Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: vfb46n0iN+Ozuple2G/X/5fy67ra20fV0ixRkyPDD3A=
Subject key identifier: B5:02:89:EB:DC:87:63:DE:B4:D1:47:87:A8:14:65:4C:6E:67:45:E5
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019D394153141F3F4FE4E2B86891FAC3B9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: I/cN5dXw9E7WxkgJvyM7jt50L9w2FWb+NtIOJ54OIJc=)
2: etj0sShjec2CBR92UCLlU4OhoHU.roa (hash: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:53:14:1f:3f:4f:e4:e2:b8:68:91:fa:c3:b9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=b50289ebdc8763deb4d14787a814654c6e6745e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:d8:29:ec:bd:67:c9:d0:74:01:8b:9f:ca:
9a:24:60:73:a9:75:17:0a:78:37:99:7f:10:09:a2:
f3:39:b6:c3:63:68:d9:1f:2b:c5:ba:88:7b:07:08:
f1:42:16:a0:ec:6b:6f:e1:e8:46:f8:6c:2c:31:97:
9f:51:eb:27:20:db:fb:d0:ec:3f:ea:9e:b0:5d:ab:
63:24:46:bf:1d:8a:91:11:c8:11:e6:e6:19:d5:66:
0b:02:c1:e0:80:b5:0e:da:fd:dd:f5:41:ac:b7:4b:
f9:21:ec:dc:68:e7:3a:4e:82:95:27:7c:74:b9:38:
ad:fe:70:ab:34:c8:1b:7a:a7:8a:a5:49:6d:aa:89:
07:5e:70:86:3f:e5:77:b9:34:bf:5d:6e:aa:95:4e:
53:bf:d9:d7:d0:e5:94:64:b2:31:84:bb:48:7d:f2:
e6:62:90:77:9c:db:5a:9d:99:d8:b1:fc:c4:8c:28:
13:04:f6:0a:11:c5:da:d9:64:34:de:c2:f8:18:6f:
e4:b6:25:6f:5c:ab:10:61:63:41:b8:1d:ae:a0:3c:
17:f6:99:16:61:e9:33:40:3f:30:b8:36:31:fa:94:
28:f3:ce:ca:07:ff:75:86:01:d7:38:2c:ef:60:8c:
fa:09:cb:3d:9a:de:1b:42:0b:aa:6c:a1:e3:45:8c:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:02:89:EB:DC:87:63:DE:B4:D1:47:87:A8:14:65:4C:6E:67:45:E5
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:f8:40:94:a5:2b:0f:ae:cd:c4:49:2c:d8:a2:2c:61:5e:
66:35:63:32:5e:ac:fa:f6:2f:87:c6:42:20:ea:dc:05:ea:18:
ce:61:be:58:2e:31:30:b6:44:f5:8b:b4:87:f5:db:ae:16:76:
b8:4d:d0:89:ce:88:ff:a8:33:0f:04:ba:69:6e:97:20:a3:7e:
0f:0b:5f:9b:81:f4:67:04:8f:fe:5d:a1:8d:1e:16:ed:79:f2:
ac:8a:b4:a5:05:5d:92:09:a0:71:22:ed:ac:ab:a0:3a:91:9b:
4a:97:4d:98:6c:c1:c1:8b:b7:f1:71:cd:93:9e:0b:67:52:28:
a5:2e:4b:fa:7a:a1:c4:0f:0d:24:73:5e:c3:88:0b:2f:85:70:
3e:b6:82:b5:84:31:3a:7e:04:aa:fb:81:36:37:0b:b4:56:e1:
05:65:f7:0f:05:f5:ee:5e:b3:4a:1f:e2:ca:fc:b0:a3:4a:12:
b9:3a:d1:c9:f4:4f:e8:38:aa:05:ce:5f:24:d1:1e:d0:12:6a:
a4:af:e5:58:19:b0:30:95:67:69:d3:26:3a:7d:43:0f:84:da:
f0:66:71:74:50:e3:33:b4:c6:e5:fc:18:ec:99:e2:66:b0:ec:
12:92:d9:bb:83:85:7d:1c:45:20:a6:52:9d:a4:f3:9c:c6:04:
72:72:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:16 2026 by rpki-client