Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: XELLXAW1nxJ+H5XAXcaq5iVzCa7/lI0luyNzOyyDECs=
Subject key identifier: 3D:5F:3E:34:A5:CB:03:D9:C3:51:F6:7D:C3:C4:80:4C:C5:19:E0:DD
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 019D37C073BAAC0B7A15F7B633394DD7EAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 17F8
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: 5MpTWg7vOC10jLratdl1_iJfqFQ.roa (hash: WBcsUKrOcStpVBrwzN2JImax8LyO4TXbQF8KR2s4TVo=)
2: B3x10EBzihJq8QxD90A60FEqEz0.roa (hash: X2mSotg1WCyJhyzR7z2UsB+9u+XI3nXErU62l1uIIvo=)
3: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: TAAEjMMtNVMe5tkDGEP2hbNOIAwIonLPw6IEVXMGGME=)
4: de_3vJfXeXhVKgCaiSs44gZCA8A.roa (hash: SZ/DHM8HFtP6XUXr8ZKZg3jTMbbqq1Kkx2fwqWMQRhg=)
5: x3YkXAPuFFAQU2qypU85h20QD78.roa (hash: 2sWys96464RaFQza5Xomz0qM/22LLb+sW69zdCIvPPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:73:ba:ac:0b:7a:15:f7:b6:33:39:4d:d7:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=3d5f3e34a5cb03d9c351f67dc3c4804cc519e0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:c7:d0:50:67:70:9e:9e:d9:8c:c1:da:fa:
03:ff:cd:eb:7a:af:fa:b1:44:23:24:4f:86:e6:34:
26:18:48:13:78:e2:25:0b:08:33:7c:86:fe:90:c5:
b2:3a:7a:6f:a4:de:7d:ca:2e:ab:de:6d:93:fd:46:
3a:16:6e:0e:9f:66:67:ba:03:49:48:53:ba:37:30:
b2:0a:eb:2a:3b:cb:54:b3:d3:88:87:3b:11:ff:8e:
f3:09:da:52:7c:d1:a1:ec:44:ef:4c:65:04:91:b7:
3d:ae:2f:e3:94:e2:03:40:22:a4:1c:2a:b7:b3:31:
47:d6:cb:de:d2:34:65:12:ff:c1:6b:f0:71:94:35:
3c:cd:ac:62:2d:f6:e1:31:80:f8:49:6e:50:24:c6:
ea:a5:eb:7d:f7:33:61:37:02:b3:57:68:4e:85:8f:
38:88:90:b8:26:a6:da:69:1a:c2:6a:26:2a:a9:29:
3d:4a:fd:ed:9c:bc:c4:c0:c0:58:cf:2b:d8:a5:6d:
6d:92:5b:70:02:2d:f3:77:d5:96:5b:9d:7e:99:4b:
1a:76:a4:70:73:2b:69:6c:35:fe:27:55:27:9e:01:
68:38:06:78:fd:a4:68:07:ca:e7:2c:e2:bb:e0:dd:
66:b3:18:0d:63:ae:3f:e1:60:ba:55:90:cd:ff:7d:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:3E:34:A5:CB:03:D9:C3:51:F6:7D:C3:C4:80:4C:C5:19:E0:DD
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:a0:41:cc:38:9e:b1:1f:df:d5:43:ee:f5:a2:c2:39:89:
13:9d:62:7e:68:18:44:d7:dc:72:e1:26:21:48:c5:01:6e:07:
5a:42:2d:c1:60:77:62:03:09:d2:47:c9:12:05:88:2b:e2:0c:
95:61:35:89:ca:9a:fd:29:86:43:f0:fe:09:5b:7d:a3:cb:09:
ec:28:a1:3b:b1:cf:d0:96:e2:1f:d7:33:25:a3:fa:30:2a:51:
77:2b:aa:32:4f:27:4a:a3:73:2f:c2:4e:03:83:8b:ac:2b:ce:
62:55:cf:4a:d6:91:18:19:73:93:28:1b:ef:45:41:32:81:06:
4b:45:d6:2c:6a:ce:c9:4e:02:c5:d6:ec:bd:aa:69:4b:85:66:
4a:16:74:a1:6b:66:45:b1:6b:24:81:07:ab:b1:bd:85:d7:fe:
ff:73:f6:60:1f:33:d9:ed:a2:2f:37:3b:e3:a7:59:8b:94:ea:
d3:0b:0e:0b:01:15:98:7a:1e:b7:71:fd:fe:b2:78:6a:b2:c0:
82:56:cc:cb:56:a8:ef:c7:62:00:c1:6f:92:56:a8:50:2f:c7:
04:8f:f4:7e:22:a9:3e:84:89:31:c9:e1:2c:68:05:59:29:a5:
76:24:f5:98:0b:64:6b:86:83:06:a4:66:bf:db:26:94:5e:4e:
cd:c5:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client