Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: m+GVYGH7uE6X4ZG1lp1Nc2MT07FsiNwgUy3ixYbA/D8=
Subject key identifier: 40:8E:9F:CF:A8:AF:A7:8F:64:14:10:2E:BB:AE:1C:2D:A9:7F:D0:BF
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019EBEED37054CAE205891CF67C812766FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 09B3
Signing time: Sat 13 Jun 2026 03:01:17 +0000
Manifest this update: Sat 13 Jun 2026 03:01:17 +0000
Manifest next update: Sun 14 Jun 2026 03:01:17 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: qGpOJ3fpA7vf02HXFHkHATJ+2uYURaCsRzqsOGxMP7s=)
3: sDDyHkEYz6b-uuUFfohEajuP1a4.asa (hash: NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:37:05:4c:ae:20:58:91:cf:67:c8:12:76:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Jun 13 03:01:17 2026 GMT
Not After : Jun 14 03:01:17 2026 GMT
Subject: CN=408e9fcfa8afa78f6414102ebbae1c2da97fd0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:2e:8d:1a:f9:e2:a4:58:f4:a4:4e:38:2a:
87:87:40:7f:5f:b5:48:f3:33:bf:da:bd:80:0e:06:
0e:5b:12:cc:a9:8d:a1:c5:48:36:ab:b5:58:bc:f9:
bf:43:73:cd:9f:90:7a:68:8d:41:8f:fe:b9:7e:6d:
9e:70:f7:66:b9:8d:be:cd:86:8f:52:f1:d4:85:f3:
db:77:c1:2b:eb:b3:bf:7e:5b:8c:41:09:02:b4:9f:
25:fd:ed:cb:19:57:ef:4f:80:96:ca:17:98:18:0e:
45:84:a3:ef:ca:c7:71:09:8c:9e:c9:a2:e9:4d:b9:
f9:9b:76:a8:a1:44:34:95:2a:ab:ea:56:6d:e3:2f:
d6:cd:59:b4:04:7f:09:53:5c:16:51:02:52:27:9d:
3d:ed:a8:b2:3b:04:ee:d7:c9:f1:ce:7a:6e:50:17:
8c:04:72:c7:55:72:55:2e:5d:71:ba:80:37:23:99:
35:de:e7:3f:cc:76:d7:7a:0f:38:62:75:5b:87:c0:
66:6c:17:0f:c8:84:90:46:d5:aa:10:7a:67:49:40:
ca:cf:25:3b:4e:d5:43:a5:55:66:4b:a7:77:1b:25:
6b:1f:27:08:3b:7a:93:66:09:2b:75:82:e0:83:ae:
33:94:68:75:89:4f:80:ed:f8:89:04:57:8a:9b:02:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:9F:CF:A8:AF:A7:8F:64:14:10:2E:BB:AE:1C:2D:A9:7F:D0:BF
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:82:19:26:a4:61:7f:d6:a5:ca:e1:75:96:ad:91:1a:0a:6b:
3e:10:8c:01:ef:9f:c8:b1:09:20:bf:57:8e:56:23:41:7b:66:
84:99:5f:a7:70:ab:f0:27:7d:aa:7b:f8:50:52:9d:35:c0:38:
87:80:e2:18:61:5d:db:b9:23:ff:f4:0d:cf:ef:37:83:43:ff:
3a:15:8c:16:b3:18:0c:4f:c7:f8:68:98:26:06:59:93:87:3d:
7b:d4:0c:f1:fa:7b:3d:57:aa:fe:fc:2e:80:f6:a2:67:5d:d1:
bb:79:64:76:4d:c6:ce:25:d4:82:a0:61:19:1d:cb:b1:98:32:
4b:7b:60:a3:ab:9a:61:d4:81:92:a6:12:7e:3f:0b:3b:d2:3c:
93:ea:f4:65:7f:12:09:5c:d8:51:da:eb:26:cb:99:fb:b5:cd:
ec:fb:4d:81:84:79:4f:89:73:fb:a2:2f:05:6c:1e:d1:67:9a:
57:f3:12:f4:7f:f1:c7:02:1d:ce:35:e4:f0:2a:6f:7f:8a:e8:
ad:48:e4:e3:ac:b2:ec:66:d0:43:c1:23:2f:79:3d:fb:94:de:
e6:ad:7d:0a:a5:da:00:10:c3:3e:d4:b3:ff:4f:5c:fb:2c:13:
75:28:99:62:10:52:d5:07:97:c2:61:c4:5a:7f:a0:3e:ae:8c:
a9:d9:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:00 2026 by rpki-client