Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: Tu/pGHDRHUaMZ123gQ6GcWYMgk5RJ0hVRILnT+QvlJY=
Subject key identifier: 84:6A:F5:11:83:CF:BE:19:AF:FE:DA:EC:E9:60:78:00:C6:B8:AB:20
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 019CA9B3B1FB88D64B7D21B545A03DB5E8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0FF6
Signing time: Sun 01 Mar 2026 14:00:51 +0000
Manifest this update: Sun 01 Mar 2026 14:00:51 +0000
Manifest next update: Mon 02 Mar 2026 14:00:51 +0000
Files and hashes: 1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: awc6jKXJn/Qj5ArU/Ns8S6tF/sZRVhGGaBa/OylNkw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:b1:fb:88:d6:4b:7d:21:b5:45:a0:3d:b5:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Mar 1 14:00:51 2026 GMT
Not After : Mar 2 14:00:51 2026 GMT
Subject: CN=846af51183cfbe19affedaece9607800c6b8ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:28:68:65:5d:0e:10:1b:c0:18:ed:8b:90:
56:dd:c4:88:18:48:9b:ad:3d:42:e0:62:75:b1:75:
24:68:69:65:8e:eb:87:eb:d2:80:02:94:68:d7:3c:
28:39:38:f3:ec:da:44:8f:7d:07:d3:81:69:52:8f:
af:19:25:76:b2:3a:f4:7b:d5:f4:b4:79:16:14:62:
c1:8e:26:72:8b:94:4e:8a:7c:21:8b:5f:39:6d:cc:
56:05:d3:a7:0c:4f:31:f9:bb:44:b1:b9:f3:fe:e4:
d7:a9:c4:52:d0:2d:4c:55:61:bf:e4:76:42:44:ef:
83:0c:95:c6:5a:2b:fe:74:08:34:86:e0:07:58:1c:
6a:51:d6:e1:67:3f:7a:fd:01:87:af:31:f6:0c:17:
cf:78:b1:5c:28:93:80:0d:b7:59:03:dd:4c:f6:d4:
5d:0a:64:a8:c0:2c:74:d3:29:b1:47:12:89:4f:66:
41:d3:af:f5:aa:67:81:37:4e:1a:de:0d:85:25:f3:
c9:c1:96:a5:37:fa:20:ef:8b:46:2d:9e:2d:c4:18:
65:b0:fc:41:ae:d8:4d:ab:7f:3a:64:e5:6c:f4:18:
fc:8f:01:20:21:af:15:38:09:71:d3:d6:02:2a:da:
3f:5b:a7:7c:ee:f4:b3:b4:59:d7:1f:43:91:a3:b8:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:F5:11:83:CF:BE:19:AF:FE:DA:EC:E9:60:78:00:C6:B8:AB:20
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a2:3e:c5:8a:0e:99:a4:77:4f:05:20:99:f8:02:7f:f0:a8:
cb:24:9a:8f:fa:f3:ab:0c:8d:ab:a2:29:ac:42:a1:d2:20:f0:
55:dc:db:02:e6:e3:f5:3a:75:7a:af:f9:0f:a8:67:ef:8c:40:
75:b9:04:7d:43:93:8e:27:04:53:9e:5f:62:5b:8c:92:aa:f3:
75:6e:c0:f9:d7:ba:30:31:d8:3f:63:eb:f7:63:f5:d7:e3:68:
48:01:2b:39:31:23:1f:2d:45:49:51:58:7b:e5:ae:9b:fd:3d:
fa:6a:19:94:75:1b:0f:5e:80:c2:6f:f6:25:93:80:fb:1b:fb:
c7:7f:77:62:b9:67:3c:d0:8c:02:1d:52:aa:a4:bb:11:f1:fc:
7c:ab:fc:ba:ef:b5:e7:fd:55:80:45:ce:d6:95:55:f7:5c:58:
ce:08:04:0b:49:73:97:a6:75:0a:e9:d9:83:b0:37:90:9b:af:
1f:44:35:75:93:57:c2:5e:23:3c:07:bd:7b:3f:61:14:0a:89:
34:b9:fc:51:d1:08:ac:4a:38:1f:10:1e:b1:b5:3f:69:3f:10:
28:97:ff:0f:0c:f6:ea:5a:82:52:1b:20:4a:a3:5e:0a:71:ad:
61:8f:e3:a0:b4:31:a7:e0:aa:12:c6:8d:bc:22:dd:12:d9:92:
f6:47:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:21 2026 by rpki-client