Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier: kHqhPb31cJ7rjmdDlVr+wlpOL5fc1D0cMeI4ezeS/j4=
Subject key identifier: 04:D6:87:98:13:B0:63:34:84:53:16:70:74:AD:4A:85:27:72:6F:41
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 019D98501087B7C62EDA5089E9A31167EF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number: 0718
Signing time: Thu 16 Apr 2026 22:01:17 +0000
Manifest this update: Thu 16 Apr 2026 22:01:17 +0000
Manifest next update: Fri 17 Apr 2026 22:01:17 +0000
Files and hashes: 1: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: aH0sGSCdSol9lAoV+CXRBkH7wdoGw7pqmzgMn02fNfY=)
2: nsafzYHdThFpu9-rRqs6y37frpw.roa (hash: D0eLVQ3+3hIwOhZgviSuI2d9Mpv6C+/kEPtIJB5T03o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:10:87:b7:c6:2e:da:50:89:e9:a3:11:67:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Apr 16 22:01:17 2026 GMT
Not After : Apr 17 22:01:17 2026 GMT
Subject: CN=04d6879813b063348453167074ad4a8527726f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:3a:f6:59:11:bf:02:28:cf:54:df:2a:05:
86:0d:ff:67:aa:f5:c3:31:1e:ca:43:01:06:29:50:
6d:c7:05:f2:a3:d5:81:51:c3:e3:b0:2b:46:5d:f2:
e3:61:5e:97:ea:14:ff:85:45:c2:6b:1f:c3:52:31:
78:68:01:7a:94:ee:8f:d9:e6:26:47:1f:5f:9b:a2:
cd:7b:94:4a:be:87:cc:66:a8:b7:0f:b2:c1:64:de:
33:ef:9d:64:7b:f7:85:d5:30:b9:ed:cf:4d:b7:85:
f9:6a:42:75:a9:a8:0c:2c:0c:f1:be:1e:9b:2c:42:
50:69:b7:9d:03:67:54:12:fb:b1:d4:ab:cb:2a:77:
b1:0f:4f:c5:fc:77:7e:76:8d:9f:1c:c7:20:92:f6:
c0:c6:ea:e9:a5:79:45:9b:30:03:f8:03:0b:9c:f3:
3d:61:93:f0:02:cb:63:e8:52:e1:78:da:3f:c7:e5:
c4:c2:be:9f:72:5d:93:93:37:07:96:94:67:e0:d3:
95:d3:14:35:df:0d:51:94:17:b6:87:86:bf:97:63:
0e:ba:f5:00:6f:00:b0:5e:44:9f:15:75:21:5e:d8:
54:d6:b4:99:42:1a:17:6a:d0:9c:57:68:de:d9:be:
11:05:2b:f4:20:a0:dc:42:8c:7f:62:c6:69:77:4f:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:87:98:13:B0:63:34:84:53:16:70:74:AD:4A:85:27:72:6F:41
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:5d:ee:4f:d4:9d:92:e1:3f:ed:35:16:66:b7:84:11:b4:
38:fd:75:a7:90:e6:f9:61:04:17:f0:84:9d:52:1a:9c:54:26:
11:97:49:6d:43:8e:6d:27:e1:75:fe:8a:bd:26:ef:2a:70:7b:
ae:49:89:e6:f5:3f:ec:71:a5:a8:0d:2e:a8:cb:69:84:2f:55:
8a:87:5a:61:b2:38:90:22:e0:33:82:45:9d:b1:c8:a9:ed:32:
8b:94:8e:24:e4:c7:2c:50:32:fe:a3:d1:ce:3f:21:39:2c:64:
52:19:b1:83:6e:30:fa:b1:71:4d:73:ba:ee:10:cd:0b:0a:14:
d4:d0:c4:9b:02:eb:4a:9b:fe:c7:3d:a7:c0:29:45:c1:61:c7:
81:5c:96:a0:80:33:a3:42:2d:f3:b1:da:90:d7:d5:3c:e0:f0:
c7:93:00:7f:b9:1d:3f:c8:72:eb:43:e3:73:ee:48:0c:f8:c1:
57:c1:0d:01:18:15:cc:73:05:be:1e:b3:dc:bc:19:ea:77:32:
27:b6:68:ac:51:ae:35:de:c3:6d:b0:3b:ba:b4:67:f1:0f:7f:
1c:90:6c:ae:57:44:3a:b3:80:30:c5:ad:7b:38:55:47:87:41:
07:d3:0e:b6:84:6b:74:83:1f:b1:af:82:33:e8:06:11:1d:46:
63:17:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:10 2026 by rpki-client