Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: t0sLoohPNIjAQwTRyQ/86OQJfxnMWmX2tCKb8m2iOoc=
Subject key identifier: 09:B6:93:11:18:12:74:8B:73:C1:F7:44:75:6D:45:0F:5F:9F:69:75
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A0CD10D697DE22217B6B97074C416BDFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 07:00:27 +0000
Manifest this update: Wed 23 Sep 2026 07:00:27 +0000
Manifest next update: Thu 24 Sep 2026 07:00:27 +0000
Files and hashes: 1: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: PbsEEJltHgb/YyGxcgsgo2/9Yyqm2DnTbAO5m6u4sdk=)
2: cbpB_BWVX0093UscZD9akdDjfGg.roa (hash: f9SWTvOyecl2Rxf5tZkTEwdysJb0MNjoCC6KFs64dao=)
3: rftVMmM8QluKijYHrq9Xay-ay70.roa (hash: VzStWFalfQL1Ifq2BA/wF9rouh61HKNLIGoSHUugdA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:d6:97:de:22:21:7b:6b:97:07:4c:41:6b:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Sep 23 07:00:27 2026 GMT
Not After : Sep 24 07:00:27 2026 GMT
Subject: CN=09b693111812748b73c1f744756d450f5f9f6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:0b:b2:21:2b:13:22:37:16:56:11:1b:ad:
dc:c1:49:32:76:26:fd:90:1f:55:7b:99:97:5c:f6:
6c:bb:9f:31:7a:f6:b3:f3:b2:e4:52:e8:c0:fb:55:
a4:61:ff:33:d3:a2:b9:d1:53:60:55:c1:17:b7:bc:
d1:6c:4d:99:a3:44:cb:9f:46:23:3a:86:f0:63:15:
28:71:c0:eb:20:39:27:82:73:63:d2:5e:c1:8c:8a:
11:1a:d5:e6:e7:4e:d2:df:6e:a9:6c:cd:ba:61:e8:
30:bf:68:13:7a:cf:80:0c:71:aa:2a:22:37:ab:04:
7b:78:90:cf:65:7b:dc:04:ce:e5:e5:27:ad:a1:61:
b2:c3:fb:ae:f0:5a:31:43:b6:43:c5:c1:55:4f:3d:
1c:2c:3f:ae:da:9b:c1:39:aa:74:33:4a:76:3e:94:
06:21:ed:1e:2c:04:bd:9c:33:6d:53:c0:12:a2:eb:
d1:51:5f:dc:08:9e:3d:fd:9e:82:ef:ca:27:4a:22:
82:99:76:ad:8f:23:be:14:07:6b:4e:83:29:05:d0:
7f:31:ff:db:41:43:19:3b:4f:44:25:bf:21:cc:d2:
4d:a5:67:ba:63:47:4d:5d:05:f2:84:72:55:b8:53:
7c:b5:38:f4:53:e0:57:78:19:2c:c6:f1:7b:3e:dd:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:93:11:18:12:74:8B:73:C1:F7:44:75:6D:45:0F:5F:9F:69:75
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4c:16:da:ac:13:25:c1:f4:fb:1f:44:d2:4b:46:e8:d2:4f:
be:d0:8e:19:66:c6:b5:27:09:2e:cc:8b:b2:0c:73:8e:6a:f0:
6c:ee:27:78:cd:dd:c1:f2:8d:0a:d0:da:fa:72:ff:e6:66:ad:
e6:33:7d:ca:9b:e7:83:62:8c:b1:a2:70:f8:d1:aa:f9:49:ec:
8d:48:4e:25:67:3b:8d:31:9c:f9:99:dd:46:23:13:3c:4b:33:
2a:c2:13:2b:4a:81:64:9c:3f:53:c0:15:30:ef:5d:07:15:21:
98:f8:9a:88:70:ba:63:a6:28:30:e2:25:9f:3d:7f:11:39:15:
1a:d4:ac:47:fa:bb:7e:1b:3a:8d:80:2f:cc:4e:bc:b5:9a:1f:
b9:99:79:a3:70:43:53:f7:4a:a1:d5:c5:76:83:90:40:3f:f9:
9c:b9:9b:11:f1:e1:9c:df:45:35:f8:71:52:b0:53:bb:de:3b:
5b:b6:da:dd:56:ad:d8:b9:ee:09:cb:64:55:e7:0d:5e:02:bc:
d3:fc:7f:e3:97:49:8e:d1:53:7a:9a:00:bd:4f:3a:2c:aa:3f:
4a:7b:c1:11:1a:9f:1e:94:fe:2d:8d:55:57:bb:0a:33:09:3f:
f4:0a:b5:d5:69:57:32:18:d8:6a:bb:5f:eb:23:fb:21:aa:8a:
ab:55:cd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNENaX3iIhe2uXB0xBa9/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw
YjI1OTgwHhcNMjYwOTIzMDcwMDI3WhcNMjYwOTI0MDcwMDI3WjAzMTEwLwYDVQQD
EygwOWI2OTMxMTE4MTI3NDhiNzNjMWY3NDQ3NTZkNDUwZjVmOWY2OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vELsiErEyI3FlYRG63cwUkydib9
kB9Ve5mXXPZsu58xevaz87LkUujA+1WkYf8z06K50VNgVcEXt7zRbE2Zo0TLn0Yj
OobwYxUoccDrIDkngnNj0l7BjIoRGtXm507S326pbM26Yegwv2gTes+ADHGqKiI3
qwR7eJDPZXvcBM7l5SetoWGyw/uu8FoxQ7ZDxcFVTz0cLD+u2pvBOap0M0p2PpQG
Ie0eLAS9nDNtU8ASouvRUV/cCJ49/Z6C78onSiKCmXatjyO+FAdrToMpBdB/Mf/b
QUMZO09EJb8hzNJNpWe6Y0dNXQXyhHJVuFN8tTj0U+BXeBksxvF7Pt38FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm2kxEYEnSLc8H3RHVtRQ9fn2l1MB8GA1UdIwQY
MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt
NzU2ZjNjYzNlYzMzLzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz
LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0wW2qwT
JcH0+x9E0ktG6NJPvtCOGWbGtScJLsyLsgxzjmrwbO4neM3dwfKNCtDa+nL/5mat
5jN9ypvng2KMsaJw+NGq+UnsjUhOJWc7jTGc+ZndRiMTPEszKsITK0qBZJw/U8AV
MO9dBxUhmPiaiHC6Y6YoMOIlnz1/ETkVGtSsR/q7fhs6jYAvzE68tZofuZl5o3BD
U/dKodXFdoOQQD/5nLmbEfHhnN9FNfhxUrBTu947W7ba3Vat2LnuCctkVecNXgK8
0/x/45dJjtFTepoAvU86LKo/SnvBERqfHpT+LY1VV7sKMwk/9Aq11WlXMhjYartf
6yP7IaqKq1XNQQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:54 2026 by rpki-client