Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: G10WjLIe73xBS7LK269NdI2rtolTPIRoXYB5YKfoj50=
Subject key identifier: BC:CD:D9:18:2B:62:FC:9A:97:05:81:98:75:4C:A3:6C:1A:C5:C8:D4
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 019D97AB4D45B981A70F28556F83757F117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 0957
Signing time: Thu 16 Apr 2026 19:01:19 +0000
Manifest this update: Thu 16 Apr 2026 19:01:19 +0000
Manifest next update: Fri 17 Apr 2026 19:01:19 +0000
Files and hashes: 1: 1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa (hash: F/RcT6jJFR9ljteJFuF0791elb6u75/JCwlm7zNLBlI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: 6+mpYs8G+T5V658ITxGnx0uNAT25yuCDukK7ZCiAFQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:4d:45:b9:81:a7:0f:28:55:6f:83:75:7f:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Apr 16 19:01:19 2026 GMT
Not After : Apr 17 19:01:19 2026 GMT
Subject: CN=bccdd9182b62fc9a97058198754ca36c1ac5c8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:4c:6b:17:7a:f9:19:bc:7b:fb:ea:a7:2b:
e1:a9:e8:a7:82:49:4a:d1:ba:c1:97:df:31:be:9d:
25:c3:34:8d:30:3d:22:47:e8:0a:64:06:4f:6e:c5:
1d:48:30:59:72:8b:f3:10:29:41:13:06:e8:75:4f:
8b:9e:a1:b3:e6:e0:9a:55:d9:06:b5:fc:c3:c5:19:
61:04:59:cf:73:d6:a7:4f:f1:9f:fd:2e:06:3b:b6:
fe:9c:53:03:5c:2d:39:30:3a:f9:b9:5b:0e:c3:8c:
29:02:5e:e6:75:69:56:16:20:6d:c7:e3:4e:7c:f2:
9d:c3:5b:da:79:59:35:38:3a:b8:d9:6d:7a:da:78:
60:5f:6f:c4:7a:bb:23:0e:93:bb:e8:07:a4:5a:ec:
39:4f:2c:5b:ff:44:9f:9c:23:b1:ef:3d:3a:1f:23:
60:0b:a9:05:55:22:4a:82:97:0c:75:ef:21:71:40:
3c:43:16:5e:46:b4:0a:81:67:81:b2:d5:ef:65:d1:
5c:ce:9d:f4:69:72:a7:63:8a:26:1e:c0:45:eb:dd:
03:79:25:08:9b:a5:dc:df:f5:68:d6:1a:cb:d2:37:
7c:be:f0:c2:6d:29:7b:e6:4e:52:b7:3c:62:bd:99:
af:a4:21:81:0b:a2:1f:da:be:22:58:72:4c:ed:30:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:D9:18:2B:62:FC:9A:97:05:81:98:75:4C:A3:6C:1A:C5:C8:D4
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:be:ff:28:e2:6c:e0:cb:97:1f:da:55:ad:00:e2:03:f1:
ea:11:2f:ca:91:ac:05:2d:9e:a2:15:76:1d:87:a6:29:84:1b:
84:b5:68:a1:87:5f:05:de:2c:03:bd:15:e5:09:fa:52:35:02:
16:70:28:00:ec:66:21:68:42:99:9d:f1:78:94:f5:f3:e8:6a:
ed:a8:85:ce:3b:65:54:40:c7:b4:ea:d5:9a:35:a7:ac:e8:07:
29:c9:1e:91:9c:e3:a7:7d:d3:ba:c8:f8:aa:c8:19:4a:2f:24:
4f:4a:05:4e:8d:64:2a:16:a9:c4:16:97:a1:2a:1d:f0:a4:18:
33:c9:93:80:85:56:78:05:8d:13:1f:b5:b4:2d:54:aa:3e:d2:
c7:c8:af:03:8e:6e:cb:d3:b0:e2:17:25:af:8c:7b:3a:81:39:
d3:51:ef:d1:cd:ea:9d:8d:73:c3:c3:41:f9:6e:86:ae:09:12:
17:d0:10:7c:b4:03:87:b0:f0:55:12:57:9d:79:0d:0e:d7:30:
bb:18:d1:49:d0:63:ed:3d:ac:10:65:9b:a1:38:b8:ce:55:a4:
f5:33:ca:92:23:b8:ff:7a:25:d0:99:3e:bd:a3:26:ae:86:fd:
bc:f2:af:1b:5c:13:2c:1e:42:a0:6e:5e:69:80:f7:7a:ee:75:
5e:9b:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:31 2026 by rpki-client