Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: PtMTJUb5kUXwfxvdso20+Q6G+grBP34Qb5a2pW07cpI=
Subject key identifier: 50:AF:BD:38:39:37:EA:92:4E:96:7D:5C:26:37:DB:DF:A3:2C:73:75
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019D2EBD7319A4B85E148A3574DEB0A1E428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0CC2
Signing time: Fri 27 Mar 2026 10:01:00 +0000
Manifest this update: Fri 27 Mar 2026 10:01:00 +0000
Manifest next update: Sat 28 Mar 2026 10:01:00 +0000
Files and hashes: 1: OY-F0hhlIFsLBb-jhlJlozNHKDw.roa (hash: JseVfilW9clKoxV/EybNUEX+K2HrPNZ0B5i1na1LMg8=)
2: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: oUEiGoZ6rwRN1ajAQjJtdJvjsaV6dM5z4jd0VC4CwDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:bd:73:19:a4:b8:5e:14:8a:35:74:de:b0:a1:e4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Mar 27 10:01:00 2026 GMT
Not After : Mar 28 10:01:00 2026 GMT
Subject: CN=50afbd383937ea924e967d5c2637dbdfa32c7375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:57:99:24:52:a2:ad:25:53:a6:af:00:d6:4b:
23:db:bc:49:34:28:9e:8f:f3:67:d1:1f:6d:e0:c2:
a1:b7:19:d0:de:81:6f:a2:f9:75:0d:91:6d:bb:ca:
db:64:f9:68:fa:b6:b7:51:23:58:85:5c:68:01:ac:
30:52:db:39:b2:dc:85:c6:d1:bf:2f:ae:c0:9d:2d:
18:a9:89:b6:02:9c:0e:99:78:a2:1a:90:50:83:19:
0d:a7:b6:b9:62:43:82:bc:11:d6:9d:18:c6:33:a0:
0e:58:40:8d:61:2b:6c:09:d0:aa:20:d1:73:aa:51:
4d:c9:b1:d9:f1:d8:c1:3d:dc:b6:a8:8c:e7:1d:bf:
24:0a:f1:42:6c:b3:b0:0f:73:74:89:d2:d6:86:f5:
e1:a7:7b:22:9a:81:2c:9d:81:63:99:ca:58:8e:cd:
03:f8:67:88:ef:7b:07:68:31:a3:31:a6:fd:f9:15:
6f:bd:fc:b8:1c:04:3e:64:cb:f5:19:57:e7:9c:98:
61:c6:35:da:97:69:cc:af:e5:5f:c0:af:37:53:1e:
68:de:64:9c:68:89:73:20:fd:c2:e3:a7:7f:2d:8f:
4d:e9:17:bf:ff:48:c3:6e:68:9f:2b:a0:d6:d3:be:
fd:be:93:f4:5e:e6:c1:0c:96:2e:54:6d:aa:73:9a:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:BD:38:39:37:EA:92:4E:96:7D:5C:26:37:DB:DF:A3:2C:73:75
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:5d:43:f9:e6:6c:16:43:f7:e9:10:b7:1c:fb:89:d7:e9:
ce:bd:4e:00:ef:72:c3:c5:30:64:7b:21:eb:70:b8:e1:fc:74:
7e:40:37:7e:de:7c:e7:83:86:cf:89:7a:ab:4b:e8:41:27:75:
ba:1b:e4:2e:7e:9e:f2:af:46:ff:63:2b:ea:c3:e9:83:5b:69:
6d:ad:fb:0d:b4:8b:32:93:46:4f:d5:bf:20:8f:70:7f:5d:fe:
8f:7c:d5:4a:0a:3e:6c:5c:9d:c9:b8:1d:66:e6:03:54:2f:2f:
3c:31:a5:a4:26:f7:9d:bf:2c:a5:6d:74:24:cc:1c:cb:da:f3:
1f:4e:36:31:4f:75:8c:63:2d:fb:01:c4:45:84:78:4e:e7:46:
ec:bc:18:08:06:27:d1:06:73:c7:8a:76:79:5f:15:7c:bf:45:
f0:26:22:60:c5:9c:ea:8e:e6:94:2d:02:84:09:c7:d1:56:f2:
c5:ea:4a:c4:e3:f6:97:50:57:4a:87:e7:08:f5:79:69:83:fb:
45:16:4b:bf:41:71:7d:f8:69:a0:1b:cc:c8:f6:dc:7e:6b:a5:
2a:20:28:eb:4a:b5:75:c6:4a:dd:2f:be:18:88:b1:49:0c:37:
58:5d:fd:9f:61:1c:26:af:2d:2e:1c:7e:0d:e9:f3:99:b3:30:
2b:49:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:08:15 2026 by rpki-client