:e9:5a:a8:3a:5e:ff:20:e8:ac:
40:15:2e:83:10:9a:96:b0:75:84:2e:67:20:2c:ac:
d8:52:a5:7a:0e:12:d4:6c:b6:f7:f5:4e:68:1c:99:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:63:88:8B:86:DB:BC:DB:4F:16:12:53:ED:AC:CB:55:D3:6E:17
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:a8:da:a1:24:9f:45:58:90:3d:74:4b:ac:99:74:8c:32:
5b:df:33:34:a5:0a:c8:78:3b:e6:d2:f5:f1:18:b9:1a:60:08:
7e:34:ad:95:43:da:4f:ea:ea:97:48:96:5a:d8:69:04:bb:06:
23:91:bd:a8:0a:f8:76:61:b9:8b:24:86:21:27:68:59:b0:b8:
2f:ef:1e:4f:d4:a5:00:92:0f:34:bf:1a:56:7f:8d:4b:30:e2:
3d:00:95:b8:12:7a:40:22:a0:de:3e:9f:4a:d8:cd:4a:59:54:
75:21:b5:96:4f:8d:a9:67:77:fa:c1:c7:2b:9e:54:30:d4:54:
aa:2f:9d:e3:cd:11:03:ee:32:a7:b8:b3:73:50:d3:23:fb:c5:
43:9d:fc:0d:d9:bc:c5:92:54:1f:f1:26:f2:6f:2b:ad:f9:86:
0e:a0:60:83:b0:b4:a8:bc:7b:dc:4f:00:f6:eb:26:43:11:14:
a7:6a:cf:bc:82:ba:99:28:77:6d:16:ee:42:04:72:22:31:54:
c7:98:6c:57:cc:30:96:22:92:a5:c3:00:87:54:ab:c6:43:b8:
ef:2f:0f:70:b8:52:54:cd:ce:73:d6:80:96:54:dc:bc:c8:49:
d4:00:6d:5a:da:d5:17:23:45:c5:98:02:13:80:d9:d3:b9:16:
8c:b3:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:01 2026 by rpki-client