Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: 4qqV6Oy4J3FujKBR/wTSVwAztKwKTHN9xVwPERJc0jI=
Subject key identifier: E4:4A:44:02:20:EA:34:60:55:4B:FB:53:E4:58:63:5F:C5:48:F4:F4
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 01A0C6332CED60DBC354BC0ACD041DF173D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 1217
Signing time: Mon 21 Sep 2026 23:00:37 +0000
Manifest this update: Mon 21 Sep 2026 23:00:37 +0000
Manifest next update: Tue 22 Sep 2026 23:00:37 +0000
Files and hashes: 1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: 43phP7G1ZhtZ4BV9xZuPXr1eFIs6+BsRqVcmZjgV5Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:2c:ed:60:db:c3:54:bc:0a:cd:04:1d:f1:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Sep 21 23:00:37 2026 GMT
Not After : Sep 22 23:00:37 2026 GMT
Subject: CN=e44a440220ea3460554bfb53e458635fc548f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:81:e8:1d:b2:62:22:29:a6:8d:0b:12:39:
64:c9:36:c6:d5:22:84:e5:fb:a3:82:a7:8b:4f:4e:
14:0f:53:f0:69:09:6b:1e:ce:64:6a:f0:84:4c:90:
67:d3:53:fb:de:00:e0:dd:67:c6:b9:4c:68:1f:16:
f3:86:c5:5c:ab:01:14:c5:bc:f5:14:c9:16:0e:c0:
94:44:72:57:37:78:61:4e:47:3d:93:c1:b6:1c:e2:
01:5c:11:40:95:8f:b8:70:99:6b:c5:84:df:65:be:
f0:16:a4:d4:3e:92:1a:bd:fa:3c:a3:14:38:c8:eb:
e4:77:28:55:b5:35:32:ed:b7:83:f1:37:3d:4b:51:
70:24:9e:63:be:e9:10:f4:2d:1b:53:85:ab:9c:b9:
cb:d5:f3:69:c4:0a:d4:02:dc:7c:60:3c:c3:1a:50:
63:13:9c:25:2f:62:61:97:aa:46:72:0d:66:20:93:
84:4b:49:08:9b:b2:c3:51:30:14:ea:43:c0:63:86:
d1:20:ac:ba:2a:a1:bf:9f:70:eb:4c:01:6a:a4:a1:
a3:45:3c:cd:6f:35:d1:91:91:ce:13:ca:03:10:4d:
a6:d6:43:4b:2b:9d:6a:26:4b:4d:6a:3a:9a:85:f0:
9f:40:08:af:5d:19:78:1a:15:b6:d3:17:3b:65:4b:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:44:02:20:EA:34:60:55:4B:FB:53:E4:58:63:5F:C5:48:F4:F4
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:de:99:1c:1e:6b:e5:3e:4e:27:c2:3c:6a:71:10:49:98:
44:fa:27:d2:9b:ae:a0:09:89:e0:54:6d:8b:01:f4:07:8e:ef:
9b:e4:aa:e7:c1:94:70:e9:55:ad:76:73:9c:d7:a8:9b:1c:f2:
36:c4:90:6f:d9:ac:81:ea:a3:2c:9c:c0:70:85:b0:c2:92:1d:
89:05:fb:fe:20:5e:27:ce:cb:d2:a4:34:b4:81:1c:fb:e6:ae:
c2:42:23:86:df:b1:e8:23:89:a9:7c:2c:bd:cd:6c:4e:c5:9d:
d8:1e:e1:8c:dd:8a:a4:78:ac:96:04:b0:72:8d:0c:65:25:21:
1f:d3:77:4b:d2:02:dc:60:92:f7:ca:2d:86:65:24:a9:fb:f3:
9c:a8:dd:69:96:a1:ae:44:6e:07:39:f9:7e:66:41:b0:3a:03:
da:d1:dd:9d:59:50:7b:29:31:04:30:04:99:b1:3c:38:9d:63:
d4:75:89:0f:a8:5d:9e:4b:09:43:44:ee:38:5b:fc:11:ef:34:
53:d0:95:a8:38:86:24:85:0c:f3:9e:a4:1a:74:f4:16:16:0b:
95:a9:d4:f7:0e:fb:bf:87:49:9a:a2:67:43:a2:96:38:fc:8b:
08:c2:50:79:c7:ed:84:a5:77:7b:e9:84:bb:88:85:9c:6e:7d:
34:41:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:08 2026 by rpki-client