Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: 9y05CMvzTcjcPoCdCzfPhxadRVS1kPlHrBCbkWbm5tI=
Subject key identifier: F5:84:34:42:C7:AF:1C:0D:4A:BE:B9:9F:A1:D3:ED:49:F8:18:1A:16
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019CA9EAD960D05ECE894B868C045977D4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 089F
Signing time: Sun 01 Mar 2026 15:01:06 +0000
Manifest this update: Sun 01 Mar 2026 15:01:06 +0000
Manifest next update: Mon 02 Mar 2026 15:01:06 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: Sh9uH4cJIUxA5zF8KgkSe+KK3o16DpRY35UdBWvaHS0=)
3: sDDyHkEYz6b-uuUFfohEajuP1a4.asa (hash: NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:d9:60:d0:5e:ce:89:4b:86:8c:04:59:77:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Mar 1 15:01:06 2026 GMT
Not After : Mar 2 15:01:06 2026 GMT
Subject: CN=f5843442c7af1c0d4abeb99fa1d3ed49f8181a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:97:4f:a2:d5:d3:6e:a5:30:14:7c:28:c4:
b4:46:94:19:7d:f6:96:9a:35:ec:14:c7:1b:96:d3:
bb:98:27:84:9f:c4:02:d8:dd:99:44:3c:53:ab:80:
42:c1:eb:db:d4:50:40:13:be:47:d2:e5:20:f4:42:
df:35:66:89:ff:f5:19:a2:ad:b6:bb:da:a8:fa:f7:
46:42:1e:8d:b4:16:e8:f2:97:52:cc:85:79:17:23:
c2:d1:c1:50:46:ea:68:af:6e:33:63:b6:87:16:ab:
c5:c0:60:24:22:ed:86:84:da:a2:91:33:08:82:e9:
cc:ab:f8:ae:40:3f:a7:17:6a:23:88:d1:b6:c1:af:
1d:b1:f5:b1:94:fd:0b:64:3a:1a:8c:da:7a:9c:3f:
31:25:e0:29:f8:20:1b:69:0f:15:6f:ce:5d:c0:1a:
3c:6c:9b:cb:b9:ca:ce:44:c4:37:f8:6c:05:0e:99:
f2:c9:34:3b:ea:90:3f:90:69:00:60:58:42:43:e7:
89:b3:26:9a:1a:21:10:1a:46:61:7d:02:f8:d6:ff:
d0:2f:91:5a:ca:f8:ea:ec:ea:8e:9c:e2:dc:7e:62:
ba:7f:b4:af:64:f0:9e:20:22:7a:7a:75:1a:06:0c:
37:7c:ef:d7:4e:6f:ff:1f:c9:46:20:37:01:09:17:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:84:34:42:C7:AF:1C:0D:4A:BE:B9:9F:A1:D3:ED:49:F8:18:1A:16
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:a2:99:e7:98:d3:ae:d1:60:60:31:a6:84:04:c5:20:97:
73:20:5f:61:cf:f1:49:97:56:d8:cc:4e:eb:fa:26:70:cf:30:
ae:34:26:e2:79:2e:1b:c5:90:09:68:cb:9d:53:02:b3:55:a5:
f9:37:97:77:1a:db:4e:b6:59:5a:0a:a8:b0:e2:6c:ba:b3:d5:
48:46:1f:ca:67:65:a3:f4:4d:41:65:9a:78:1e:ed:f9:df:44:
a2:97:cb:64:b8:45:7a:a1:69:1f:4d:33:88:87:00:03:bd:15:
88:3e:14:05:17:91:ee:3e:0f:91:9b:b0:5c:4e:e5:53:6f:de:
e9:0f:22:3b:41:da:b9:23:87:4d:30:57:04:9f:94:ae:97:78:
7b:63:b5:ee:02:17:52:b9:e8:90:dd:cf:33:35:4d:4e:40:dd:
13:84:f2:94:0b:65:7d:53:b4:0b:d8:d0:af:53:e4:fc:e6:61:
1a:c4:18:4b:b3:16:bd:20:e5:be:8a:02:e0:44:77:f0:d0:c4:
90:88:f3:17:1f:b1:f0:50:e5:4c:31:a7:bd:2c:fe:b4:fb:69:
a2:4d:cf:75:c8:c0:8e:67:ec:c6:a3:2d:24:ac:30:98:b3:78:
4a:a2:a6:d3:4f:85:ac:19:76:0c:9f:01:a6:e6:6c:72:94:aa:
7e:df:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:17 2026 by rpki-client