Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
File: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft (raw, json)
Hash identifier: 63OSR16WdySwxReR8w9hD9AhKZ4eIry02OXc7eDPJRY=
Subject key identifier: 35:CD:4A:15:E9:5E:59:C4:99:F9:FE:CF:02:50:03:A2:0A:E0:3E:FE
Authority key identifier: 6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
Certificate issuer: /CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Certificate serial: 019CE3A329FD35C31E759A201FAFDCA8A776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 20:00:47 +0000
Manifest this update: Thu 12 Mar 2026 20:00:47 +0000
Manifest next update: Fri 13 Mar 2026 20:00:47 +0000
Files and hashes: 1: _Y3KWPgW5g7tWbAn0IxId-tYvoE.roa (hash: aYg7tkOr0lKYUUmicpFlbnWgT/KohMLQLxFqgfb/dJo=)
2: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl (hash: 7GMlhLrDPjqk+7v9YvoLQVRAYdps3nfmlFJwW+Gcm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:29:fd:35:c3:1e:75:9a:20:1f:af:dc:a8:a7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Validity
Not Before: Mar 12 20:00:47 2026 GMT
Not After : Mar 13 20:00:47 2026 GMT
Subject: CN=35cd4a15e95e59c499f9fecf025003a20ae03efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:6d:f5:b5:91:ed:81:e3:8d:dc:46:18:c2:
a0:d2:80:e5:bb:41:29:4c:bd:5b:bc:44:bc:33:5a:
e4:c2:1d:7a:67:36:31:6d:04:5c:08:2e:02:7c:47:
b7:61:ff:a0:14:b3:c8:a3:90:1a:c0:b1:1a:cb:6a:
78:ac:67:df:89:1b:73:e9:10:64:b2:2b:15:2b:c4:
38:d1:73:1c:02:eb:8a:e6:33:ea:78:a9:40:10:3a:
e6:3d:72:34:62:ba:b4:9a:3f:49:8e:fa:af:8c:53:
2a:f2:3d:cc:70:db:b1:ef:12:e7:04:23:f8:d0:2c:
80:b5:40:82:9f:72:52:dc:65:8a:70:44:42:6d:e2:
03:fd:73:30:68:4c:7f:46:4c:b0:e2:6f:39:cb:af:
4f:0f:4e:4e:1a:b5:c7:e1:87:5c:dc:1d:8c:3e:41:
a7:8d:40:d2:cf:51:65:bd:cc:b4:f1:29:49:5f:8d:
48:01:f1:85:92:a5:de:4f:44:cf:8f:9c:a2:fc:91:
5a:60:d7:0f:c7:61:f3:be:23:58:d6:34:0f:7b:55:
6a:47:aa:bb:9c:93:28:15:fe:68:c6:7a:59:94:44:
21:6a:b2:5e:64:f3:ab:15:13:03:27:08:b8:88:2d:
8b:a4:cc:e6:a0:02:86:5d:12:e7:5f:dc:f6:f0:0c:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:4A:15:E9:5E:59:C4:99:F9:FE:CF:02:50:03:A2:0A:E0:3E:FE
X509v3 Authority Key Identifier:
keyid:6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4e:82:12:1d:40:24:45:51:82:01:a1:ff:95:e7:6b:0e:9f:
b3:e6:b4:0a:26:89:60:21:76:31:1b:d4:47:48:8a:f3:cc:63:
d3:88:b5:69:ad:b5:d3:17:ab:4d:96:c3:34:71:00:dd:2f:6d:
a6:a2:1a:c7:ba:ed:70:37:72:22:9b:9c:32:8d:65:45:da:62:
ee:61:2b:4d:65:ac:c0:47:94:0a:61:a1:7e:4c:d7:50:8b:b6:
70:cb:1b:62:2f:e1:f2:22:03:d2:c2:85:50:28:d1:0e:00:8b:
a3:9a:05:70:a7:a8:ab:97:8c:be:64:7b:56:13:8a:77:af:d5:
b2:a6:16:8a:4e:f2:80:c9:88:ca:71:3e:77:05:ad:8f:29:81:
89:e3:4c:61:e4:fa:ab:9d:3a:9a:f9:bc:eb:64:d7:2f:5a:2c:
d6:2b:00:f8:34:e4:3a:90:5a:80:33:fe:ff:12:27:d5:8b:37:
80:e2:34:e8:43:64:41:da:67:4e:38:f1:f1:1e:11:36:71:c5:
5e:9d:80:c8:04:87:81:be:62:d2:89:3c:4d:06:1c:c1:e8:ba:
fc:34:49:0c:08:43:c6:83:e1:c0:f5:65:37:b5:b9:06:9c:fd:
55:56:cd:e2:ae:86:2c:d6:fb:a5:c5:1c:47:46:0d:d5:7b:96:
42:f1:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:56:15 2026 by rpki-client