Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File: B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier: gNLwt3HEwYE03rhk03UYiGomQuQ68H+4kTL+X+NTPzE=
Subject key identifier: 3D:8F:BD:01:FB:85:9A:6A:3C:50:A6:B4:65:6E:C4:B3:C0:29:23:0B
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer: /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial: 019CAB3440D0FCFBD9F2D7E6D6AAD3651E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: CIKyVuSfryn25KRqAa5gT4lxzzHxMbsJrni7rRor2hQ=)
2: dao3SWGJzmepZe0dSnkxYr7fl80.roa (hash: uVlf5UoF7g9PK+9JqyskFv6IV1mCuEzrCLxi9t1Xg1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:40:d0:fc:fb:d9:f2:d7:e6:d6:aa:d3:65:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=3d8fbd01fb859a6a3c50a6b4656ec4b3c029230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:e2:f0:74:18:a4:0e:05:58:32:4d:01:88:
bc:05:5a:4f:02:89:82:39:19:3a:b0:ab:75:33:63:
a4:4e:28:4c:5d:d9:49:38:87:8b:c5:82:bb:5b:65:
f6:2f:42:8b:77:91:93:25:e9:55:83:1d:92:a1:4a:
60:b8:ad:05:44:4e:53:11:92:95:20:45:65:a2:6f:
40:be:6c:8c:4d:90:cb:9f:76:f6:56:20:08:6d:1f:
b2:30:36:2a:aa:5b:80:63:15:81:d8:ee:45:cf:f0:
8b:75:ed:80:c2:6d:43:6c:9a:07:c5:59:2b:09:65:
73:2d:a3:7e:c4:58:dc:54:10:00:6f:c0:46:d2:de:
4b:4e:ec:f6:d0:78:e1:bb:77:62:b4:1b:a5:79:a0:
9c:9e:05:34:f9:56:0d:2d:f3:d3:54:45:f3:57:a7:
91:c2:cf:95:cf:ce:c0:de:f1:4e:11:97:b3:d7:5f:
af:cd:f6:35:68:56:6f:84:76:b5:70:b9:b2:89:c9:
91:19:95:1b:88:c4:ef:7a:26:75:1d:e7:6e:f1:ed:
d8:d9:dc:22:31:8d:38:e4:50:7f:39:db:38:3b:30:
f7:42:d4:84:9f:d0:5e:e1:8e:1c:c2:2c:ae:24:18:
1b:62:6b:7d:1b:1c:6d:13:21:76:80:fa:c3:3a:e1:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:BD:01:FB:85:9A:6A:3C:50:A6:B4:65:6E:C4:B3:C0:29:23:0B
X509v3 Authority Key Identifier:
keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:3f:69:a4:d4:4d:21:fa:1c:19:98:91:26:f8:3e:23:76:
63:ac:1a:fd:2c:67:a1:16:f8:bc:af:c1:ea:5a:b1:85:bf:8d:
54:3d:91:71:8c:b2:ce:b3:0d:c8:f5:b6:83:e6:d9:c5:49:8a:
a0:d4:3e:f6:13:02:ee:45:86:66:b8:ba:26:23:b8:2d:58:7e:
f2:ef:d5:cc:58:ec:1b:a0:03:a1:2c:28:74:09:9c:6b:d4:47:
5e:23:6b:f3:35:e8:d3:c8:3e:e9:2e:50:39:24:ea:e8:1c:f9:
53:be:20:91:7f:38:a1:2a:af:98:a6:d8:c9:b2:19:99:3a:1e:
5e:1c:4a:91:69:37:b3:cb:3b:df:d8:ec:92:16:43:d5:d8:3d:
45:46:5c:ba:2a:fa:4b:33:ca:d0:89:7f:30:77:ed:55:e2:cf:
01:46:3d:fa:dc:4c:eb:fa:03:4b:9d:e9:46:15:f5:5a:7c:2b:
2c:57:1f:a8:c2:96:c4:ba:4c:17:52:da:ca:54:8a:98:87:b2:
33:9d:ef:51:05:4d:7f:52:b7:01:65:ae:27:e0:3a:4a:37:df:
be:c5:9a:9a:52:a6:78:cd:92:ef:a7:8d:20:87:1d:01:28:35:
06:ce:69:b7:25:bf:22:5b:40:2f:6d:cd:ae:cf:9d:04:ff:3c:
a8:70:29:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEDQ/PvZ8tfm1qrTZR5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTU5NGQyNmI4OGU4NjkxZDFkODE4NjAyM2I2OWViZjE4
ZDFmZTkwHhcNMjYwMzAxMjEwMDU0WhcNMjYwMzAyMjEwMDU0WjAzMTEwLwYDVQQD
EygzZDhmYmQwMWZiODU5YTZhM2M1MGE2YjQ2NTZlYzRiM2MwMjkyMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Xi8HQYpA4FWDJNAYi8BVpPAomC
ORk6sKt1M2OkTihMXdlJOIeLxYK7W2X2L0KLd5GTJelVgx2SoUpguK0FRE5TEZKV
IEVlom9AvmyMTZDLn3b2ViAIbR+yMDYqqluAYxWB2O5Fz/CLde2Awm1DbJoHxVkr
CWVzLaN+xFjcVBAAb8BG0t5LTuz20Hjhu3ditBuleaCcngU0+VYNLfPTVEXzV6eR
ws+Vz87A3vFOEZez11+vzfY1aFZvhHa1cLmyicmRGZUbiMTveiZ1Hedu8e3Y2dwi
MY045FB/Ods4OzD3QtSEn9Be4Y4cwiyuJBgbYmt9GxxtEyF2gPrDOuGilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2PvQH7hZpqPFCmtGVuxLPAKSMLMB8GA1UdIwQY
MBaAFAellNJriOhpHR2BhgI7aevxjR/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2Qt
NGQ5NTYxZjhiOTY3LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2QtNGQ5NTYxZjhiOTY3
LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkH4/aaTU
TSH6HBmYkSb4PiN2Y6wa/SxnoRb4vK/B6lqxhb+NVD2RcYyyzrMNyPW2g+bZxUmK
oNQ+9hMC7kWGZri6JiO4LVh+8u/VzFjsG6ADoSwodAmca9RHXiNr8zXo08g+6S5Q
OSTq6Bz5U74gkX84oSqvmKbYybIZmToeXhxKkWk3s8s739jskhZD1dg9RUZcuir6
SzPK0Il/MHftVeLPAUY9+txM6/oDS53pRhX1WnwrLFcfqMKWxLpMF1LaylSKmIey
M53vUQVNf1K3AWWuJ+A6SjffvsWamlKmeM2S76eNIIcdASg1Bs5ptyW/IltAL23N
rs+dBP88qHApiA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:05 2026 by rpki-client