Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: W/crtOramtAk0S+FYzH5dSRcmoHRDuM4mDtvAlvyjEE=
Subject key identifier: 3D:70:40:A8:40:9F:2B:22:EB:DB:15:07:0A:47:7E:07:E5:5A:21:45
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 01A1DF82E111772D61A7B9C80FC33971909A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 0B52
Signing time: Sun 15 Nov 2026 14:00:58 +0000
Manifest this update: Sun 15 Nov 2026 14:00:58 +0000
Manifest next update: Mon 16 Nov 2026 14:00:58 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: LCMnWvkE9vxLsLVL+r9xZWellohrJlUkSSzH18RoPgk=)
3: ekljz6keL0jMzgXLL61-BbfOA_o.asa (hash: 6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:e1:11:77:2d:61:a7:b9:c8:0f:c3:39:71:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Nov 15 14:00:58 2026 GMT
Not After : Nov 16 14:00:58 2026 GMT
Subject: CN=3d7040a8409f2b22ebdb15070a477e07e55a2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:4b:1f:6d:cd:16:c0:4e:c9:be:b1:91:d5:
09:bd:a1:d5:cf:a4:35:46:b7:58:af:1c:21:46:e4:
8f:43:60:f6:53:78:0d:04:93:31:b0:4b:65:d5:d2:
7f:04:5b:7c:a6:2b:f8:d6:82:c8:b7:e4:d3:09:f7:
ef:f4:08:1e:ca:50:ca:31:c6:ad:a6:ff:fe:74:e9:
2e:2b:08:4a:dc:17:b2:78:92:9f:7f:e3:3b:75:74:
5e:68:c2:20:e1:2d:34:b6:3b:ee:50:6f:ec:5e:2c:
2d:4e:1d:3c:d4:cc:79:72:da:20:ad:96:43:82:75:
7c:7d:05:ab:61:b9:f0:4c:90:65:00:85:5d:b1:c9:
5d:76:44:c0:fc:da:13:a9:35:50:b7:c5:cb:7d:0d:
13:6d:78:17:3e:42:21:63:b9:b3:e9:0b:c1:55:d4:
96:57:d8:06:15:14:dc:18:bb:55:dc:4d:e7:0d:70:
17:3a:a7:b4:4e:d7:c7:e7:f5:6c:39:0d:bc:99:a0:
25:cc:a5:c3:84:53:01:ad:3e:b3:2c:bd:3a:c1:50:
66:f8:31:d6:cc:c6:a5:09:6e:de:90:a2:63:11:b9:
99:40:b7:b7:85:4b:12:2e:79:6b:69:ca:68:09:cc:
73:21:16:65:3c:7b:19:13:5a:1c:4b:75:18:49:28:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:40:A8:40:9F:2B:22:EB:DB:15:07:0A:47:7E:07:E5:5A:21:45
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b4:d6:fb:4f:fc:f3:70:0f:87:d9:b0:d1:16:49:04:05:93:
6e:96:9e:58:4d:c3:4a:87:f0:e0:57:41:6b:da:2c:10:ae:f5:
0d:48:aa:98:d5:7b:a9:41:72:b9:41:22:86:56:10:b0:7a:c7:
df:3c:fe:c4:23:3f:4d:fd:e2:aa:c4:7f:17:6f:4b:24:09:93:
cd:d0:54:e1:c1:66:72:60:24:c4:ce:d3:f7:4c:24:1f:b4:b9:
c9:ef:d4:06:38:92:72:f3:44:e5:8c:18:b9:ad:4a:4c:b0:d5:
b7:1d:46:3f:4d:b1:c3:a7:79:ca:12:c3:c7:44:c5:e2:26:f5:
f1:13:28:a7:cb:59:f1:0c:9e:dd:7b:7a:74:18:de:51:8e:91:
a1:76:de:c4:70:b5:de:e8:71:14:0d:ab:79:5d:c2:ce:50:4b:
09:88:70:bd:a6:74:f4:c9:f4:a9:69:e8:dc:20:f8:74:40:72:
dd:f6:df:82:04:fe:8d:53:72:89:f6:11:e2:d4:2b:a8:37:0e:
57:5e:1f:c6:82:e8:71:5e:a8:b7:40:63:51:d9:b8:e0:a2:41:
74:82:90:48:49:3f:bb:8d:7b:27:16:6b:63:05:13:c5:9e:ed:
70:64:17:cc:4c:0c:15:10:69:ab:24:1b:25:46:9a:6a:dc:14:
6f:93:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:32:51 2026 by rpki-client