Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier: 0bZdQEPePvSMsEhYGl/EFO6eK6odpisT6r9YsVVP6Os=
Subject key identifier: 9C:92:18:B2:19:2C:1F:99:A4:13:FE:E0:D6:3D:6D:55:88:3C:44:B4
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 019CA97CED8AD8689293F66C5C47BE589D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number: 1789
Signing time: Sun 01 Mar 2026 13:01:02 +0000
Manifest this update: Sun 01 Mar 2026 13:01:02 +0000
Manifest next update: Mon 02 Mar 2026 13:01:02 +0000
Files and hashes: 1: Istcmzehq60di9EHB3679PMyybA.roa (hash: i4Nhr+MwqYPQIB1uAMbj/cB5SkDAFuxudlJ6P9wPBXU=)
2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: s7ttdNZ4asnyK90j6/+niaC5gls+q6UKepdG5eD0enI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ed:8a:d8:68:92:93:f6:6c:5c:47:be:58:9d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Mar 1 13:01:02 2026 GMT
Not After : Mar 2 13:01:02 2026 GMT
Subject: CN=9c9218b2192c1f99a413fee0d63d6d55883c44b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:fb:cc:08:e1:95:cf:b0:6d:23:2b:11:d5:
c7:8b:d8:73:a7:54:e7:ae:cb:99:99:05:46:e4:4d:
93:1f:0a:c5:2c:8b:6d:89:47:36:49:89:dc:b3:71:
b8:e6:32:f3:fd:9c:88:ed:a8:9c:05:8b:8a:4d:e8:
41:f5:c9:8f:81:cd:4e:23:e6:2b:a9:c9:bd:5b:de:
20:b9:08:b7:e1:52:70:8e:cb:b5:9f:ae:4f:18:40:
f6:a8:fd:7d:81:41:9b:cd:d1:a8:ba:c7:0a:be:24:
6d:b9:7b:01:39:d2:4b:1f:46:d2:59:02:fd:c7:a5:
26:ad:8e:54:59:5b:ae:37:2e:50:eb:3b:4c:aa:45:
a3:c7:41:22:3e:86:2a:de:7f:0e:35:18:30:52:67:
66:1e:99:4e:57:59:0f:bd:32:db:83:d3:12:20:ee:
97:3a:82:bb:38:c9:15:58:54:7a:22:93:e5:e9:10:
91:e0:9c:69:6d:63:ec:88:53:f6:5b:c5:3a:34:2c:
ce:3e:d0:18:eb:2e:47:a4:02:90:3d:f9:95:d0:80:
ff:56:74:3e:24:6f:70:dd:e3:40:43:ac:5c:2e:71:
6f:ad:5a:e1:2b:bc:5f:2f:29:6b:92:f1:25:fd:ca:
c6:1f:a8:06:84:67:33:95:f6:84:05:3f:a7:ff:fd:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:92:18:B2:19:2C:1F:99:A4:13:FE:E0:D6:3D:6D:55:88:3C:44:B4
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:6a:c5:fd:ff:c1:fa:98:03:ef:7e:64:e5:40:aa:a1:ad:
38:6a:b0:f8:24:79:7e:60:02:9d:4a:d6:b3:c4:c0:99:07:b0:
17:e2:02:d4:4c:b6:28:bc:d8:a9:7c:97:28:a4:91:40:3c:fb:
8b:e3:8d:73:ed:33:c6:75:31:72:dd:bc:8a:e2:f4:cf:73:38:
8e:1d:79:f4:7f:e0:a7:91:7e:29:2c:21:29:42:ae:0f:20:dd:
5e:c5:40:32:39:78:27:c7:99:60:f0:83:df:c6:0c:f5:50:86:
97:8f:42:c2:19:ec:e7:53:0e:86:c4:10:f1:68:0c:8e:38:e0:
90:4b:05:fd:7e:4b:93:d8:4f:50:08:04:9a:bf:4a:31:17:04:
8e:99:6c:da:66:ea:d8:54:06:6e:68:06:e2:96:22:87:b0:06:
df:99:35:ac:2c:8e:6f:b9:30:1b:be:a0:7d:64:6a:87:c5:7f:
a9:38:f4:dc:d3:f2:fa:41:46:95:72:cc:73:7f:c9:57:68:fe:
c7:a5:7c:25:98:01:ce:02:5b:51:b1:6f:ae:ac:5a:b0:ce:95:
e5:dc:b2:d6:9c:e7:67:38:13:c9:16:94:66:dd:10:e9:9a:b2:
dd:c5:37:7e:d4:69:77:f9:d9:27:b5:e4:57:e8:d0:9d:2d:06:
07:6f:ff:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfO2K2GiSk/ZsXEe+WJ10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTQ4ZTk2MTk3NDI2ZTRjNWVlYjQyM2UwZmQ5YzJlOTUy
YzQxNzcwHhcNMjYwMzAxMTMwMTAyWhcNMjYwMzAyMTMwMTAyWjAzMTEwLwYDVQQD
Eyg5YzkyMThiMjE5MmMxZjk5YTQxM2ZlZTBkNjNkNmQ1NTg4M2M0NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsib7zAjhlc+wbSMrEdXHi9hzp1Tn
rsuZmQVG5E2THwrFLIttiUc2SYncs3G45jLz/ZyI7aicBYuKTehB9cmPgc1OI+Yr
qcm9W94guQi34VJwjsu1n65PGED2qP19gUGbzdGouscKviRtuXsBOdJLH0bSWQL9
x6UmrY5UWVuuNy5Q6ztMqkWjx0EiPoYq3n8ONRgwUmdmHplOV1kPvTLbg9MSIO6X
OoK7OMkVWFR6IpPl6RCR4JxpbWPsiFP2W8U6NCzOPtAY6y5HpAKQPfmV0ID/VnQ+
JG9w3eNAQ6xcLnFvrVrhK7xfLylrkvEl/crGH6gGhGczlfaEBT+n//3t6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJySGLIZLB+ZpBP+4NY9bVWIPES0MB8GA1UdIwQY
MBaAFG+kjpYZdCbkxe60I+D9nC6VLEF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEt
NjgxODVmZGI5MDAzLzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEtNjgxODVmZGI5MDAz
LzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH1qxf3/
wfqYA+9+ZOVAqqGtOGqw+CR5fmACnUrWs8TAmQewF+IC1Ey2KLzYqXyXKKSRQDz7
i+ONc+0zxnUxct28iuL0z3M4jh159H/gp5F+KSwhKUKuDyDdXsVAMjl4J8eZYPCD
38YM9VCGl49Cwhns51MOhsQQ8WgMjjjgkEsF/X5Lk9hPUAgEmr9KMRcEjpls2mbq
2FQGbmgG4pYih7AG35k1rCyOb7kwG76gfWRqh8V/qTj03NPy+kFGlXLMc3/JV2j+
x6V8JZgBzgJbUbFvrqxasM6V5dyy1pznZzgTyRaUZt0Q6Zqy3cU3ftRpd/nZJ7Xk
V+jQnS0GB2//Cg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:25 2026 by rpki-client