Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: RHoKWqSrhpvbbEcOXSKZl71tiLSE/u02OctXVsMBzgA=
Subject key identifier: 96:DB:8B:43:89:23:20:74:20:41:E4:A8:4A:7F:17:24:82:67:36:AF
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 019D38D332CD4E65C3356376CFC780A11402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0F21
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: S6w96UHg_c8FTTvp7nnV9lxHYXY.roa (hash: UVfs6pTpT1WnTTA5N47wWDXe4Rk7XOyosSup+Jvul20=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: 5TcsCCqdjUeNi9emRA0yQV07loPZJMIRUJUrcR1rhiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:32:cd:4e:65:c3:35:63:76:cf:c7:80:a1:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=96db8b43892320742041e4a84a7f1724826736af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:5a:64:b5:95:f6:7f:59:67:3f:4c:ec:55:
42:e7:95:a9:3f:ce:86:51:d2:5c:b7:f5:a4:df:6f:
dd:51:f6:b4:7d:10:63:9f:f8:48:70:dd:49:94:30:
0f:ca:49:39:f1:64:66:e4:64:2f:f1:fd:8c:0f:f1:
ae:ce:17:15:d5:5e:54:3c:f1:60:6b:25:5f:df:8c:
31:7d:10:7f:6e:d9:f8:f0:22:7b:94:34:e8:b4:b0:
ca:c6:10:cc:9f:83:f3:7b:3b:26:28:4f:46:39:a2:
9a:9d:64:d8:63:ac:de:28:55:94:e3:18:5d:3a:7f:
d9:d1:64:5e:a5:cc:a2:c4:7b:2f:84:72:09:4d:6d:
47:65:d1:ea:c7:48:19:4a:15:82:4e:dc:a4:d4:72:
6c:11:9f:59:cb:8b:37:a1:28:8d:ac:43:40:63:a5:
24:6b:f9:6f:1f:99:5d:13:ef:af:62:ad:cf:27:41:
21:95:1d:0d:30:52:5b:31:56:e2:db:ad:89:63:e7:
25:ea:ac:3e:fb:9b:3e:c9:d0:55:bf:4f:06:a5:a1:
08:da:60:8a:08:0a:81:b4:0d:4a:be:36:a3:49:c5:
b6:96:12:c9:d7:1d:93:58:e5:e1:0c:46:14:89:1f:
db:d9:55:0d:d8:0e:76:0b:12:2e:d7:52:7c:8a:33:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:8B:43:89:23:20:74:20:41:E4:A8:4A:7F:17:24:82:67:36:AF
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:b7:83:ad:d3:98:d8:4b:b3:55:89:b6:4a:42:99:b9:1f:
70:87:9a:48:32:61:6c:1b:25:ca:f4:54:d5:bd:11:63:c8:01:
5f:e5:aa:07:a3:51:68:5d:52:4b:60:86:46:9e:0c:72:2e:3d:
29:c8:8a:59:c2:27:66:21:f7:2d:a3:2a:4a:c1:ee:30:23:24:
20:9e:ed:0f:ba:13:fc:f0:ab:c8:bc:56:f3:1d:dc:91:1c:1b:
55:84:01:dd:fc:59:4e:62:5a:f1:89:b6:83:63:81:58:60:a3:
fc:c9:0d:e4:9a:6f:ea:33:fd:4e:a7:c1:37:29:0d:33:58:2a:
31:38:74:6f:47:a7:8d:6e:89:92:77:6c:80:1c:d0:38:2f:2b:
d3:a6:64:c1:95:9f:98:bb:9b:5d:ef:9c:b7:3d:df:4d:cd:4b:
5d:6d:7d:66:99:89:d3:8f:e3:25:64:ad:ad:23:41:33:7b:b9:
b5:de:ad:56:aa:c7:5f:11:12:4b:74:71:39:05:75:72:3c:9e:
5b:60:8d:c6:a3:65:65:62:64:e0:75:fd:d9:2e:14:46:e0:cf:
3b:b6:8a:d2:e6:bf:ac:50:22:2d:7d:63:cc:3b:e1:bf:78:74:
47:c5:42:9c:0d:9e:0a:e1:6d:7a:b4:c0:b6:a8:c4:6e:6a:75:
16:c7:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:11 2026 by rpki-client