Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: TE3J1zqyM2h1GdpQftXxpuR5zr0af5t7M+1jwgyV6y8=
Subject key identifier: 2E:5E:AA:C4:D5:97:3E:57:1C:4F:CC:1A:39:DB:7E:AF:FB:30:DE:3B
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 019D3AC23CE115EA35A497AAEECDDBFF3200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 18:01:41 +0000
Manifest this update: Sun 29 Mar 2026 18:01:41 +0000
Manifest next update: Mon 30 Mar 2026 18:01:41 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: rZx1zQPhhNosIjPVGPxvv27iIKd/OWmQXLEY/y+2/8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:3c:e1:15:ea:35:a4:97:aa:ee:cd:db:ff:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Mar 29 18:01:41 2026 GMT
Not After : Mar 30 18:01:41 2026 GMT
Subject: CN=2e5eaac4d5973e571c4fcc1a39db7eaffb30de3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:2c:27:a4:ca:35:f8:b5:67:b8:83:e9:d5:
8a:1a:d1:d9:fc:8d:df:00:8f:74:b9:7f:22:6b:27:
85:06:70:64:99:8a:af:c6:f1:1e:37:a3:b5:0f:a8:
bb:f9:18:8a:70:c9:36:de:1e:2e:07:53:00:47:aa:
71:2e:f4:79:18:7a:00:5b:a1:f7:ec:22:05:6e:8f:
16:b3:65:40:dc:c6:18:14:7a:4f:b5:3b:4c:c1:b7:
af:83:9f:1c:b7:07:1e:c2:d3:39:d1:8b:bf:cd:af:
62:f6:b9:1d:06:4e:f5:09:2d:7f:52:a4:ec:bd:49:
1d:55:ac:db:6d:61:a7:24:c7:f5:47:72:86:b1:bc:
35:ae:06:5f:a2:85:c3:9e:31:02:8c:3d:8f:ae:0a:
ed:51:e3:7d:f0:e3:54:63:46:be:d8:ad:3d:d0:e2:
b9:6e:32:62:7d:89:6f:c3:ba:f3:fc:cb:99:48:82:
28:80:16:4e:6e:b7:47:e3:ef:5f:71:15:4d:f5:3e:
69:f0:d8:a6:b0:e7:e8:03:63:ba:62:8b:08:a3:56:
bf:0b:74:b1:85:78:f4:2a:c4:3c:03:cf:6e:ab:be:
c3:5c:cc:c5:64:19:ea:62:0c:6f:2b:6c:17:a4:49:
87:23:1c:28:25:40:df:96:f1:40:fe:48:6f:a4:8a:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5E:AA:C4:D5:97:3E:57:1C:4F:CC:1A:39:DB:7E:AF:FB:30:DE:3B
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e3:29:ed:9a:72:5a:a8:a0:c2:83:2f:33:c9:1c:90:37:bb:
27:0b:13:89:4a:51:8d:c3:77:47:e7:99:9d:b3:66:4d:52:c5:
f5:a9:38:14:0c:54:ce:a5:06:bc:13:12:d3:a2:b2:06:f9:94:
f3:8f:be:31:85:c2:d6:25:ad:6a:41:81:27:21:ca:2b:2f:4f:
a2:95:e4:0d:5c:af:7c:c5:2e:c6:1f:d0:e6:ce:da:1c:e1:e6:
30:f3:fe:5e:ad:5d:a9:eb:5a:7a:f5:e7:b6:0b:37:a9:68:11:
38:b1:58:a1:3d:c8:63:78:b0:ff:9c:91:9c:4d:a6:b7:12:30:
cf:ae:f0:b6:4e:83:95:35:13:c9:92:80:24:1e:a2:6d:2e:95:
0a:1c:36:d0:33:d5:07:97:1c:fa:dd:84:6d:f2:da:80:ed:8d:
8f:ee:20:06:44:44:d9:c8:f1:06:a7:d5:af:c5:fb:df:64:2f:
3f:64:a1:fa:50:eb:69:1b:ef:23:5b:7e:83:61:a7:00:7e:1b:
13:30:6d:7e:c7:40:82:6e:cc:af:0e:3b:3e:c0:2c:12:33:d4:
14:e0:b6:5c:59:1a:ca:64:81:e3:e7:02:ad:14:61:8a:9c:20:
1f:4f:41:ad:a3:2e:b5:f8:ab:b1:6d:d6:f2:ed:ba:b1:6a:61:
1e:93:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:36 2026 by rpki-client