Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: 0YWIvcOWN3KePhPbkNFHGCzt22gk3sr9OmcwKL0Zj9o=
Subject key identifier: EE:C9:F9:38:66:95:12:02:3B:85:25:89:84:91:4E:F4:09:B6:B3:B7
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 019CAC1024BE2DF4B7E3BCD37BD50B74D046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 08DD
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: 1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa (hash: F/RcT6jJFR9ljteJFuF0791elb6u75/JCwlm7zNLBlI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: 0WTzHGsyiGlyFPpkyyQGgAr0bDcZujeW96X/95vtSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:24:be:2d:f4:b7:e3:bc:d3:7b:d5:0b:74:d0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=eec9f938669512023b85258984914ef409b6b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:d7:e5:45:57:af:bd:ff:13:8d:8f:48:41:
6e:2b:0f:ab:0e:43:45:f7:39:34:a5:b8:d6:a2:e1:
98:05:19:d3:c8:fc:c4:37:ce:08:9f:cf:7d:9f:c9:
16:27:c7:22:8f:37:90:6e:f2:b4:49:aa:90:dc:16:
31:67:3d:d0:e2:ca:2c:3e:a3:89:04:8c:f5:77:d0:
61:56:a5:3c:f5:66:d5:42:50:be:5d:76:fc:87:b7:
b8:04:cf:00:be:c7:d8:ad:f2:38:5f:6a:3f:b2:b7:
1c:f2:89:a4:fe:23:03:b0:de:51:bd:1e:c2:04:21:
a8:57:49:a9:d6:0f:0e:8d:c4:62:ee:7e:dc:1b:71:
57:9d:dd:49:b6:5f:a9:a4:dd:8c:ce:cf:2f:6d:b0:
af:28:a1:32:25:1a:75:df:5f:38:c3:bd:ea:bc:55:
2c:65:0e:3f:f4:9f:51:6d:cc:e7:41:c9:ef:57:e9:
aa:37:4c:72:3e:21:09:1a:bf:c7:3a:1f:f5:01:e1:
eb:c6:a2:3c:78:1d:5a:d5:c4:11:bc:f8:ea:d6:13:
f8:89:e4:25:39:bd:67:2f:1e:18:39:c8:04:86:5b:
23:6b:f0:70:16:76:01:09:a6:90:68:0b:47:be:05:
d0:3c:e2:52:07:92:7f:02:13:0d:ea:20:42:31:7d:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:F9:38:66:95:12:02:3B:85:25:89:84:91:4E:F4:09:B6:B3:B7
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5b:e1:d3:44:e7:b5:be:94:79:20:d0:2d:41:0b:f8:e0:c3:
62:1d:27:3e:02:5c:b5:a4:16:dd:b2:e5:d0:b4:f2:e5:c1:31:
a1:88:7f:f9:bd:ff:e1:49:ea:6e:e4:40:f1:2a:fa:e3:26:f1:
26:af:d4:5f:c6:bd:8c:bf:b4:df:85:4f:7f:fa:ed:6d:99:63:
3a:90:fb:65:c8:1d:35:37:ae:be:5a:b0:fd:06:32:4e:17:ff:
90:03:62:de:53:41:1b:8b:42:c4:1f:31:5b:76:10:ac:5a:58:
b0:c1:75:a6:03:61:c6:f7:24:31:df:19:fc:8c:42:db:4e:50:
9c:f9:0f:15:6d:ec:9f:3c:16:0c:b5:7d:4c:b8:05:19:2d:07:
ca:c0:a2:0c:4c:86:99:d8:69:bc:fe:75:8b:d8:58:59:9c:55:
25:73:c0:3f:09:90:ef:6a:02:81:6f:41:9c:05:0a:1c:58:e2:
6f:bf:63:11:a9:b8:44:2c:05:5e:58:af:5a:7c:17:6c:47:6f:
b7:14:b0:34:61:47:e4:11:1d:f5:05:2a:df:79:08:6c:ba:7d:
19:2e:5e:d0:43:ba:bf:3a:36:d6:86:c3:45:3e:a5:40:cf:b7:
50:c1:6c:ed:8d:8e:2e:d9:2f:af:a4:61:09:fc:ef:99:b9:06:
35:57:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:16 2026 by rpki-client