Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: ChQAbDT8EMI/DvFmduJNLc3VY2YO2hPQzfSPyPvLpZw=
Subject key identifier: 87:69:50:3B:3A:B1:89:98:C2:D3:AD:D3:AB:A6:35:1B:0E:42:7C:CA
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 019D38D2DBEA5CDDACAB01EAA9DC9EF082EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0C9C
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: /DF3cFxaU16HmaN1vdBwrZ4nKrj9Ke6tiDcKFpVXL58=)
2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:db:ea:5c:dd:ac:ab:01:ea:a9:dc:9e:f0:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=8769503b3ab18998c2d3add3aba6351b0e427cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:32:0e:7e:f8:ee:c4:ab:13:73:97:5f:06:
62:22:59:e4:d2:7f:2a:95:c4:8a:04:22:a4:7a:14:
6e:d7:5d:e2:cc:67:b2:37:33:ce:f6:7c:9d:ad:e1:
b8:f2:04:8f:7f:3b:ce:82:8e:dd:3f:b1:ad:f8:dc:
ec:a9:11:8f:95:a6:e0:a9:5c:94:25:43:24:ab:90:
2c:df:0c:32:cd:0f:46:3c:f1:2d:98:48:6e:73:86:
45:af:60:70:59:d5:ef:79:92:37:54:d1:37:0d:47:
ce:52:e9:63:70:b0:da:63:7a:66:66:85:82:8f:8b:
67:38:f6:4b:cc:e9:4a:0e:f9:35:14:12:c1:89:15:
2c:36:03:db:0b:96:17:56:6f:c9:b1:08:5a:6c:d3:
54:3a:cd:0c:e1:61:4a:0e:48:20:e7:ea:74:d1:06:
6e:8b:e6:d1:30:16:8f:3e:48:a8:c2:e0:e5:d3:bd:
ed:02:b8:64:3e:a1:29:c7:38:8d:8f:7c:20:68:04:
30:6b:ee:4a:75:a9:c5:ec:df:f0:58:44:d7:61:8f:
57:e6:f9:f6:3f:ac:d3:60:e0:e5:49:d5:db:32:ee:
3d:43:fc:c9:6f:da:0b:5f:cf:eb:a8:cf:23:eb:eb:
fa:d0:aa:43:17:e6:ad:10:3e:c4:9f:41:57:04:2c:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:50:3B:3A:B1:89:98:C2:D3:AD:D3:AB:A6:35:1B:0E:42:7C:CA
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:c8:7d:5f:ce:76:96:ea:db:c3:df:6b:bd:e3:b9:31:b8:
8c:6a:4a:df:92:37:2b:96:25:21:e1:94:86:f2:0b:6d:bd:37:
bb:6a:e4:0f:f3:1e:10:a9:31:57:eb:0d:1e:95:e4:7a:43:e7:
3e:76:c9:d7:4a:41:4a:0d:af:62:07:6c:32:d1:9b:2f:cd:04:
d0:7b:7a:e4:42:db:bd:b3:e2:d6:67:10:d9:ee:26:c4:0c:bb:
4e:c0:31:c2:25:06:3f:41:09:f0:7b:35:5e:cb:bf:d3:a0:59:
11:ea:c3:8e:35:9e:da:ed:e1:e6:5b:00:ce:1f:1b:d1:6b:b8:
a9:31:ce:2e:7e:bf:54:25:ea:80:f2:7f:5a:bd:a6:37:c1:b7:
8a:d3:39:1a:8a:9f:1f:06:c0:d5:96:9d:da:f5:84:1f:84:2f:
96:61:a0:c8:2b:0e:19:4e:1c:0b:17:0e:94:0f:77:77:38:63:
29:29:92:bd:1c:c5:82:5f:a6:a2:2a:ed:13:95:34:86:80:bd:
43:e8:19:90:a5:f3:66:83:20:b0:4b:ee:16:4c:dd:0c:a4:ce:
36:8a:01:89:7f:74:54:2b:5c:26:7a:3b:f2:4f:f1:de:4a:49:
8b:e8:c7:4d:ed:67:cc:11:75:0c:ce:d0:67:94:56:15:c0:64:
da:6e:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:01 2026 by rpki-client