Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: /fdwabAVPLKLJlCbNBvG9lyqU/o4RTl+q3wfdrUaiPE=
Subject key identifier: 87:75:7A:D5:33:B4:42:C0:E8:D6:2B:89:06:D5:63:A6:CB:8A:10:00
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019D39416A8623C8144A11DB5FE539C4AF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0A3E
Signing time: Sun 29 Mar 2026 11:01:21 +0000
Manifest this update: Sun 29 Mar 2026 11:01:21 +0000
Manifest next update: Mon 30 Mar 2026 11:01:21 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: oorDZ4D+ghlAuaSDuMHgU1rzjQ4GLjLJCy8Nu5ecaRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6a:86:23:c8:14:4a:11:db:5f:e5:39:c4:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Mar 29 11:01:21 2026 GMT
Not After : Mar 30 11:01:21 2026 GMT
Subject: CN=87757ad533b442c0e8d62b8906d563a6cb8a1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:ea:3e:66:55:f2:05:3c:a7:80:96:54:a2:
7a:84:f5:9e:50:57:b1:cd:29:7f:40:81:fe:78:47:
5f:6a:d8:67:f9:ed:2e:fd:99:7c:1f:f5:89:23:1d:
08:c6:81:36:3f:26:e0:c2:07:52:94:2d:18:3f:3d:
1a:64:20:fc:cf:fe:d2:c7:dd:d1:ee:37:04:69:50:
27:3d:67:57:26:40:5c:79:b2:ea:97:cc:36:86:9a:
97:b9:c1:40:47:76:4a:bc:3d:ab:41:c0:dc:71:f1:
c1:c6:76:cf:8d:4c:d3:e0:07:d5:6b:22:a0:9d:a2:
47:93:82:05:d8:2e:ee:34:c2:dd:7d:d0:96:3a:8b:
ab:8d:f4:33:7d:c3:46:7a:4d:5e:ad:2e:cc:9e:f1:
d7:36:ae:fb:37:30:b8:63:63:95:30:b8:c8:32:12:
5d:70:9f:dd:88:d2:6c:60:93:49:3b:98:aa:40:23:
94:92:f4:c1:3d:81:6b:39:07:bc:26:f4:f3:5b:b1:
b7:ae:c4:81:08:3b:00:59:40:20:3b:8d:17:8b:28:
6a:a0:a5:ca:5d:ea:b4:e4:60:b6:f9:f6:e3:33:54:
0d:04:95:b2:9c:b3:ed:f8:ed:e3:c3:a2:47:b0:f0:
a4:ff:13:59:e8:0e:59:d9:79:c4:85:2f:c8:86:fa:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:75:7A:D5:33:B4:42:C0:E8:D6:2B:89:06:D5:63:A6:CB:8A:10:00
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:15:2f:ce:bd:c9:23:46:65:7d:fa:e8:f9:73:4f:1d:9b:80:
d8:24:c6:8d:7a:b4:7a:26:d4:9e:ea:35:84:25:ed:7b:f1:7e:
a6:3a:b9:83:fd:bb:ac:7e:83:c1:5b:5c:2a:d9:d0:29:48:3a:
70:ca:92:f2:c7:ca:1a:2a:88:2f:8e:6c:f0:b3:48:f0:2e:09:
dc:df:27:60:dc:d6:65:0a:64:95:52:c2:9a:de:92:f0:2d:56:
cb:f0:f7:37:57:72:f1:52:9c:c6:58:d7:a6:01:0a:3c:48:75:
86:9d:4f:0d:2a:54:c6:30:9e:39:be:b9:4b:dd:e1:ca:17:fc:
27:b2:52:3e:fe:44:bb:8c:22:a0:5b:88:9e:53:34:56:a9:b5:
97:01:ce:59:f2:94:4b:23:be:35:97:00:b7:f1:93:67:07:ac:
36:27:0f:14:0b:db:37:71:90:81:28:51:53:4a:d7:a2:be:97:
46:e6:7f:1b:56:e7:67:c8:94:ed:c8:18:01:11:56:b9:b9:2c:
ea:40:47:f5:36:9e:e4:c4:8a:3c:9f:31:9f:5a:dd:d7:8c:d2:
46:44:9b:9d:17:3d:c1:60:02:a7:1d:99:13:24:b0:f5:28:38:
06:32:4b:18:9c:51:c2:69:8a:83:22:d1:eb:c6:11:b4:8e:f9:
d8:dc:a4:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QWqGI8gUShHbX+U5xK9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl
YWY2NGIwHhcNMjYwMzI5MTEwMTIxWhcNMjYwMzMwMTEwMTIxWjAzMTEwLwYDVQQD
Eyg4Nzc1N2FkNTMzYjQ0MmMwZThkNjJiODkwNmQ1NjNhNmNiOGExMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrLqPmZV8gU8p4CWVKJ6hPWeUFex
zSl/QIH+eEdfathn+e0u/Zl8H/WJIx0IxoE2PybgwgdSlC0YPz0aZCD8z/7Sx93R
7jcEaVAnPWdXJkBcebLql8w2hpqXucFAR3ZKvD2rQcDccfHBxnbPjUzT4AfVayKg
naJHk4IF2C7uNMLdfdCWOourjfQzfcNGek1erS7MnvHXNq77NzC4Y2OVMLjIMhJd
cJ/diNJsYJNJO5iqQCOUkvTBPYFrOQe8JvTzW7G3rsSBCDsAWUAgO40XiyhqoKXK
Xeq05GC2+fbjM1QNBJWynLPt+O3jw6JHsPCk/xNZ6A5Z2XnEhS/IhvrOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId1etUztELA6NYriQbVY6bLihAAMB8GA1UdIwQY
MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt
MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5
LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxUvzr3J
I0Zlffro+XNPHZuA2CTGjXq0eibUnuo1hCXte/F+pjq5g/27rH6DwVtcKtnQKUg6
cMqS8sfKGiqIL45s8LNI8C4J3N8nYNzWZQpklVLCmt6S8C1Wy/D3N1dy8VKcxljX
pgEKPEh1hp1PDSpUxjCeOb65S93hyhf8J7JSPv5Eu4wioFuInlM0Vqm1lwHOWfKU
SyO+NZcAt/GTZwesNicPFAvbN3GQgShRU0rXor6XRuZ/G1bnZ8iU7cgYARFWubks
6kBH9Tae5MSKPJ8xn1rd14zSRkSbnRc9wWACpx2ZEySw9Sg4BjJLGJxRwmmKgyLR
68YRtI752NyknA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:39 2026 by rpki-client