Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: eTu/9d7mYhSQemid6nv+Z9Z+bEkuIXdRVort8muH3x8=
Subject key identifier: 6A:88:98:91:1C:2C:91:70:6B:9D:9D:1C:42:6E:1E:A9:0B:93:43:84
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019CC9AC417F3567718F188CB8AC29F3BD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1859
Signing time: Sat 07 Mar 2026 19:00:35 +0000
Manifest this update: Sat 07 Mar 2026 19:00:35 +0000
Manifest next update: Sun 08 Mar 2026 19:00:35 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: lhbeghtdjNLMw8TrUWSKuKhyt3X+hSBfL2UNcqOzEes=)
2: Eutl85DJa5Wvda8Ay8PusU7FvGw.roa (hash: 0UQ/kddOeRvGr5lY/YK4culyM9uyjud6DEWUEwmL8/g=)
3: QHBZT5kThtefU6Yue7jJobqw9JU.roa (hash: pRD253NVKbYirBHDkZVZG3Wa4gP+JVRS3M7a27XwU/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:41:7f:35:67:71:8f:18:8c:b8:ac:29:f3:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Mar 7 19:00:35 2026 GMT
Not After : Mar 8 19:00:35 2026 GMT
Subject: CN=6a8898911c2c91706b9d9d1c426e1ea90b934384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:cc:d6:f0:34:d5:14:ed:77:b9:a2:56:13:
9e:88:76:d5:38:ca:bd:88:ce:93:5b:4b:a6:2a:2c:
b4:3a:2c:0a:b3:da:39:f9:c4:e7:b2:d8:ce:dd:6e:
07:18:58:c6:17:16:2a:18:26:16:3a:3e:7f:00:08:
1b:35:ac:c1:15:04:c1:9a:d3:1d:92:5d:80:23:f9:
6f:d8:97:2a:96:75:d3:e7:18:e9:18:13:74:66:b8:
e5:c1:07:df:60:98:74:88:2a:97:43:b3:e8:34:44:
68:ab:0e:40:30:03:93:02:ba:e9:f2:eb:8c:1f:30:
87:6a:60:d1:57:7e:5d:cd:95:67:88:e9:56:55:b1:
c6:e6:ad:77:ca:5f:c2:e6:a2:d0:10:95:24:c0:08:
12:81:4e:35:2f:a1:df:d1:d8:db:d8:32:7f:3d:ab:
ca:6c:7b:28:b2:03:c9:84:6a:b8:25:c9:18:47:f6:
37:62:b8:45:53:92:8d:38:76:97:78:43:2d:0e:e5:
7d:28:d7:c4:f3:21:de:7c:e4:37:62:da:cf:18:56:
3c:a7:af:91:28:42:8a:bb:9d:85:c8:d7:4e:9e:8e:
64:0c:ca:01:60:af:f9:5f:91:e1:ae:7f:93:63:2b:
f8:6f:07:75:ed:f1:47:d6:bb:7e:e1:e6:96:a2:39:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:98:91:1C:2C:91:70:6B:9D:9D:1C:42:6E:1E:A9:0B:93:43:84
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b6:8b:f6:9a:f7:48:f2:7f:fb:55:36:15:b9:85:c2:cb:9d:
20:d8:6f:98:96:d1:b3:25:fa:7f:97:66:c0:95:04:f3:be:fc:
63:e1:fa:8a:32:f2:93:5d:d4:3f:e3:0b:86:27:8b:ee:33:51:
9d:19:78:a6:0d:b8:e8:53:0e:20:f8:2a:d3:c7:7b:f5:c7:58:
f2:28:63:96:3c:65:5a:7e:72:ab:a9:71:b6:43:8e:73:a9:b1:
93:75:de:c4:c7:46:56:89:43:66:13:ab:89:bb:2e:ff:43:d2:
00:79:24:35:fc:c6:bb:0a:9a:07:a3:5b:64:27:72:a7:7b:3a:
5d:53:63:c7:85:ce:f5:b1:ce:ba:64:d4:56:10:a2:1f:d9:46:
4f:8e:6b:f5:28:87:78:45:12:e1:25:b4:53:30:ae:7d:78:8b:
86:2a:c3:fc:ae:31:bf:30:21:87:64:c8:9a:27:43:bd:51:91:
e4:35:29:f1:b1:5a:66:1c:27:93:0b:a8:7a:7f:09:1d:82:25:
43:13:56:74:6a:87:b9:e8:a9:31:cc:80:f8:cb:58:f5:4d:b0:
66:7b:3e:21:ee:04:dd:f0:2b:41:96:b2:89:fa:98:3f:00:14:
f0:86:03:ec:52:1f:a7:80:fa:ce:fc:20:9c:ca:ae:93:86:21:
7d:c9:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:13:40 2026 by rpki-client