Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 9cVzKqXSKg61ta7Xdfgwp4iWPybyMwJq4WiNLw5l+bU=
Subject key identifier: E6:42:32:17:16:BD:C7:00:5C:ED:9F:8B:34:6B:26:31:28:1E:FB:66
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019D39408CAD45C225EBDB9DC5A94BC1E811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: rNqDO+bdsFHU7C5I2DNRGUvfUxck9SiRb0zPiHE9d9U=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8c:ad:45:c2:25:eb:db:9d:c5:a9:4b:c1:e8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=e642321716bdc7005ced9f8b346b2631281efb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:1a:14:8f:b7:27:58:59:6b:b5:24:ed:0f:
0d:1c:a7:e9:e0:14:f0:b8:a4:7a:82:22:a1:bb:3e:
01:a3:ed:a6:b4:15:8c:8c:19:b9:1e:6a:46:c9:4e:
f0:60:4e:4d:bf:5d:87:59:f0:2a:03:d0:1b:cf:15:
6d:16:d4:34:1f:49:21:04:30:6b:46:de:97:ee:5e:
a5:8c:87:17:cd:f7:bd:92:dc:e0:4b:d1:bc:b4:62:
01:d6:1d:2a:73:c9:0a:42:4c:8e:0c:51:b0:a1:fd:
78:f4:c7:48:f8:54:26:cf:7f:b0:65:fa:a9:c5:b0:
cd:70:c2:70:06:fa:71:75:5c:a1:46:e1:ad:e3:08:
d4:ae:a3:6c:eb:3a:38:a7:65:4c:1b:68:2b:62:c3:
e2:70:c7:6d:e8:46:e1:02:4b:4f:ef:92:db:4e:8d:
4f:57:30:68:82:a4:ed:29:99:ca:60:22:d3:a1:3f:
8d:27:26:9d:b6:ca:1d:9f:cc:da:b1:d5:0a:a1:fc:
87:2d:c6:54:85:29:45:b2:f2:f2:b5:4f:62:4a:79:
f5:56:69:bf:83:9f:6f:fb:a7:fd:02:5f:ba:7d:d6:
7e:91:a8:33:d7:13:50:81:ba:d3:af:d3:cc:74:66:
c1:8b:17:ab:b2:d7:1c:86:93:b5:3b:5f:47:ae:fa:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:32:17:16:BD:C7:00:5C:ED:9F:8B:34:6B:26:31:28:1E:FB:66
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:37:32:e0:e7:9b:34:2d:c8:8b:fc:e3:2a:b2:1d:fc:ce:7b:
ed:61:5d:f7:7b:76:4c:cb:ba:0b:85:0b:9a:51:0e:e5:fc:c1:
92:56:7a:ef:cb:e0:86:92:7a:db:1b:9a:8b:fd:70:60:02:8c:
88:d5:8f:72:fb:40:bd:33:da:a9:e6:0e:7e:cc:8a:2a:e5:95:
14:81:d7:e8:68:77:cf:ff:d0:82:8e:2f:76:94:91:30:93:92:
2a:ab:91:29:c2:be:64:e6:f3:d9:df:fc:81:e2:f5:07:39:72:
61:1d:6e:f8:70:49:3a:6e:69:1d:15:ad:e4:e2:20:94:86:78:
17:01:8a:8b:84:f5:05:e2:d4:26:bb:98:e6:9c:9e:9c:85:dc:
65:42:cb:93:e5:c9:a8:e1:fc:9f:4e:c3:28:53:23:1b:5c:00:
12:73:92:1b:b1:06:57:8b:ae:8d:59:88:fb:d3:f1:c6:01:0b:
a4:96:12:a1:b9:d2:06:95:fd:7d:0a:bb:d3:ca:ca:b5:dd:ea:
21:c2:fe:2d:33:c4:3c:be:f9:85:16:ca:c5:2f:da:59:b4:1e:
02:ee:18:7a:f3:3f:b2:3c:62:a7:97:72:17:d4:1c:e0:29:0d:
c4:1e:40:e7:94:dc:e3:8c:35:66:d8:46:be:d3:2e:85:3b:14:
3b:ff:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:38 2026 by rpki-client