Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: ucaGhfExuHw9KecPEr9Aef7XQODLMj0W1AXYv2UCS7I=
Subject key identifier: F3:CA:19:A5:40:EC:FF:F1:BC:0B:BD:BB:99:D0:34:30:8C:7B:AF:12
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019D38D3DB6EC145FD15BE1A996D0A941349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:41 +0000
Manifest this update: Sun 29 Mar 2026 09:01:41 +0000
Manifest next update: Mon 30 Mar 2026 09:01:41 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: Ljq8DoFm0K5ZyE9WGxSDZXhfGqgyNwRFY+Mq7XK15EQ=)
2: T4qruvGZFs_aXMb97g2-jFZUYXE.asa (hash: mtheudfewBlecebzdDrT6Ithx8eec3qH3GXNnYLbTlg=)
3: iuE68_Zu0uK275nJpb_6tInq2NE.roa (hash: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:db:6e:c1:45:fd:15:be:1a:99:6d:0a:94:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Mar 29 09:01:41 2026 GMT
Not After : Mar 30 09:01:41 2026 GMT
Subject: CN=f3ca19a540ecfff1bc0bbdbb99d034308c7baf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e6:31:6f:ab:14:46:a5:64:97:26:ac:3e:fa:
87:45:82:1e:f6:99:27:07:b1:61:96:53:d2:4e:2e:
69:14:d0:42:74:11:85:24:70:be:a7:6b:10:c0:60:
6e:37:1e:19:b0:f9:5f:b4:b3:33:a0:43:ce:bf:09:
1d:c0:db:c0:29:83:7f:28:6c:fc:f8:98:ab:ee:c3:
c8:0e:11:95:a6:a6:72:74:c8:54:a0:ec:06:95:47:
53:32:e5:92:ce:cb:6f:49:84:95:cd:8e:71:1f:55:
2b:79:36:5d:79:7d:a8:31:01:b6:f4:ef:b8:44:4b:
6d:0b:6f:a2:e6:85:4d:34:6f:fa:c5:a3:43:64:11:
e4:64:37:f5:7b:a7:1a:3e:e5:22:8e:02:3b:77:29:
a4:8c:e7:67:ef:62:a1:d4:40:f0:c0:d2:3a:43:e1:
21:b3:0c:0f:bf:43:b9:18:ba:a9:c5:0d:27:cd:24:
a1:ac:14:4b:55:32:81:a7:48:df:c8:12:e8:a2:c7:
b7:d0:28:db:25:15:16:af:05:de:27:db:63:bd:96:
87:e3:0f:dc:05:dd:6e:74:19:c6:47:12:9e:67:63:
d1:30:da:af:c1:7e:bf:be:a0:ae:c0:65:03:5b:14:
16:1e:5c:b8:53:46:20:0d:46:85:73:e7:e1:47:0a:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:19:A5:40:EC:FF:F1:BC:0B:BD:BB:99:D0:34:30:8C:7B:AF:12
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:99:5c:d1:af:87:f3:28:02:a3:ed:4c:e5:bb:4f:8b:a8:60:
4b:1d:df:86:f4:d9:fa:88:94:6c:e6:2f:a8:e0:c7:b9:f7:b8:
fe:b7:28:d4:38:eb:ed:a7:3d:7e:84:3e:bc:5a:2b:4e:52:e2:
85:0b:d3:01:be:a7:b8:98:9a:d7:8e:e1:ae:bb:24:93:82:41:
66:e5:c5:57:d0:11:15:3d:05:fa:31:65:1c:e3:b0:55:44:db:
e2:cc:34:97:30:31:72:07:c9:16:30:30:69:6b:5a:56:39:5a:
f9:ed:d4:ba:17:32:a4:44:ac:35:c5:fb:17:79:4e:9f:01:48:
ad:46:15:42:61:37:1c:22:b8:f0:e1:ec:60:9d:ac:a7:be:9b:
0d:63:45:f0:fb:e7:9c:b9:3c:23:c3:77:ec:09:5a:14:ba:9b:
fa:22:06:9a:68:34:cc:2d:17:dd:9c:4f:66:69:ec:d3:fe:bd:
72:1e:d5:d6:d8:e4:9b:9e:54:a0:3b:ac:63:71:b5:e6:69:46:
61:cc:79:63:5b:d1:77:4e:68:1e:92:1b:c8:b5:78:dc:6f:22:
36:1b:db:63:78:52:47:84:4d:87:e9:1a:c0:1f:3c:82:37:cd:
0a:fd:27:f9:98:11:5d:78:0a:24:ad:92:35:91:7d:a1:28:b2:
86:bc:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:59 2026 by rpki-client