Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier: SMiFQ4maf6MCMt3WXeu/1nUg+4C+CG8z27ViSRI9JCI=
Subject key identifier: 93:85:6E:BF:C4:2A:AB:15:36:E3:F7:82:E0:EC:B2:54:FB:E2:E3:DC
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial: 019D38D39C26F51F8E0A982A25F856D334C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number: 045A
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: PlsF5PQ3EmH7blpykkipygbTcpI.roa (hash: zKxBR8QIzVtoSlF/4rcdDJ436zJksb7pP3puW4slSSw=)
2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: tIJiCXCrXXVFN4Cqt18WEY67/jBW4+kzthkLTyA+TXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9c:26:f5:1f:8e:0a:98:2a:25:f8:56:d3:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=93856ebfc42aab1536e3f782e0ecb254fbe2e3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:7e:60:d8:87:78:07:f1:4a:c9:d6:07:c5:
9f:c6:48:d0:de:76:3f:fd:d2:f2:a1:e9:ca:7b:cc:
0b:7e:16:9b:68:1f:c5:a1:75:db:87:2b:32:75:5a:
be:a8:dd:27:ce:a4:5f:1b:01:1b:98:76:2b:fa:56:
6d:4d:64:1a:d9:c9:35:42:b3:a5:af:cb:04:d6:f2:
54:86:7d:94:9d:c0:7c:31:9c:ed:82:4d:5e:44:c0:
8b:cc:b6:9b:fe:47:00:55:70:b3:03:10:05:e3:5b:
8b:ac:58:b6:48:d7:ef:b1:40:7c:1a:ea:ae:77:e6:
bc:d6:54:72:6b:cb:a8:8e:ee:5b:48:b6:d2:2e:68:
3c:44:94:36:db:1a:8c:4d:f1:c4:39:67:9e:ac:9f:
93:8e:10:a4:c0:a7:a3:fd:e4:de:2f:cb:5d:22:e5:
63:f9:ff:02:87:64:e5:14:bb:4a:9b:80:87:e6:cc:
17:ce:23:36:08:b7:ed:54:13:8a:69:e4:c6:97:f6:
73:7c:bd:23:77:39:88:f1:62:01:93:31:43:b0:a1:
6a:0a:70:be:f4:3b:0e:ea:64:78:5e:19:e5:21:3c:
cb:e1:6a:d5:a8:c8:48:5c:5c:d8:5b:ca:e7:50:a9:
c1:a4:50:22:f8:78:56:12:20:f0:e9:00:be:38:a3:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:6E:BF:C4:2A:AB:15:36:E3:F7:82:E0:EC:B2:54:FB:E2:E3:DC
X509v3 Authority Key Identifier:
keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:6c:24:2b:64:c6:e8:3f:67:41:91:48:c4:31:47:4d:58:
53:03:74:ea:40:9b:ec:c1:aa:0b:20:c8:4f:28:51:ba:c0:c7:
ca:7e:b7:76:3a:4c:cc:8e:f2:2f:d9:9a:fa:dc:09:c7:67:7a:
33:20:eb:4b:07:1c:82:07:50:cb:f6:6a:e6:b6:28:ec:06:ff:
08:fb:aa:3e:fb:6f:f3:5d:60:f8:24:10:92:6e:da:d3:90:9d:
3f:12:84:09:ad:67:e0:48:88:67:7c:f7:5c:e6:66:76:0e:39:
47:78:62:2b:a8:1c:de:72:50:0c:26:34:c2:a3:5f:e3:ed:04:
65:9c:fb:9e:af:79:91:bd:fd:3d:71:41:b2:55:01:a4:fb:2d:
d1:06:df:54:ab:0e:ff:ae:e0:85:b7:dc:f9:65:5d:41:5b:76:
67:9a:b2:03:2b:da:03:57:e0:c4:09:79:0c:14:8b:57:bb:e1:
37:65:76:dd:ee:8a:29:4c:6e:fe:c7:02:c6:d3:96:10:44:2d:
db:8a:11:87:a4:ce:c7:f4:f3:db:6c:71:25:65:c2:dc:e9:5a:
47:ad:6b:ba:e6:52:63:aa:12:fd:98:1f:fa:56:fa:b2:10:74:
af:39:09:a2:2d:4a:96:1d:ad:4d:14:0c:82:bc:ee:ee:70:d2:
d3:0e:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:03 2026 by rpki-client