Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: +fyFclNf6RW0H0eTkCex+l2+3LtOSMpYJrvqOCk8w3o=
Subject key identifier: A7:E5:29:5A:6D:F3:73:99:91:4B:06:E3:BA:8E:C1:D4:43:A2:53:E3
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 019CAEA32D9FD9E4A3F2C5610129854EA259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 14D9
Signing time: Mon 02 Mar 2026 13:00:55 +0000
Manifest this update: Mon 02 Mar 2026 13:00:55 +0000
Manifest next update: Tue 03 Mar 2026 13:00:55 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: ewmj2OodbdEaHSatJeHwJJ2dQeHmytO4HMSZBHp7nXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:2d:9f:d9:e4:a3:f2:c5:61:01:29:85:4e:a2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Mar 2 13:00:55 2026 GMT
Not After : Mar 3 13:00:55 2026 GMT
Subject: CN=a7e5295a6df37399914b06e3ba8ec1d443a253e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:11:df:33:d9:18:06:42:02:7a:80:2f:6b:
05:ef:65:ce:a8:cb:2d:b3:8a:93:d8:b6:89:c3:10:
c9:dc:86:bc:79:ba:a3:71:fe:48:6f:a0:c6:b0:41:
c3:69:98:8a:ce:85:ca:66:c7:6b:44:a0:f2:c8:8f:
a8:32:97:63:3c:75:70:ab:4e:10:71:c7:c4:90:3a:
21:ab:2f:3a:2c:8c:90:21:0f:ac:10:9a:d4:8c:fa:
d8:ea:aa:9a:33:61:59:b5:42:8d:59:93:cf:0e:40:
d6:d7:f3:c9:ec:a7:93:e8:42:b2:35:aa:04:b9:88:
c3:aa:bc:f3:d1:25:08:cd:57:07:b0:3b:9d:61:ec:
8c:43:e1:47:8f:a0:60:fa:3a:98:4c:aa:3d:a7:87:
de:f8:81:ec:79:67:66:87:dc:18:65:c6:f7:10:73:
96:d1:76:05:75:b7:9d:cb:2c:9a:5b:49:e6:95:3b:
51:02:84:4f:cd:07:1d:03:9e:bb:d5:f7:e4:52:e6:
1d:e2:d1:19:35:80:3d:7c:76:de:71:5b:80:dc:76:
c4:f1:3c:e5:f5:e2:f7:66:21:dc:3d:ea:52:06:74:
68:80:5f:54:f3:c0:35:9f:16:0c:52:4a:c3:8c:83:
b1:7f:ff:f3:d7:e3:f0:86:e8:1f:d9:d8:5a:b9:6e:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:29:5A:6D:F3:73:99:91:4B:06:E3:BA:8E:C1:D4:43:A2:53:E3
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:e8:73:b2:aa:5d:f5:a2:3e:bf:cf:5d:9e:22:58:4f:2e:
4c:d7:e7:68:e1:a6:78:ab:2e:51:10:ee:19:f2:c3:a6:18:a6:
53:29:56:d9:b8:36:3c:4e:c0:3d:aa:b3:ec:fd:ef:0b:b1:8b:
fa:26:e6:64:b5:30:3d:9c:38:48:b4:47:96:17:63:d4:dc:3d:
58:4a:69:e3:d9:0e:dc:90:26:c9:c8:87:d5:d5:a1:66:b1:ef:
e0:20:c1:8d:43:5d:7e:10:be:fd:13:e4:c6:2f:9c:e9:34:8a:
84:dd:ab:3c:04:b0:16:a0:63:52:ea:97:7e:fc:f1:8e:ba:0c:
52:8b:51:fd:9e:60:f6:a1:48:30:74:7b:81:dc:5c:8e:16:3b:
46:bf:39:b4:5d:f9:bd:3d:9d:ac:89:77:4d:a7:70:e0:24:a0:
ed:5a:75:da:34:50:3e:a4:1a:72:85:f8:6e:d5:55:71:a3:ac:
25:95:06:0d:ba:83:3d:2a:2c:d8:b3:3f:87:c5:a8:22:22:71:
c4:26:33:9b:f1:d2:50:dc:48:a7:be:4c:58:91:3f:dd:d7:42:
cb:6b:09:74:00:f4:09:89:54:f8:f0:36:ce:16:64:2b:b4:f7:
d3:9e:60:08:27:58:c9:79:6b:15:f5:9b:d9:99:ed:e3:5a:c8:
ab:20:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:32 2026 by rpki-client