Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: cXApe6eTvNhUoDS+CRrvf/RyKu6DDqDdRFin0s/gHZ0=
Subject key identifier: 25:E7:82:29:89:6F:17:D4:8A:21:7E:9D:7C:1F:0B:F5:7C:31:42:2B
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019D382DE66FC5B9D4C1DBF6C755094A80BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 157B
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: NWgOjpJAcgF5x38StsRhs0Z0UcMXceeXIYmfWFpXioA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e6:6f:c5:b9:d4:c1:db:f6:c7:55:09:4a:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=25e78229896f17d48a217e9d7c1f0bf57c31422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4f:d9:dd:fb:de:e2:b2:09:9f:d0:bf:d8:f8:
b3:29:21:16:28:39:6f:f6:37:58:1e:77:fa:a9:41:
73:b5:0c:a9:63:4a:4a:9b:65:4a:88:08:5e:c6:97:
27:ba:af:40:80:30:40:53:e0:5f:73:67:f0:f6:4b:
98:78:e4:3e:37:a8:4b:53:b3:98:ff:19:88:5d:48:
c4:2b:a0:41:2d:c1:04:2b:b7:cc:45:7b:4b:e9:e4:
d9:28:69:59:c2:05:bf:0e:f1:9d:60:10:a2:01:cf:
73:a5:55:fd:28:ed:36:c8:f2:a2:82:c0:bf:b5:8e:
68:b3:d8:11:73:d3:01:7c:56:16:52:0e:03:52:e5:
6e:ce:4a:a4:f9:8e:a7:80:ee:42:6b:ca:88:fc:16:
f3:52:0f:df:d9:88:7a:34:6b:10:59:89:90:bf:53:
bc:a2:dd:6b:f8:63:74:f2:f4:60:3e:e5:8e:bd:3e:
ce:34:0e:6f:67:78:c6:3a:3f:b3:fd:2b:22:1d:49:
c6:d0:c8:7d:c7:e5:55:f2:c7:f5:56:92:be:8c:8d:
46:90:e3:f3:5b:e7:b8:cd:a9:85:75:5e:9d:69:6c:
de:31:ca:96:0e:b8:de:90:d5:c7:b5:b3:eb:93:c3:
d6:ac:8c:af:0c:8e:d0:89:f5:4f:e0:3c:77:18:6f:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:82:29:89:6F:17:D4:8A:21:7E:9D:7C:1F:0B:F5:7C:31:42:2B
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:06:fc:54:02:9e:ff:01:c3:71:d8:0f:53:16:05:48:05:
b1:5c:30:b9:87:39:21:01:46:3a:97:ef:d0:95:1f:69:ed:07:
63:e1:b3:a0:bd:a9:ee:bd:94:cc:6c:aa:d5:33:2b:e8:6c:9a:
1a:f1:12:7b:d6:d0:16:ce:05:64:b1:6f:63:0c:db:92:f4:e2:
90:d1:0e:0f:cd:19:b0:f8:9a:62:2e:67:59:7b:c9:87:ef:bf:
07:97:1e:29:3d:b6:15:02:be:d8:78:9a:fa:43:1d:1b:5a:e1:
6f:f2:f4:1c:19:5d:37:a9:7c:fa:bd:c7:25:5c:d6:e8:ff:4e:
d6:3f:7c:8f:57:0b:a2:29:22:12:a7:45:7f:ed:45:0a:bd:10:
56:a2:94:d7:67:8a:7b:49:ba:93:2a:c8:88:de:c3:2d:d1:eb:
dc:f8:4f:92:27:88:de:7b:5a:58:a2:4b:b1:86:99:28:c4:c1:
4a:30:2d:e9:fa:1e:f8:02:8d:95:ff:91:99:81:4d:bc:5f:d2:
4f:96:a8:03:da:8d:91:0d:e5:b9:08:c3:e5:2c:49:de:7d:80:
bd:7a:64:3e:b8:94:73:17:05:c8:a8:42:4e:b6:8f:6f:5a:fb:
35:cb:45:4e:dc:4a:57:27:24:ab:2f:ed:42:d4:a3:b6:f8:1c:
47:26:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:22 2026 by rpki-client