Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: hTBmJno/C6M87+jNMr4Mh6Oev55ly9uChi7ewiair3w=
Subject key identifier: F5:D9:20:16:50:E0:64:FB:7C:C3:9F:5F:C7:F8:8D:4F:E6:B2:6D:90
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019D389BF35E4D95F7345AF4168EB1BF4B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0E3D
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: gMKeVsR6My0HjArjjTiDxBN3M9hFtI1hDPv4kSRP7fs=)
2: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f3:5e:4d:95:f7:34:5a:f4:16:8e:b1:bf:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=f5d9201650e064fb7cc39f5fc7f88d4fe6b26d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:18:59:b8:4d:dd:4d:e8:24:dd:94:cc:10:
6e:0d:d2:14:ca:4a:13:b7:15:b5:63:fd:29:95:46:
27:d6:9a:a3:29:b6:ac:20:3a:47:f5:48:2a:60:86:
23:d7:76:c0:9b:3f:f6:7d:b9:ed:37:72:78:7a:e1:
fe:ae:e1:79:2c:70:cc:54:f6:24:eb:ba:5e:10:80:
e6:f2:34:02:c7:a4:86:b6:50:55:04:d0:18:28:3d:
cb:a6:d6:1c:7d:a8:ea:3a:4d:b4:cf:d4:71:2a:20:
e9:35:7f:34:91:e3:a1:da:5f:c1:2c:e1:b7:1b:c2:
67:58:49:81:66:30:c8:cd:34:ce:11:c6:09:b7:c5:
09:fb:52:39:64:5d:18:4f:bf:69:40:5c:ec:73:ae:
4b:cc:ce:50:41:58:7d:6f:b3:71:21:8f:8b:f1:b1:
f0:0a:f1:c4:00:be:cd:47:6e:e2:cd:e4:9a:35:70:
f8:a2:2b:2e:e7:98:5b:84:84:ff:80:f7:41:63:7b:
43:e1:91:59:90:ee:bc:ef:be:ed:38:2e:b6:c2:b0:
08:f8:93:16:eb:fd:4d:97:18:1c:41:15:88:da:6c:
95:6b:1b:04:f7:09:6d:a6:8b:2f:c8:f6:5c:02:01:
3e:fe:03:4c:bb:fe:58:95:df:65:d3:1d:1f:e4:c5:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D9:20:16:50:E0:64:FB:7C:C3:9F:5F:C7:F8:8D:4F:E6:B2:6D:90
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fd:56:ff:89:2c:4f:63:ef:89:53:99:4c:b5:a4:9f:60:9a:
c1:e5:f2:f3:c9:d5:6a:6b:db:5f:86:29:5d:38:eb:1b:bf:5c:
a0:57:e9:87:b4:d5:57:da:e7:75:f6:8c:ef:8e:45:5a:2a:14:
c8:5e:84:00:b5:4f:8d:64:c5:95:80:1c:16:4c:1c:e5:20:8c:
23:5b:dc:6d:c3:ff:0d:99:c9:30:20:96:50:f4:63:f5:44:a0:
64:13:dd:e4:29:cb:23:3f:9d:0b:b3:3d:f1:af:6f:7c:da:a8:
5f:85:b8:bf:9e:e9:d2:be:fa:36:76:3c:81:6e:a2:07:58:5c:
da:1f:e1:a8:b9:d3:5c:0e:55:0b:a0:11:a8:2d:00:ca:d6:ce:
59:de:52:d6:71:05:00:ff:51:52:ed:a1:63:a4:85:b6:64:4f:
cf:74:89:b3:42:29:48:8a:4a:e0:e6:86:96:70:ac:92:56:c5:
bc:38:4d:e4:c8:f9:96:82:96:3b:0f:cf:04:eb:eb:46:ce:22:
9d:0a:2d:d9:c6:ea:4d:8e:c8:6b:6e:44:b2:c5:78:f8:64:49:
47:b7:40:2a:f4:a0:81:62:4a:ee:82:aa:50:c0:7b:a4:35:bd:
ec:ba:c9:23:f7:dd:bb:4b:f4:5a:cc:9a:40:5f:be:a2:a9:13:
1f:5e:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:23 2026 by rpki-client