Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: JELTeVzG9TXwFPzGZGVp53aqWxOwu+AQkix7HotnSNM=
Subject key identifier: DA:08:E8:9A:29:CE:0A:CE:FE:A5:87:FD:89:45:CB:AE:2A:55:0D:39
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 01A0CB59F604CC5EABEDB3A7D1BCB892F4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 0AC3
Signing time: Tue 22 Sep 2026 23:01:05 +0000
Manifest this update: Tue 22 Sep 2026 23:01:05 +0000
Manifest next update: Wed 23 Sep 2026 23:01:05 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: Gj6MaRMK6wwVRDCMWzhr5mgu8lSWzIGCl+yz3dHlBNg=)
3: ekljz6keL0jMzgXLL61-BbfOA_o.asa (hash: 6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:f6:04:cc:5e:ab:ed:b3:a7:d1:bc:b8:92:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Sep 22 23:01:05 2026 GMT
Not After : Sep 23 23:01:05 2026 GMT
Subject: CN=da08e89a29ce0acefea587fd8945cbae2a550d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:42:31:90:c6:06:0b:cf:bb:8f:4f:23:65:
76:0e:8d:bc:b3:ed:fb:d7:2b:00:b2:4d:fa:ea:e6:
b5:ce:05:0c:24:75:78:61:c1:ea:47:e7:a6:a1:ac:
0d:9c:95:6d:60:39:67:91:4f:54:69:d6:88:f9:8c:
f9:2b:1c:79:95:90:6e:43:f3:46:e8:d2:4f:5f:46:
77:a7:82:8f:31:29:91:54:90:1c:95:80:f6:cc:9e:
66:d5:c5:6c:42:ff:96:58:bf:68:d8:e0:d7:0e:e9:
dc:f4:d9:e5:f3:e1:e5:1a:e5:b3:4d:4f:0b:99:88:
66:5c:38:6b:fe:f7:ef:76:ae:54:71:d6:92:6e:28:
6d:2d:e4:2e:d9:99:83:d6:e8:b5:47:e1:c4:03:ab:
ad:f0:01:a8:d1:0f:00:03:03:62:f4:1b:a7:52:9a:
d5:74:f2:ee:7c:7d:1c:16:47:3a:82:69:14:ef:54:
12:c5:0e:9a:3e:d0:dc:ca:74:b4:17:8f:af:6d:c6:
38:4b:0b:ef:82:58:8e:b5:0e:92:57:0c:6c:d3:1b:
c7:55:59:4c:02:e2:15:a4:6f:58:d2:1a:ad:1d:24:
a1:bb:a8:97:32:2a:4b:cd:0f:8b:8a:98:64:03:33:
8f:8a:84:40:1a:47:f7:5f:3b:ab:bf:52:06:ab:74:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:E8:9A:29:CE:0A:CE:FE:A5:87:FD:89:45:CB:AE:2A:55:0D:39
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7c:d5:7d:79:0d:6c:e3:3d:03:15:f6:a1:63:9d:66:95:16:
db:c8:29:dc:74:ef:21:d8:c4:d1:b6:6f:bd:d5:58:3e:78:64:
f1:d0:c1:7d:a1:d0:86:07:e1:4e:6b:3a:d5:83:95:29:ae:b3:
8c:75:f5:eb:91:51:6e:fc:bf:3d:7c:b1:c4:ca:3a:04:31:f3:
ed:f2:2c:88:83:29:09:61:66:fd:af:39:ef:a0:35:6a:c4:95:
c8:4d:08:5e:b8:33:04:b1:d6:1b:e5:d6:22:9d:26:e4:e7:7e:
de:d5:6e:80:ee:e4:ab:ad:90:ac:06:91:2f:28:b4:74:61:91:
6b:28:68:4a:29:bd:86:49:16:88:e1:cc:25:17:7c:16:69:40:
d9:08:f5:8c:ab:c1:7f:ef:54:04:4c:11:76:ca:20:b8:f5:60:
4e:03:53:d2:80:22:d7:ac:60:60:13:24:48:6e:b7:b1:c6:dc:
f9:16:ec:d8:6f:fb:3d:87:8a:d5:4c:e9:ad:bf:22:9b:33:27:
b8:46:c5:57:55:0f:85:bf:39:1a:9b:6b:2f:0a:b5:84:ef:8d:
c7:54:42:6b:48:db:72:3c:90:a8:2b:e2:ae:5a:e7:41:df:af:
11:cd:28:9f:ce:4b:b3:c0:9b:2c:a2:f7:a1:23:ff:74:91:a2:
77:12:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:23 2026 by rpki-client