Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: JMlaSMoKciGAYYWRfittadQg2K5UZgLGL3emcgaCxZA=
Subject key identifier: A1:26:23:4D:39:05:BF:38:3F:68:D5:C4:D4:D4:5A:EF:AF:40:D4:C7
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 019D390A2EE757E8A48098977FF04A6C1861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:01 +0000
Manifest this update: Sun 29 Mar 2026 10:01:01 +0000
Manifest next update: Mon 30 Mar 2026 10:01:01 +0000
Files and hashes: 1: 65_n4HcRGGxwgCz5d4_dnKpCj9g.roa (hash: DEaFxiTB1+C1PULNNZQKeRo9+cumwd9EW2oV3+stwPE=)
2: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: YsYe6WJI4a/tctdQ6TcwEvO+iyHp07hAa1W3WFRNPBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2e:e7:57:e8:a4:80:98:97:7f:f0:4a:6c:18:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Mar 29 10:01:01 2026 GMT
Not After : Mar 30 10:01:01 2026 GMT
Subject: CN=a126234d3905bf383f68d5c4d4d45aefaf40d4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:26:a8:12:f8:49:59:4d:fd:a2:4e:6f:17:
c6:2e:27:cd:58:be:0a:6e:26:f3:bd:d0:49:60:80:
73:17:ff:e8:01:b9:1e:b6:df:5c:d4:84:46:69:0e:
35:e6:80:91:0b:00:cf:65:91:dc:1f:1c:80:36:81:
5c:03:62:09:55:e1:62:7d:b1:f1:69:1b:a7:15:c0:
74:da:7d:60:73:47:02:86:ef:3f:bb:f8:9d:bd:26:
0a:dd:ae:9e:1c:28:2d:55:21:7d:99:46:78:61:5f:
5e:0e:d3:21:c0:1e:88:40:f9:65:93:a1:a9:7e:96:
54:07:0c:37:64:b1:9b:77:67:cf:ac:94:a0:16:51:
b7:0b:a4:c3:0b:bf:fb:6d:5f:0f:30:ee:54:54:9d:
84:36:33:63:97:a4:07:30:c4:4d:fb:a0:35:a5:3f:
12:45:ff:2d:9f:b6:5a:d4:88:a5:45:35:42:f3:65:
f3:80:38:6a:85:b5:9b:3c:32:51:bc:6b:3a:1e:f6:
41:bd:9b:79:92:97:75:38:16:45:05:dd:ed:fb:bf:
cf:8b:3f:4b:6b:f3:63:89:67:5c:11:a9:df:fb:dc:
f7:a4:ea:3b:9e:bc:ae:29:d3:2b:3c:28:bc:d7:7b:
0c:d0:73:37:8e:07:99:ad:3d:59:1d:45:9b:21:70:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:23:4D:39:05:BF:38:3F:68:D5:C4:D4:D4:5A:EF:AF:40:D4:C7
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:69:0b:92:52:cd:49:2e:75:f1:ea:11:d9:a5:af:49:c3:3b:
74:54:17:ad:47:29:cd:34:7b:13:c9:db:30:62:72:ec:76:66:
14:2e:e1:5b:c9:b1:14:8e:3e:e6:7b:47:67:02:0c:48:37:ab:
f5:c1:77:80:ea:5e:3c:4b:cb:60:f6:5e:28:45:c2:e6:c4:2d:
58:3f:92:39:b2:87:30:26:59:7a:1b:c0:68:49:34:b6:eb:0a:
50:d2:a9:4a:67:47:f7:99:62:5e:fa:80:9e:6b:d7:fb:04:72:
81:4c:88:f7:66:06:8c:2a:14:c7:a9:48:11:16:00:53:b6:93:
b0:23:cb:89:2f:7d:ee:6c:c4:a8:e0:79:13:14:1b:d3:da:08:
90:0a:77:86:21:cd:5b:b8:59:f1:99:55:0f:1d:21:f7:b8:61:
ad:78:d9:77:3b:ff:cb:b3:b1:fc:48:8f:13:6a:f7:62:80:7a:
8d:11:be:56:47:5c:18:b2:e8:cc:c3:9f:82:90:e0:5f:42:e3:
ac:0b:54:5a:75:8b:9b:47:99:5e:fd:1d:31:b7:64:0a:61:f6:
79:77:ba:ef:91:30:e9:80:f5:2f:50:ee:bd:37:db:58:69:da:
f5:03:c2:00:d9:47:33:99:b5:6e:a6:54:5f:0a:cb:2e:76:5a:
f4:e9:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:30 2026 by rpki-client