Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: yEbWBnroWFicIfJDmwoJ921WZqX2Ins8fwUVSZdDueo=
Subject key identifier: 51:B7:33:53:10:1E:CA:B2:20:17:B8:AD:59:E4:55:84:EF:08:C4:48
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019CEF702742FE90EF80CDE139539085DA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0CEA
Signing time: Sun 15 Mar 2026 03:00:30 +0000
Manifest this update: Sun 15 Mar 2026 03:00:30 +0000
Manifest next update: Mon 16 Mar 2026 03:00:30 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: evKtKDvMyySOhuP5QNaWrPRmRNqIQWTIPNkGalew9lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:70:27:42:fe:90:ef:80:cd:e1:39:53:90:85:da:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Mar 15 03:00:30 2026 GMT
Not After : Mar 16 03:00:30 2026 GMT
Subject: CN=51b73353101ecab22017b8ad59e45584ef08c448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:70:c4:bf:f3:b2:de:02:ce:58:49:f1:a5:
49:96:a1:1d:d4:06:e1:0c:22:84:74:28:65:cb:d5:
7f:69:89:c0:86:20:20:90:1a:93:a4:ff:e6:a4:3e:
38:e2:ed:b9:11:a9:a4:48:49:75:04:a8:b0:fb:8f:
5e:04:38:c7:5c:1e:d4:a5:32:66:2c:1b:2f:6c:f5:
67:fc:a8:d6:e8:c1:74:0d:d9:b0:16:ac:89:78:d4:
44:55:1b:c5:0e:2d:47:13:0e:a6:e2:5d:db:f4:19:
bb:4b:e1:3d:ea:63:84:32:ea:ce:ad:e9:86:e4:b8:
37:ff:96:47:0c:e5:c9:32:8b:1b:6b:73:b7:9f:22:
1f:73:d6:fe:fc:bc:db:8c:67:80:82:81:6c:4f:eb:
83:c7:ce:84:73:b7:c3:9c:3d:01:36:f8:b4:da:b6:
58:ad:f4:75:9b:8f:73:80:c6:67:69:b7:b4:95:05:
cc:b3:f3:2d:10:22:04:80:0f:3d:c5:66:19:69:b3:
0b:bd:1e:72:19:70:25:f8:11:19:6d:ed:a3:9d:4c:
95:22:db:3e:c9:fa:24:37:dd:2e:0a:f2:46:81:29:
c0:ae:a3:f1:6c:b0:07:0e:e0:15:9a:67:32:84:c9:
53:82:79:b2:0e:4a:01:3a:5b:f1:2e:dd:b1:8d:3b:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:33:53:10:1E:CA:B2:20:17:B8:AD:59:E4:55:84:EF:08:C4:48
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:6c:72:dc:f5:c9:a5:4e:2d:5b:5d:4e:a2:f6:a5:9a:97:
5d:ca:ea:79:44:bf:bc:fb:fe:86:fc:2a:33:fa:63:3b:35:dd:
e8:ae:93:12:54:38:9d:2b:e0:56:90:6b:76:20:cf:3d:d6:31:
66:86:a3:7f:62:bb:a1:c2:fd:5e:66:ce:2a:8e:8f:46:df:a0:
92:9c:cb:40:b4:e2:34:d9:f4:b2:1e:04:84:c0:a2:61:f0:ef:
cb:ca:5c:f0:cc:a2:1d:a3:af:f1:63:29:6b:ed:22:fc:f2:3e:
2d:9e:d5:ca:55:1d:11:5b:31:34:8d:63:92:4f:9a:f3:a2:54:
ec:12:e6:61:59:91:58:e3:23:71:e1:82:d9:53:b0:bb:23:00:
5f:32:07:b0:b3:6c:20:cc:8b:0d:0e:7e:49:ab:50:a4:7d:36:
a8:b2:db:56:f8:60:5d:6d:97:27:c0:85:dc:89:d7:a6:91:da:
78:ec:ee:dd:a4:1a:de:6e:cb:e2:26:a4:c3:f5:7e:aa:39:cd:
6d:ab:9f:cc:1b:5f:eb:88:66:60:de:12:12:d7:08:77:ce:f1:
7a:74:5e:4b:67:b8:10:3e:05:66:17:e3:1c:a2:a1:41:3f:10:
ef:9b:9b:11:c3:9c:a0:4a:5f:49:c8:09:96:68:b5:24:e2:c2:
23:56:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:22:34 2026 by rpki-client