Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: k6WOSPaunjUvTXyGw7UVeq68BFMYw5Xp0D0zXYW2suM=
Subject key identifier: A3:94:DC:44:A9:64:F5:14:A2:E8:EE:16:A0:7E:BD:D7:E5:BC:13:46
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019D390A1EC8F90A1A52AB5E7FE2EE126360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0E98
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: Jw7B7VwIRrF/HgrXCKEEB5r1A6hxIZ88qWfi0ePP/nQ=)
3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1e:c8:f9:0a:1a:52:ab:5e:7f:e2:ee:12:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=a394dc44a964f514a2e8ee16a07ebdd7e5bc1346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:36:38:3c:17:74:3a:67:d0:cf:76:c2:e3:
0d:54:85:7d:7d:93:3f:34:23:8f:ed:7b:d2:73:49:
ab:cd:ef:9d:92:90:57:59:aa:cd:4a:5d:80:00:b6:
cd:37:38:6b:88:b8:e3:27:9b:34:e8:8b:90:25:09:
b6:12:03:17:fa:fb:92:e5:fa:18:7d:4d:de:2a:bf:
8c:21:21:f4:0e:22:87:2a:a6:8a:bf:e4:1f:76:0a:
0d:a6:95:e7:d2:17:07:70:06:da:93:fd:8f:bf:07:
c2:4e:f5:5f:da:8f:58:02:63:1b:ba:9c:f5:b2:28:
c4:d3:a9:4f:52:95:41:bc:fe:b9:b4:2f:75:ff:86:
0e:19:48:8e:6f:0e:69:0d:f7:6b:5a:7b:46:53:ae:
63:ad:42:dd:f6:4e:d0:18:f4:58:36:52:b9:4d:be:
ad:08:4b:03:03:aa:3c:0c:9e:47:1a:9f:e4:f4:a3:
a8:73:14:19:2f:c4:22:51:2d:28:62:97:b4:f5:61:
67:f4:ba:e4:76:b4:80:56:86:37:2b:f5:41:87:9a:
84:16:10:3d:a3:c3:f6:e7:fb:e4:8f:61:96:09:78:
f7:92:a6:6c:7d:69:a5:d7:6a:68:0d:62:77:47:d8:
2d:6c:f6:b6:df:80:17:a6:36:b2:fd:9a:84:09:59:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:DC:44:A9:64:F5:14:A2:E8:EE:16:A0:7E:BD:D7:E5:BC:13:46
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:66:3b:73:81:27:b1:a3:7d:10:c8:82:40:14:32:0d:23:
b1:cf:97:90:62:35:ec:29:4f:38:a1:b3:71:6d:f2:8f:89:2d:
c1:ac:56:85:6f:14:6c:b8:e3:94:2f:61:73:b9:eb:80:67:ea:
c8:09:34:f8:62:d1:bb:65:ac:de:23:2a:f3:e8:48:74:e5:7a:
7e:be:88:bd:cf:e4:23:1d:1a:58:80:e8:e4:90:4b:b8:65:b1:
ae:bb:c4:d0:d3:29:fc:64:6d:ea:fa:86:c3:e5:f5:cb:59:31:
46:05:6b:5d:42:2c:11:70:4f:bb:20:3d:e3:15:e4:6e:b7:c9:
bf:e1:a3:e1:bf:44:37:b8:d8:d9:9f:91:04:e2:58:69:4a:3a:
71:2b:f3:fa:2c:fe:d4:1d:0a:05:e3:3c:9e:68:65:69:ce:39:
3f:50:fc:31:01:ce:ec:d3:66:78:c6:b6:9f:35:bd:68:75:de:
7b:78:6c:b0:08:57:c2:25:1b:14:31:f1:7f:82:8c:ed:b9:b6:
cb:dd:1b:f3:09:30:30:64:2b:e8:e0:b8:ea:3f:cf:ab:2f:6c:
df:75:e1:eb:e3:cd:c9:db:ab:0f:aa:d7:00:59:84:83:68:6d:
bf:9c:20:3d:35:27:62:ec:e6:01:11:49:46:93:b4:ee:98:8f:
ac:14:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:22 2026 by rpki-client