Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: 7M2Bxl0mz6yEaLGysGnfmgTrrdrAz2QQlFbsJQZxjLQ=
Subject key identifier: 51:47:C3:2E:7D:1C:73:E0:3C:7E:DB:4B:DB:B7:CD:CE:74:F7:F4:AD
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 019D39412F1CF91BBBE0CF2C8ED6BC081BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0FCC
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: 1JkYuj0ZXjgybwM7EEGHvIjrA++7Wp9sS10ZjRrIifE=)
2: rvG6Pqknht3C9PPJsjRV_-EkR94.roa (hash: imN0OYjaMMnMPtfQkitSZR5ocmTWX3N8NSgzVWFNEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2f:1c:f9:1b:bb:e0:cf:2c:8e:d6:bc:08:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=5147c32e7d1c73e03c7edb4bdbb7cdce74f7f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:74:44:8f:f6:1b:2a:86:00:8d:fc:cf:98:
51:60:1d:f0:de:99:db:8f:23:70:63:76:30:24:b8:
81:94:c8:0b:88:81:0e:8d:20:20:47:15:66:5e:67:
a6:4a:27:e8:61:7f:5a:3e:fd:cf:fe:43:66:20:36:
86:6a:0b:ca:44:13:21:56:3f:b3:3a:c6:3b:65:1f:
24:01:fd:72:43:b7:51:30:b3:1f:f1:aa:cc:3d:e2:
12:04:46:ad:f4:6d:3f:54:f3:ba:33:a2:ed:94:52:
16:a2:cf:27:b6:2a:cb:e2:e8:0a:14:1c:57:a4:9c:
ca:4b:bd:d5:5c:2e:48:fc:9c:5e:4f:c5:b0:26:d7:
42:f9:aa:d5:cb:d4:d7:75:cd:65:e4:b5:63:91:a4:
30:99:c3:b1:b5:80:c6:ec:2c:d9:ca:60:e0:59:f3:
2f:d0:df:03:0b:eb:13:dd:1d:71:aa:90:cf:75:ec:
41:59:5c:9a:fb:59:fa:91:0b:18:cc:73:d0:49:1f:
89:ef:b7:ae:ed:35:69:46:16:73:c1:97:89:9c:88:
e0:de:3c:24:3f:21:5e:98:15:e1:26:8d:b7:24:96:
8b:8b:ac:57:06:43:7b:83:ec:22:30:d6:df:12:4d:
6b:3c:a5:71:d3:f9:6e:7b:7f:1e:ea:89:c3:b5:6f:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:C3:2E:7D:1C:73:E0:3C:7E:DB:4B:DB:B7:CD:CE:74:F7:F4:AD
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:8c:1d:23:59:bc:fe:8c:9d:3f:7a:c4:2e:09:8c:71:e1:
1a:de:52:ba:d6:c4:f8:59:37:9b:a0:67:da:ee:d1:30:2c:e0:
a6:1a:2a:a2:44:85:70:5b:e7:dd:c2:79:6b:a6:6d:a9:2e:a4:
f6:47:4a:a4:3f:17:f9:81:c7:6e:99:b8:06:3c:f6:61:4a:e3:
6e:74:42:db:f7:5f:d3:1b:0d:30:3a:64:1e:be:9c:d1:89:2f:
51:67:1a:74:8c:61:13:8c:c3:c9:6c:a1:9d:6c:b7:f7:19:f6:
a8:ff:f0:39:04:ca:b4:a4:e7:27:cb:00:e0:eb:0e:22:ee:fe:
37:d3:ff:b7:37:de:8a:78:84:fa:25:ba:0e:20:f4:00:52:af:
b9:f0:8e:62:03:96:e9:90:83:f1:15:d5:a4:ab:10:0f:7e:7d:
02:4c:2b:f1:74:8c:37:2c:87:7c:24:41:da:68:e4:e9:f1:4d:
ef:f6:5c:5c:92:51:d4:b7:08:10:ac:69:c5:7e:39:13:d2:e6:
11:fa:fa:d5:c2:f2:ab:05:49:e3:9a:f8:3d:70:29:d5:ea:1d:
d5:18:33:bb:e4:05:66:d6:2a:33:c9:f6:cd:8f:40:5d:f8:df:
94:ec:4d:da:29:69:44:69:23:0d:15:ba:bd:58:25:97:8f:c5:
d8:a6:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:31 2026 by rpki-client