Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: D56Re8LyhkS0yNtCB966XC8z7fvEz12FkeSWbe1vilQ=
Subject key identifier: 54:E8:AB:EF:39:78:06:23:A2:FB:3E:FA:1F:C7:65:6A:41:1E:20:B0
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019D37C11BFED1F9CCAB40B94634F768BB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0A86
Signing time: Sun 29 Mar 2026 04:01:35 +0000
Manifest this update: Sun 29 Mar 2026 04:01:35 +0000
Manifest next update: Mon 30 Mar 2026 04:01:35 +0000
Files and hashes: 1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: LkVtblbkb+s2MFxGmA1rUfArhuT8ViJGAqfs2qpNBfo=)
2: niUV0djy4P_JQW5PwXS4h9UDq3c.roa (hash: dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1b:fe:d1:f9:cc:ab:40:b9:46:34:f7:68:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Mar 29 04:01:35 2026 GMT
Not After : Mar 30 04:01:35 2026 GMT
Subject: CN=54e8abef39780623a2fb3efa1fc7656a411e20b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:7c:86:72:a7:b2:05:12:d3:5b:55:db:54:
6a:90:ae:67:1e:d9:98:d2:ae:ec:3f:a3:97:8e:bb:
4f:09:8f:6a:da:89:d0:06:79:35:9d:82:ff:41:df:
33:6d:fa:17:8c:6a:89:da:00:22:7e:57:88:ea:69:
37:ce:7d:cb:d6:14:75:2b:b4:d7:dc:66:5d:9f:fd:
77:2e:d7:e4:97:38:12:d0:f2:9f:59:eb:ee:c9:94:
83:ef:f9:94:82:dd:45:76:80:d6:6d:69:61:1d:f6:
90:a2:ba:6e:a9:5c:b4:8c:e2:e0:be:f7:7b:14:ff:
85:ec:73:3a:75:63:5c:f4:26:95:92:0f:86:1e:09:
4a:13:f6:0d:49:bd:7a:7c:52:ac:2a:23:6e:b8:20:
53:7c:62:72:a8:15:b4:57:2f:f5:41:27:c4:d1:4d:
aa:cd:be:8f:81:54:55:fa:17:cc:45:57:68:5c:b8:
95:29:e1:2a:ba:d5:f7:3c:80:78:80:d4:73:64:7a:
2b:05:41:e4:4c:d2:62:6a:19:90:fc:0e:20:bc:61:
ee:ab:d9:43:7d:5e:53:f7:55:ee:d7:bc:60:84:0e:
45:9b:47:11:5a:c6:09:9e:a4:fc:63:63:38:fc:36:
b7:ff:f5:c3:44:75:63:e7:1f:63:00:77:61:92:9e:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:AB:EF:39:78:06:23:A2:FB:3E:FA:1F:C7:65:6A:41:1E:20:B0
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3a:ea:c9:54:87:0e:d5:6a:12:fc:24:e3:cd:dd:3e:7e:ed:
6b:d2:d7:35:51:fc:b0:d2:02:0e:47:2b:99:f4:2b:76:ef:3c:
51:b0:37:07:58:62:b9:80:4f:e5:90:2a:96:0a:28:58:d4:df:
06:ee:ef:61:50:f3:62:4b:94:ce:a4:17:f4:d9:41:1e:d1:54:
35:b7:a4:9d:74:73:cb:a2:06:cc:7a:90:df:81:8f:dc:a0:01:
2d:55:ad:10:39:07:11:cb:5f:2b:4b:e6:88:b2:8c:fa:99:13:
a7:31:77:c4:6e:ea:32:52:c9:34:ac:fb:16:6c:ec:69:ae:42:
82:19:9d:74:50:db:ba:ca:f1:2d:cb:fa:7d:61:25:57:3f:61:
8b:0a:c0:ac:f3:0c:87:48:25:21:b9:06:55:0d:61:a2:23:79:
0d:5e:25:3d:76:c2:3b:51:cc:9f:97:69:f5:46:d0:d8:d0:a6:
35:5b:4d:79:72:93:bd:db:8b:64:2b:ac:14:68:a4:4d:8d:d1:
f9:0c:e5:f9:d6:d9:ca:74:ef:c3:ad:4f:e2:3b:ff:7d:b4:e7:
68:6a:57:64:3c:3a:65:bb:94:f5:39:70:60:48:47:ac:27:38:
37:0e:90:4f:40:51:fc:b3:88:44:7a:ab:6c:3f:b5:7f:3c:c5:
04:97:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:33 2026 by rpki-client