Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: RMj83BvA7wGakb/VpM0Iw3k+qNTynlLHpLDLqgv0lPo=
Subject key identifier: E3:A5:47:82:2C:98:65:5D:E9:1D:61:C0:67:52:6B:D1:57:D2:54:31
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019D37896D9DDF484355535B27C24CAB98D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 15D2
Signing time: Sun 29 Mar 2026 03:00:46 +0000
Manifest this update: Sun 29 Mar 2026 03:00:46 +0000
Manifest next update: Mon 30 Mar 2026 03:00:46 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: zHWtE6MELnKMsIvd0E3xJC2YA9RR9ZNG9ulJip72CAc=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6d:9d:df:48:43:55:53:5b:27:c2:4c:ab:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Mar 29 03:00:46 2026 GMT
Not After : Mar 30 03:00:46 2026 GMT
Subject: CN=e3a547822c98655de91d61c067526bd157d25431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:84:c4:98:6a:c2:ae:95:90:34:71:15:f0:
e2:aa:a2:f0:7f:94:58:28:db:1d:40:b1:77:16:ec:
82:c3:d4:7a:69:a0:47:43:87:95:2b:f4:cd:83:29:
87:62:fc:9b:c9:8e:eb:08:63:53:33:6b:70:7c:bc:
19:66:3a:0e:43:a8:2e:a2:65:2d:38:b3:3c:c8:46:
a9:ab:b5:17:26:ac:96:be:67:f6:10:d3:1e:58:38:
56:89:d7:78:b9:fa:ca:21:f7:7f:f3:85:9e:27:f7:
c1:7a:20:22:bb:4f:a9:27:e7:64:fd:70:a4:08:68:
c5:0d:c7:87:77:04:5e:7f:ce:d4:d6:8c:f0:f6:71:
22:ea:08:20:3a:1c:02:4c:ca:b5:7c:ae:af:56:53:
58:63:fd:60:cd:12:e0:ab:af:59:ce:f1:5e:07:c3:
4b:b4:3b:39:c4:03:97:01:e9:63:34:87:16:20:c6:
ba:53:69:9f:7e:11:0a:24:e0:40:21:31:41:d4:40:
fb:96:ad:0a:ac:5f:40:04:44:9e:43:88:8c:d4:15:
04:62:39:33:34:f9:8e:11:41:37:9f:82:ea:fc:73:
95:e5:2d:79:e4:e9:e7:78:ea:92:e6:7d:d0:40:ae:
88:c3:c0:d1:7a:65:72:0d:38:5d:47:b5:74:3a:65:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:47:82:2C:98:65:5D:E9:1D:61:C0:67:52:6B:D1:57:D2:54:31
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:66:de:fc:93:be:03:06:43:24:fe:d0:71:54:67:5a:41:85:
fc:f7:73:ad:a6:66:50:1f:d8:4a:a6:eb:8a:fc:0f:8f:05:2e:
b5:cd:69:5c:f3:34:0c:8d:10:52:70:8a:95:40:54:6c:6a:df:
b6:74:9f:51:3a:5a:77:aa:7f:2e:bb:c8:85:7a:62:97:b8:07:
12:56:73:2d:c9:92:7a:20:40:14:89:f3:b3:39:a9:83:6c:23:
7c:61:37:2e:d0:49:32:5a:54:8b:8d:af:b8:ea:00:2a:84:cf:
10:83:d7:a0:03:9a:1b:e7:d1:40:08:e4:3c:d6:de:0a:1f:39:
52:f0:21:18:7d:0e:27:e9:5f:eb:de:4b:89:6b:97:81:fe:83:
e9:bb:bd:d5:92:56:5a:9c:57:2e:28:82:35:c5:d7:08:8d:43:
1b:62:71:17:24:88:88:a1:b6:52:6f:2f:61:c7:3b:0c:52:18:
16:44:a0:e0:78:d3:36:fe:c8:c8:1f:18:6b:0f:b1:eb:a8:25:
66:f0:a3:22:d3:51:cb:75:a0:ff:ea:16:1d:95:f7:a5:47:6b:
73:09:77:d8:ec:ed:7f:3b:ca:54:32:8d:cc:76:8f:9e:6a:ab:
3e:5e:a8:ed:1c:94:45:8b:8d:fa:56:77:b1:12:11:50:02:32:
38:78:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client