Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: 5LkVz/km7AIayknrHBwKxPFhYReL37d7SKYiLRz8zRs=
Subject key identifier: 95:11:87:BB:56:CA:20:0E:86:19:15:1D:E1:C3:4A:9A:2A:29:78:FF
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 019CAB6AD95C82EF3AD29B69DC634A88BCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 0B9C
Signing time: Sun 01 Mar 2026 22:00:32 +0000
Manifest this update: Sun 01 Mar 2026 22:00:32 +0000
Manifest next update: Mon 02 Mar 2026 22:00:32 +0000
Files and hashes: 1: WseAFri0IbJVLS_17n9KVrn46U8.roa (hash: FwcN+EP7M1WYCm+EEp4GaqVFfXeQyTGsWFqoQ+nRBec=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: /+kaLoGqKtanFahtVgI0RVXQo+2bfRPzL59GW/nKdGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d9:5c:82:ef:3a:d2:9b:69:dc:63:4a:88:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Mar 1 22:00:32 2026 GMT
Not After : Mar 2 22:00:32 2026 GMT
Subject: CN=951187bb56ca200e8619151de1c34a9a2a2978ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:13:09:71:25:f0:e3:bc:44:ef:ae:33:18:
6d:94:54:1a:4e:e4:9e:51:f6:0a:d5:6f:0d:56:c4:
58:5a:7b:4a:9d:1a:97:4d:64:3d:dc:cd:fc:ad:fb:
49:7b:46:53:56:61:38:36:73:92:34:9f:35:04:c5:
2d:c9:d8:73:a6:08:d0:7d:04:ef:88:16:7e:a2:db:
13:42:e5:f0:cb:f1:cf:1c:80:6a:b6:75:d2:63:29:
99:03:6e:06:0b:11:55:75:b1:8a:72:5e:11:9c:7e:
48:4a:cc:57:8c:a2:a5:11:88:fa:d3:08:2f:0e:37:
b0:51:e2:16:54:6f:e2:0f:b1:5c:6b:df:b3:ec:27:
93:9b:50:44:f6:9d:6f:7a:a0:1f:99:80:8f:c7:3b:
6a:c0:d4:be:a1:4f:d3:38:76:0f:99:71:40:ca:57:
06:70:1a:a8:ed:71:e5:f8:a6:4b:59:b4:74:58:0c:
6e:4e:df:20:ac:f2:af:ea:58:db:68:79:14:0b:7e:
a2:13:c3:38:a2:76:75:68:94:27:7c:cc:4b:e6:60:
a4:17:3c:13:30:59:23:fb:fe:0c:7e:5f:08:a5:50:
58:c1:cb:7d:24:7c:30:35:39:64:1d:2c:2d:a1:76:
ab:dc:db:99:b6:16:a8:e5:62:bd:f6:ab:86:d7:e9:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:11:87:BB:56:CA:20:0E:86:19:15:1D:E1:C3:4A:9A:2A:29:78:FF
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:71:ac:33:77:3c:ae:39:5f:e1:65:36:21:f1:9e:48:cd:46:
e9:22:29:8c:0a:62:8d:78:ff:92:eb:f2:a2:b2:9c:a3:61:07:
9d:0c:82:36:ba:e5:72:36:67:86:35:00:cb:bf:19:0f:58:f3:
d0:87:11:da:26:f0:0b:4d:22:65:90:75:2d:89:da:b4:4d:1e:
ef:f6:6c:c2:25:11:d2:c2:2b:3a:ba:f3:32:f1:49:ec:0e:9b:
8a:30:e9:44:bb:12:74:f2:97:66:26:41:3e:15:15:d4:e4:81:
c2:6f:f5:e9:0d:b7:38:3d:6a:5f:cb:19:0e:d3:d1:07:bc:21:
39:91:52:dd:15:75:53:cd:55:7f:fb:26:4b:18:78:b4:30:49:
f3:ec:c5:bc:57:75:04:30:4c:b2:5c:31:da:d6:ab:0b:c8:f9:
84:6b:29:82:28:dc:ba:4f:60:e2:6b:77:ee:c9:02:8e:ee:63:
7c:c1:74:e6:a0:da:28:20:6a:b2:6f:7f:84:40:58:2b:93:c0:
ab:1d:d9:0b:22:29:a0:b7:4b:ad:d8:02:dc:27:90:75:19:4a:
2e:94:1a:43:bd:f8:d7:db:b9:35:3b:f8:5a:23:2f:ce:13:71:
f3:2a:71:46:d6:26:25:b3:06:4c:91:70:11:2d:cb:fe:f0:2e:
8d:bb:90:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyratlcgu860ptp3GNKiLz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxN2ViZjQ0MWVlMTA4NTYzMWVlYjc3MTlhODk4MmRmZDgw
NTdiZTEwHhcNMjYwMzAxMjIwMDMyWhcNMjYwMzAyMjIwMDMyWjAzMTEwLwYDVQQD
Eyg5NTExODdiYjU2Y2EyMDBlODYxOTE1MWRlMWMzNGE5YTJhMjk3OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWgTCXEl8OO8RO+uMxhtlFQaTuSe
UfYK1W8NVsRYWntKnRqXTWQ93M38rftJe0ZTVmE4NnOSNJ81BMUtydhzpgjQfQTv
iBZ+otsTQuXwy/HPHIBqtnXSYymZA24GCxFVdbGKcl4RnH5ISsxXjKKlEYj60wgv
DjewUeIWVG/iD7Fca9+z7CeTm1BE9p1veqAfmYCPxztqwNS+oU/TOHYPmXFAylcG
cBqo7XHl+KZLWbR0WAxuTt8grPKv6ljbaHkUC36iE8M4onZ1aJQnfMxL5mCkFzwT
MFkj+/4Mfl8IpVBYwct9JHwwNTlkHSwtoXar3NuZthao5WK99quG1+kdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJURh7tWyiAOhhkVHeHDSpoqKXj/MB8GA1UdIwQY
MBaAFLF+v0Qe4QhWMe63cZqJgt/YBXvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xOWFlMDUtMmZiMy00MjRlLWFlMjYt
MjIzMGRiZDVlZGJiLzEvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xOWFlMDUtMmZiMy00MjRlLWFlMjYtMjIzMGRiZDVlZGJi
LzEvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnGsM3c8
rjlf4WU2IfGeSM1G6SIpjApijXj/kuvyorKco2EHnQyCNrrlcjZnhjUAy78ZD1jz
0IcR2ibwC00iZZB1LYnatE0e7/ZswiUR0sIrOrrzMvFJ7A6bijDpRLsSdPKXZiZB
PhUV1OSBwm/16Q23OD1qX8sZDtPRB7whOZFS3RV1U81Vf/smSxh4tDBJ8+zFvFd1
BDBMslwx2tarC8j5hGspgijcuk9g4mt37skCju5jfMF05qDaKCBqsm9/hEBYK5PA
qx3ZCyIpoLdLrdgC3CeQdRlKLpQaQ73419u5NTv4WiMvzhNx8ypxRtYmJbMGTJFw
ES3L/vAujbuQng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:34 2026 by rpki-client