
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: hUjOWs19Ni60YGIprV4ooIRgIL80+aXxWR2pEP8TnZM=
Subject key identifier: 5B:54:A9:73:15:37:CF:2E:3F:98:6A:43:EE:F4:87:DE:76:95:F9:32
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019CACB51314DA34C93980E16A48FEFBCC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1593
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: bx3Nda+vS1e9x4RQb7ZhojvZVWVB03Xn1557cWiLt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:13:14:da:34:c9:39:80:e1:6a:48:fe:fb:cc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=5b54a9731537cf2e3f986a43eef487de7695f932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:a5:2e:d7:03:63:0f:79:20:a6:f7:63:a3:
aa:0f:7e:76:ec:54:37:ba:84:2c:82:20:47:a9:78:
bd:c8:1e:a3:07:2f:48:64:05:77:b2:62:93:e4:1c:
c3:86:97:8c:15:5e:6f:1b:77:43:bc:91:0a:94:a8:
e6:f5:06:d7:29:57:1b:40:58:2f:74:f9:ca:37:e7:
d5:d0:4d:24:43:73:4e:d1:57:a4:6a:f3:a4:d8:25:
95:0b:27:e9:cc:a3:c4:80:d5:ca:66:8a:ae:e8:b0:
f1:93:56:5e:0d:f5:57:f3:1d:4f:72:b4:c0:1e:ad:
5f:67:2b:71:40:b6:4e:d9:d8:78:9c:5c:da:1b:7b:
8f:f4:51:22:2a:1e:9a:2b:45:fd:87:a0:bc:c6:3c:
53:b7:5d:69:78:bc:a0:55:53:d6:18:f8:b1:19:ae:
b8:0d:ab:dc:5a:be:87:ca:86:74:a6:41:9e:98:77:
8d:32:e9:5e:79:2e:6b:0a:9d:c0:6b:2e:05:3f:32:
7a:42:6c:76:fb:6e:b5:ee:68:c9:be:b1:09:d8:bc:
fb:1a:00:fe:ec:8a:92:54:c1:cc:ba:4d:14:19:bc:
56:0a:8c:c9:bd:11:80:fa:5e:89:52:3f:2f:62:2e:
e9:e6:93:d4:b1:d2:50:69:29:d2:fe:1d:8a:e2:5f:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:A9:73:15:37:CF:2E:3F:98:6A:43:EE:F4:87:DE:76:95:F9:32
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:66:f8:b3:55:c9:07:36:29:4a:9e:d2:72:ed:42:5f:36:46:
38:7b:7c:23:34:2d:07:d9:9b:f5:4a:5c:34:e2:e4:38:71:bd:
fd:99:3b:6b:32:24:d4:b8:80:d1:55:11:fb:7f:db:50:d0:1a:
53:5c:59:6e:48:98:e0:85:d5:f0:58:f0:1e:50:e2:00:12:d4:
ce:34:92:56:1b:5d:7c:9f:94:a8:de:d7:6b:bb:3c:ed:91:93:
a8:73:82:36:f0:27:05:22:60:1a:cc:c5:21:af:49:ce:4d:6d:
62:96:0d:25:0c:7c:80:4f:e5:6a:e5:91:89:37:cb:b1:1e:97:
df:56:71:71:b7:b5:c0:55:5e:2b:6e:7d:9c:92:a3:7e:bd:4a:
6f:be:19:04:d2:ed:c0:5c:dc:bf:5d:53:06:dc:84:54:53:e1:
c5:4d:4a:cf:b0:a5:4e:55:8a:41:24:1b:d9:db:1d:fb:79:3b:
05:f8:e3:66:8a:52:3b:ae:4d:a2:61:18:a6:76:ed:0b:3b:9a:
e8:de:1a:14:93:e8:d5:e5:14:f8:1c:99:14:11:b7:49:14:b5:
2e:50:dc:8d:3b:76:d2:ce:ad:78:73:44:28:0e:31:9d:3e:8c:
7c:49:96:8d:54:0a:60:a7:7a:2b:3f:b5:03:a2:24:29:6c:07:
81:37:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:36 2026 by rpki-client