Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: icFOTGsJtoHW26Xm4wh+ZVyN/kvRWUlH+76Qc+N5I7c=
Subject key identifier: 76:9E:EB:B9:EE:68:6A:FE:86:6A:5E:97:AF:A5:47:F9:B8:13:57:74
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019D416905AD9A654BA34EB524A0958C5660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 1097
Signing time: Tue 31 Mar 2026 01:01:34 +0000
Manifest this update: Tue 31 Mar 2026 01:01:34 +0000
Manifest next update: Wed 01 Apr 2026 01:01:34 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: KH6F+IQDIj3FYtX275CEMy8+ntg+utFJ+uz2FrORCuM=)
6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:41:69:05:ad:9a:65:4b:a3:4e:b5:24:a0:95:8c:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Mar 31 01:01:34 2026 GMT
Not After : Apr 1 01:01:34 2026 GMT
Subject: CN=769eebb9ee686afe866a5e97afa547f9b8135774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:7f:72:0d:fc:b6:f6:84:d0:cc:c8:0d:ed:
49:2d:aa:15:60:57:9d:4e:f9:1d:0b:30:a4:72:f7:
2b:f9:a8:31:81:9a:3a:e8:c3:d9:94:20:ef:0a:12:
53:d2:82:6d:03:95:3b:05:41:b1:82:cc:5c:ea:ff:
b3:c2:bb:bf:ab:e1:29:34:f1:f5:2e:c6:c9:15:e0:
25:2d:53:fa:fd:0a:ff:56:2c:c4:58:cd:c7:ae:b4:
41:2a:20:a7:33:5a:ff:cd:40:c8:e3:95:b7:ee:b6:
ca:56:7d:4e:d4:fd:5f:ae:28:b0:ab:0f:a2:3f:e7:
01:0f:3f:88:1b:16:26:39:65:3c:35:75:23:2f:74:
e7:ec:3b:a3:2a:9d:8d:3d:7f:3a:62:5c:b3:76:e3:
2b:1e:c8:3d:21:36:c4:97:9a:9b:f3:11:4d:2b:f2:
b5:08:dd:aa:6a:a3:a2:75:80:34:d3:a6:45:62:2d:
23:2c:45:4b:31:28:6c:0b:a3:37:c1:3a:d4:5d:bf:
37:6b:22:36:1e:e7:48:71:fa:c2:5e:3d:10:4b:d3:
9b:17:6e:eb:ba:c4:a5:68:93:c2:89:27:0a:55:e0:
e3:fe:ac:b6:63:f3:34:ab:47:91:b6:7a:e6:e0:16:
93:93:b7:a6:1a:72:56:df:38:a1:68:99:8d:cf:62:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:EB:B9:EE:68:6A:FE:86:6A:5E:97:AF:A5:47:F9:B8:13:57:74
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:df:58:d9:11:fd:5c:fa:83:7a:50:07:c4:f5:68:4d:73:80:
c7:49:02:5e:5c:06:c3:11:25:6e:89:0e:a5:51:28:44:44:a2:
d6:91:33:e8:dd:ca:35:d4:fc:38:72:31:60:da:bf:ee:b6:5e:
f9:2e:5a:c8:a0:5a:bf:82:5a:4c:8b:97:97:c4:99:ca:18:70:
a6:57:a0:55:b5:bc:72:7a:bb:17:8f:8f:a3:28:aa:73:cb:99:
aa:fa:66:0a:39:b7:3c:91:08:e0:10:4f:ff:2b:03:0b:63:27:
d4:7a:db:9a:24:dc:8d:8d:a2:ed:fd:2a:b2:22:60:7d:e6:3f:
c1:bd:9c:2c:95:ba:33:de:f0:2c:f2:db:f8:0c:d7:30:51:ba:
9f:16:86:6f:46:14:af:71:c1:e4:bc:c0:15:61:12:7d:76:c0:
3c:dc:d3:cf:a5:d4:d1:1d:33:13:11:8e:fd:c7:bc:44:07:bf:
19:96:0c:08:38:d1:9a:69:6a:f2:37:19:74:bf:6a:b8:b5:eb:
71:55:f5:b1:f4:31:93:53:1d:b1:19:f8:55:df:22:05:13:15:
39:01:d4:2c:5b:3f:34:1a:8a:6d:90:0a:e4:ac:dc:e7:10:4e:
0d:b1:37:10:42:87:cd:ab:0f:be:42:b0:ab:9f:8e:34:8a:7d:
d1:94:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 07:03:22 2026 by rpki-client