Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: pu8355jUcoJ15LmXn9XZYvRPfM/aciZlhMUeXcUWMuk=
Subject key identifier: 17:D2:9C:D3:E6:A5:AC:69:89:78:72:24:EB:9B:AE:B7:69:1C:F1:B6
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 019CAEDA48D53D3690ECEF5BC47B4A19DCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 16E5
Signing time: Mon 02 Mar 2026 14:01:06 +0000
Manifest this update: Mon 02 Mar 2026 14:01:06 +0000
Manifest next update: Tue 03 Mar 2026 14:01:06 +0000
Files and hashes: 1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: jOKFJIjg3JWuNIYrX87LBgzoHPKeMbX66vDnJVMz8uU=)
3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:48:d5:3d:36:90:ec:ef:5b:c4:7b:4a:19:dc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Mar 2 14:01:06 2026 GMT
Not After : Mar 3 14:01:06 2026 GMT
Subject: CN=17d29cd3e6a5ac6989787224eb9baeb7691cf1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:38:80:7c:46:d4:b0:d0:19:c5:67:19:2d:
02:ae:05:a6:ad:18:35:29:b8:32:0c:a3:f6:3e:07:
33:17:bc:1c:72:22:ee:74:c0:41:4b:c1:bb:f2:91:
98:c7:2e:7d:1d:2b:8b:ab:62:db:bc:fa:9b:44:9c:
49:55:fd:03:42:50:54:18:59:60:80:9f:a1:7b:e1:
31:b7:92:d5:0c:9c:04:02:29:b7:18:29:89:1e:80:
48:66:d4:c4:60:fb:fb:6a:58:62:4b:30:f7:31:39:
db:ee:81:44:7f:34:28:48:66:6a:8a:49:0d:3d:0a:
42:98:ce:b6:5e:02:49:7b:21:c1:1a:a7:31:5b:01:
16:9b:8e:16:d4:07:18:ec:12:a6:bf:3f:2a:1f:0e:
a7:a3:70:d9:b5:38:e1:2b:5a:ef:3d:96:92:2e:4b:
09:90:10:9a:c8:b1:e3:b0:ed:dd:56:c4:12:49:cf:
b9:4e:33:dc:a6:b7:66:01:69:97:76:7c:dd:24:05:
9c:cc:36:17:25:a0:25:68:18:19:3e:ac:60:7a:e5:
0f:4a:e2:bb:06:0f:7b:a7:b7:c1:46:be:53:ee:91:
d0:dd:7a:85:94:f7:4c:97:ef:27:16:cc:59:c1:64:
80:7b:0c:bb:df:9a:ea:c0:22:d2:c5:a5:57:1f:cb:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D2:9C:D3:E6:A5:AC:69:89:78:72:24:EB:9B:AE:B7:69:1C:F1:B6
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:cf:c7:a7:18:0b:10:d3:70:99:cb:30:58:82:e8:1d:5d:
f8:51:b4:1b:fd:53:06:3c:0e:41:28:3e:4d:b8:9f:96:96:b7:
9d:dc:fd:c4:06:88:c6:27:84:84:7a:41:0e:3a:b1:53:55:06:
8b:eb:a6:3c:a5:76:6c:ef:81:93:93:b3:7a:3c:9b:8f:d1:af:
c6:99:b1:63:ab:ce:56:c9:ce:15:e3:aa:31:b4:e1:cb:11:6d:
ec:5d:7a:af:e8:f4:61:aa:8b:c6:4e:a9:47:8a:9b:57:d5:48:
19:19:a8:68:46:8e:ee:ce:a7:36:28:9d:42:7b:ef:28:62:43:
2d:db:aa:2f:d6:2f:ae:0d:fb:42:93:4e:5d:94:d6:a6:ed:3b:
59:8c:71:7f:08:2e:a0:62:5f:27:30:24:bb:58:db:d7:ad:d4:
1f:70:b7:37:c6:9d:46:c5:52:ac:26:5a:29:30:7a:1e:a7:ed:
50:f1:6d:fa:7c:98:84:2e:30:da:84:b5:93:b6:3f:c9:b0:fe:
5e:8b:07:d4:06:a6:c3:6a:d8:24:47:b3:94:00:72:5c:29:0b:
0a:fb:d4:70:cf:2c:49:75:e9:fc:41:7e:90:96:0c:d5:7b:a0:
a8:bb:6a:9a:89:e2:eb:5c:20:d8:0f:f4:bc:42:74:7c:76:38:
4b:29:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:53 2026 by rpki-client