Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: kQo+lFlXBV4VMwF5NQd5xsesp7te26Mv/9+3DMEul08=
Subject key identifier: D6:B7:1F:43:DA:65:E6:5D:29:00:E4:42:D4:74:22:36:B3:13:0B:0B
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019CAC7E2303C19582F1D0B0B48D81AC16D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0BB2
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (hash: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: qHQY90lwTUxwcEukYNcC/VtYLJveMy/qtuzzU1V5m7Q=)
3: xWhq4pJqpBDCOAn9j2p-jZnUVxw.roa (hash: 1dUwvyE89fb3mgfozy7QJGPfLkBx30lg9K5/pQzltFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:23:03:c1:95:82:f1:d0:b0:b4:8d:81:ac:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=d6b71f43da65e65d2900e442d4742236b3130b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:66:01:20:4a:57:39:c0:02:6d:05:3f:09:
e8:0f:12:14:94:03:d5:fb:2b:11:9b:96:2e:89:d5:
be:e5:c2:0c:a8:dc:22:06:ff:b1:68:2b:38:48:63:
f9:60:de:47:63:20:28:36:84:ec:56:98:7d:76:72:
f2:12:45:fe:55:9d:74:68:a7:68:93:7b:9f:77:d7:
05:34:11:a7:cb:4d:11:78:4f:11:5c:78:0e:bc:f4:
35:81:c4:77:62:4d:df:fc:ab:86:ae:9b:88:08:2b:
82:3e:5f:1f:91:13:e2:e5:55:33:82:57:f3:68:19:
7b:04:20:83:31:85:49:1d:d2:af:51:af:68:6f:bf:
23:72:e5:70:25:5d:78:34:17:21:72:bf:82:f8:94:
bd:97:0f:b1:a0:c7:43:11:5d:0d:7d:ec:1a:79:cb:
28:83:5d:68:c8:f5:da:7c:26:b9:3e:c4:1b:e2:37:
ab:52:6b:9d:84:d1:6e:7b:85:4d:cd:7b:f5:b0:3e:
71:6f:d7:e7:c3:20:9d:82:55:67:b0:88:1c:b7:d8:
bb:b5:20:31:f6:b3:af:fa:a1:5d:d5:2c:cf:ad:82:
74:48:15:27:39:5b:5e:c9:13:d8:7c:73:98:3f:37:
3a:71:7b:74:9c:15:1d:c8:44:71:2f:52:a1:1b:0e:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B7:1F:43:DA:65:E6:5D:29:00:E4:42:D4:74:22:36:B3:13:0B:0B
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:2b:d8:3c:43:3f:c6:74:fb:1e:e2:99:02:62:02:69:c5:
bb:50:b1:ce:f5:55:a3:51:4e:b0:c3:73:83:72:e3:d7:4c:e5:
a8:23:8c:a9:7f:be:31:25:ea:a1:96:34:4b:3f:d6:a1:09:74:
54:6c:74:25:51:8b:64:18:87:b6:35:a4:b3:bb:c1:d7:7b:6f:
b9:d4:79:52:f1:8c:ef:5c:dc:db:ed:b2:ab:30:b8:8f:03:90:
37:66:f6:ae:1d:12:38:70:c5:44:11:22:e5:f3:13:c4:d0:a4:
e2:e4:b3:cb:a9:b4:ce:ef:56:9e:dc:01:aa:7b:df:b9:07:15:
37:e9:5c:3c:32:6b:00:bd:66:6e:5a:d3:f7:7d:bd:86:d2:2c:
77:59:54:3b:a8:86:f1:6e:ae:87:95:e2:53:90:53:89:b9:06:
75:86:65:e6:25:2f:29:8c:15:2b:69:b3:f2:d9:fc:39:8d:72:
be:76:fd:06:f2:ca:58:62:44:a3:4a:97:2d:a8:71:b2:e6:da:
e0:ec:2d:61:b0:f0:9c:31:72:90:b6:07:2d:99:b5:18:79:97:
61:9e:40:a7:b0:10:04:3d:f3:4b:81:12:cc:d8:66:0f:6f:fb:
b7:43:48:63:3c:f8:f4:ab:c4:ae:a4:c4:5a:82:23:f9:2a:01:
6e:14:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:17 2026 by rpki-client