Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: vzLTP1hcuLaFNOyg6GKwP7GBSSDeWQul5jO+jt3lVv8=
Subject key identifier: BF:69:9C:8A:60:41:C4:15:59:C5:78:87:FB:DD:8F:AB:35:A7:7C:04
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 01A0C77CE2E92F03D0689F9BCC5FE363E9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 0AC1
Signing time: Tue 22 Sep 2026 05:00:45 +0000
Manifest this update: Tue 22 Sep 2026 05:00:45 +0000
Manifest next update: Wed 23 Sep 2026 05:00:45 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: OFJi+xiPzbp8msv19KiByPaF0XGL8CVdrSzaw3Qhf20=)
3: ekljz6keL0jMzgXLL61-BbfOA_o.asa (hash: 6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:e2:e9:2f:03:d0:68:9f:9b:cc:5f:e3:63:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Sep 22 05:00:45 2026 GMT
Not After : Sep 23 05:00:45 2026 GMT
Subject: CN=bf699c8a6041c41559c57887fbdd8fab35a77c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:20:2a:9b:27:42:18:c9:ef:69:88:39:d2:
31:66:0e:b7:60:40:1d:14:98:29:ea:fc:a5:4f:aa:
bf:9b:1f:55:55:52:4d:fe:0e:75:4a:5c:2c:61:f8:
3e:23:8e:d1:9a:96:ec:96:a9:e7:23:c0:a5:35:cd:
e9:a8:93:32:4f:11:c3:84:e7:3b:99:e8:79:cc:42:
f7:31:c0:9d:15:1f:96:4f:56:c7:0f:12:68:48:93:
66:5f:fa:94:3b:53:eb:d9:17:4f:39:32:d6:c4:9c:
42:7a:be:2d:f6:a7:39:33:b3:60:61:bc:85:3e:41:
71:3f:01:20:73:a7:34:74:cc:c5:2e:4a:3d:03:53:
87:b5:93:71:e4:6f:4f:97:e7:02:f4:21:33:8b:ef:
6e:16:21:ca:54:4d:25:ba:a5:98:3a:30:3b:42:4d:
fd:7b:a7:7c:3d:95:8b:a0:cc:e1:d5:96:a9:f8:a9:
f3:a3:3c:bf:09:3c:eb:15:c4:f2:3a:37:2c:cf:b9:
18:34:1b:4b:7e:63:cc:2d:82:7e:1b:35:99:9b:1e:
3b:35:64:c2:97:e9:75:6c:13:98:57:8e:67:1f:ce:
12:31:11:d1:96:57:ef:df:e7:cc:23:3f:8a:d2:44:
d3:6f:b1:32:f3:15:1b:09:2b:5b:fb:e2:26:82:73:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:9C:8A:60:41:C4:15:59:C5:78:87:FB:DD:8F:AB:35:A7:7C:04
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:92:6c:fa:d4:b7:6a:e3:41:0b:e9:0e:23:69:d0:73:72:
23:fc:75:d1:2b:2f:d0:50:d1:60:d6:24:a3:30:62:df:9b:88:
e9:48:f2:a1:ac:f7:23:c9:36:95:5e:6e:df:bb:dc:fb:1b:74:
fd:f8:92:8d:4c:97:16:5d:be:f5:94:ed:02:c9:66:c8:fe:c0:
be:0f:7b:3c:75:02:a9:19:f9:b8:c3:5d:e1:0d:d5:9d:8f:a9:
74:22:c8:5c:32:ff:97:b9:8e:7c:61:be:48:63:a3:4b:8b:11:
cb:dc:fe:19:1f:96:06:8b:ec:ff:3d:58:7e:95:85:e4:5c:80:
31:a0:89:39:e6:bc:c9:84:d0:9b:c0:f1:a3:9c:24:2a:18:30:
68:68:f0:5d:7f:d2:20:8b:4f:f9:5c:e8:db:2c:d1:7c:a7:7a:
ee:08:2a:77:91:cd:6c:5b:bc:4f:9d:8a:5c:dd:56:93:e7:6f:
77:c6:10:35:63:0e:be:91:f1:00:ee:11:ef:23:09:7b:5a:bd:
d4:06:8c:e2:39:c7:41:0a:5f:7a:9b:e0:74:bf:78:a5:cc:7b:
61:8c:61:d5:68:c1:5c:c9:90:80:48:ac:f1:3c:f9:b8:a4:95:
a2:13:70:fb:4c:1c:c1:04:11:3b:09:5b:97:09:60:1d:2e:cc:
6f:4b:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:21:27 2026 by rpki-client