Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: Qlxod6eXmmkoXXSo6HMCUcFmfLsRiXqzBrdPMqxbGMY=
Subject key identifier: 05:8E:84:02:52:D9:9E:A6:05:09:AB:07:67:FE:06:04:9E:54:34:2F
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019CABD945AD19E44EC041F228FFC54DBD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 08A0
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: b2if4ue4+ZPGmtxzf5WSo/8oTD1tVrwjuFlBimSB9F8=)
3: sDDyHkEYz6b-uuUFfohEajuP1a4.asa (hash: NPqm48NMUC8oNjQMXA6W0RiB5e8zA7PLlrlh+UM6JA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:45:ad:19:e4:4e:c0:41:f2:28:ff:c5:4d:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=058e840252d99ea60509ab0767fe06049e54342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:34:4d:ad:5b:c1:8f:07:9c:84:5c:a7:c3:
18:8f:0c:98:70:31:28:03:84:3b:7b:bc:0f:67:31:
28:db:9f:23:09:7d:ef:ab:27:9b:9f:5b:9d:8e:b9:
55:a9:15:b2:b4:a3:d7:cc:4a:20:3b:63:72:52:d5:
cb:bf:77:42:9d:59:36:82:f7:64:c5:de:d5:40:e0:
8d:68:d6:f8:c7:91:1e:02:da:70:69:d8:69:8d:cc:
e3:23:b3:0b:b7:25:60:f4:3f:1d:7b:4a:89:a3:62:
36:c6:e1:f1:14:1d:eb:2c:9a:e1:2a:42:4e:63:d1:
f7:d1:12:28:65:b0:b0:fe:f0:78:bc:55:44:56:06:
b8:d8:4c:da:40:10:a8:a8:95:8d:ff:7f:5c:1f:e7:
dd:07:32:03:69:e8:a4:44:ff:ec:67:d9:6a:47:48:
7b:60:07:4f:54:3c:35:1f:32:2c:3a:35:ad:50:da:
e5:eb:13:85:0d:8d:27:c9:d2:b4:a9:f9:9b:48:94:
07:32:66:ed:3a:e9:f5:17:37:05:00:d3:0c:87:58:
72:22:a8:2c:09:45:47:05:42:69:d9:d0:96:3c:88:
4b:8f:cc:06:0a:02:e2:8c:04:c8:a3:4e:fc:2c:33:
70:7b:63:cb:21:3c:71:bb:61:ff:de:89:98:e9:28:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8E:84:02:52:D9:9E:A6:05:09:AB:07:67:FE:06:04:9E:54:34:2F
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ba:d5:15:f6:29:e9:dc:e6:61:03:d5:5b:a3:ce:1b:af:37:
2a:e1:78:5e:ef:c0:d6:e9:e2:96:90:df:b5:18:85:ad:87:f8:
24:ca:b3:16:ee:2d:ad:36:15:72:a0:b5:c8:05:ca:3c:78:26:
9c:b6:50:a9:fb:6b:a1:a6:1a:5a:ca:ab:bf:d3:89:c4:f1:7b:
5f:81:4a:32:84:8f:9e:3c:ad:d8:b8:07:6c:41:10:3f:b5:54:
b9:f3:1f:dc:56:1b:64:dd:f0:d5:e0:d1:35:14:57:07:83:3d:
f4:ca:bd:f6:0d:9a:9a:da:ba:87:19:bf:d6:ce:fd:28:48:96:
b4:22:4a:ae:a6:95:da:ec:e8:5d:d8:d1:c7:c9:28:33:ad:c0:
c7:fa:38:ac:b5:e0:51:26:61:7b:d9:33:29:2a:e8:b9:3d:88:
10:fc:f1:dc:1d:2b:52:8a:60:80:eb:5e:55:66:a2:60:9f:3d:
5e:8b:ae:2f:57:61:a7:85:5d:f6:7e:58:a2:a8:fe:7d:3a:a6:
07:c2:33:cd:65:c9:94:36:90:d5:ea:ab:ba:d9:68:bf:b1:e3:
8b:ef:2e:29:7d:61:4d:e6:7c:0a:af:58:c4:5a:0b:01:69:3a:
e6:96:61:e7:0a:34:ad:d1:f9:42:cc:fc:ad:0a:02:8c:9c:d3:
c9:3f:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:36:10 2026 by rpki-client