Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: /oNmD6bomFjACKCRk/ToN3AocGlaFBBPXUEghM/FBFQ=
Subject key identifier: 62:BB:89:D1:6D:20:2F:48:20:DD:57:F2:96:91:DE:8E:0C:C7:64:38
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019CACB5098ADB8A53451E1C6211A9838D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:11 +0000
Manifest this update: Mon 02 Mar 2026 04:01:11 +0000
Manifest next update: Tue 03 Mar 2026 04:01:11 +0000
Files and hashes: 1: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: wzyALPStZsELxppOzGEDt+43cFABYLcj8JGwRcFMmTI=)
2: gw7haS9Eo4v-nJwtV0iha6TGNxg.roa (hash: kfj7TXq3aFYsD7hG7bIHLfXoq8dEC7iq1n7sdP2Bfpw=)
3: iAwmrYPmQo2d9WkyTIdj-CB9OP0.roa (hash: Igxirsw6JjTxDRIc2Eryuocze4souahIl7Q4rVmCOOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:09:8a:db:8a:53:45:1e:1c:62:11:a9:83:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Mar 2 04:01:11 2026 GMT
Not After : Mar 3 04:01:11 2026 GMT
Subject: CN=62bb89d16d202f4820dd57f29691de8e0cc76438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:58:6b:50:23:23:f2:98:21:f9:73:6f:d1:
6b:ce:d1:e8:56:64:74:40:d9:dd:f5:cd:9e:56:12:
b0:81:df:57:d1:c1:fa:3e:33:1c:41:9d:d1:5b:3d:
7f:54:5d:cb:6d:78:25:e6:ba:df:9a:bc:7c:30:7e:
d8:b0:13:2c:ed:50:0f:44:6f:ad:7e:b9:76:a1:b4:
4d:ef:24:95:87:1a:c7:08:5b:de:2c:46:48:0c:2e:
a2:f4:84:ff:7e:62:94:46:23:a0:20:4e:88:8d:6b:
3c:e3:77:36:c7:10:33:4f:09:c6:2c:33:b5:f4:8d:
2a:4f:78:42:50:73:66:87:97:67:1d:6c:e4:e0:f6:
35:c4:00:4e:f8:29:14:74:2d:ee:74:d7:5b:46:0b:
00:d7:00:f6:ec:96:07:ab:80:1a:a9:f9:bb:7b:e4:
75:7b:b7:7f:6a:69:10:68:70:69:80:b3:1d:7e:0d:
41:0f:c9:f9:b7:12:36:6a:fd:6c:fa:cb:3b:80:a3:
f9:36:aa:60:c7:c8:c0:a5:1e:da:8a:54:9d:6a:3f:
f6:e9:fe:9b:b2:95:c6:a5:f5:2a:da:c3:d1:1a:48:
9b:66:f7:89:27:e1:a5:6f:76:db:d9:c5:3f:4d:58:
59:2b:62:fe:dc:55:e0:a5:5a:42:29:75:44:c7:10:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:89:D1:6D:20:2F:48:20:DD:57:F2:96:91:DE:8E:0C:C7:64:38
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:34:f7:d9:e6:11:b5:47:86:60:1a:cc:97:3f:bc:2f:20:
6e:c8:6e:85:17:50:94:0c:f6:d7:6a:0c:50:e2:61:77:9e:c7:
ed:a7:90:c3:1b:84:e8:a7:98:1a:9e:16:7a:e7:2b:2e:ae:b3:
e8:e0:a3:92:04:e2:8e:ca:9a:74:22:09:1a:21:c6:32:78:e9:
2c:02:cf:4b:d6:1e:85:e5:78:d4:22:76:40:d0:32:ac:c0:11:
4a:a8:0b:1e:68:1a:3f:f9:3d:51:6b:bc:86:2a:62:e6:34:64:
f3:57:c9:7e:79:26:b7:df:f6:ca:c4:d3:e2:2d:ff:a4:6b:78:
89:77:1e:e1:2f:9a:38:0c:51:b2:21:bb:40:82:81:ed:3d:42:
74:19:a2:77:ca:d5:2a:af:50:9f:bc:f3:f4:eb:65:c9:f6:42:
b1:b0:13:b5:cf:e9:af:c5:68:0a:61:8f:8e:e4:4e:2e:11:da:
1f:2c:e2:be:24:7b:66:db:ff:5d:1d:cc:b7:2f:b9:67:db:1a:
bb:c8:98:d9:36:cf:67:b2:e4:00:c2:de:96:cf:8f:d7:18:15:
36:79:74:ff:06:c2:e0:d0:72:60:77:0d:d7:47:09:f7:e3:42:
71:84:13:09:f6:79:0c:73:36:30:96:63:fe:a8:4a:5e:ef:1f:
b9:90:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:19 2026 by rpki-client