Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: QBTsnWTRn+TM2LhWuYqm1hc4nEBAMhAvUZrt7hIkT8M=
Subject key identifier: CC:94:6A:99:04:00:CD:AF:3A:5D:6B:C0:09:AE:89:4D:BF:9F:9C:D7
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019E54EC6F24E90A2CEE6553F5FE6951766F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 1128
Signing time: Sat 23 May 2026 13:00:41 +0000
Manifest this update: Sat 23 May 2026 13:00:41 +0000
Manifest next update: Sun 24 May 2026 13:00:41 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: AibR1r1pXRkaQn5qFf7scVd1RDI.roa (hash: qzOWkpydAZtsN3Xi8/Y/7ngExjBFr7BtjOcVBL7m8u0=)
3: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
4: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=)
5: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: lslpOI8c+8hXFXAGZ7o8z29X8j8+VIt5o5XRX2DCWt4=)
7: jDxSBMWSjohu5v628YkiKBdFRCw.roa (hash: y62O2BZCFUd+VdwqqDL8Xt8x+VuksK9H256l1hzQejU=)
8: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
9: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:ec:6f:24:e9:0a:2c:ee:65:53:f5:fe:69:51:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: May 23 13:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=cc946a990400cdaf3a5d6bc009ae894dbf9f9cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:01:19:fd:d0:3a:75:4c:86:f6:66:aa:c2:
0f:ad:92:95:56:42:80:3e:71:90:04:f9:c5:01:bd:
dc:a0:5a:ed:e1:46:04:f9:69:da:db:3c:dc:ec:a2:
5a:b8:f0:3c:a9:8d:41:c2:69:da:b5:97:e4:ed:68:
69:64:28:7a:31:aa:ed:09:c9:97:c5:91:71:26:39:
2c:54:9f:27:e6:e8:18:99:e0:6c:03:ef:aa:3c:e9:
1f:58:5a:12:76:2b:9a:fd:95:d0:23:04:4a:62:3a:
22:94:e3:8b:7a:cd:de:3c:7f:29:a0:69:83:18:32:
50:94:0f:ec:68:25:da:73:6a:11:e6:4b:d9:85:c1:
ee:9e:ca:7b:57:ce:36:1f:6d:17:dc:0b:8e:7c:a9:
30:fd:9f:f5:72:c8:80:48:6b:1a:43:a9:6f:d3:5e:
0d:f5:e2:b7:be:61:b4:02:14:98:46:83:77:5a:75:
20:f3:67:56:69:f9:0c:49:21:d3:de:24:cc:1a:1c:
9a:05:d8:65:d4:de:83:56:6f:1d:bc:60:e7:e5:6c:
a2:f4:5e:54:df:4a:aa:db:15:58:e6:0a:5a:a2:6d:
ed:99:ab:e7:94:21:37:cd:b4:b7:59:1c:91:4d:0e:
93:28:5f:fc:fa:66:f3:8a:88:1b:6a:c9:f2:30:db:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:6A:99:04:00:CD:AF:3A:5D:6B:C0:09:AE:89:4D:BF:9F:9C:D7
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2c:89:62:bf:00:d2:7a:1a:67:b6:28:f0:76:5a:b1:b4:7a:
fa:ab:b4:a0:91:26:2e:6b:48:3f:f6:6e:4d:1b:58:65:4b:32:
95:9b:88:ec:e0:71:4c:e9:22:cd:5d:d3:aa:34:6c:22:84:a7:
03:d3:76:53:80:6b:a3:fe:8e:aa:ce:8e:11:ca:af:9f:87:f1:
85:9e:26:03:bd:46:01:94:09:02:19:68:c2:48:1d:b8:53:0d:
56:ad:6c:a2:72:24:db:ee:6b:79:40:7b:2d:0b:63:f1:d9:0a:
6c:f8:1d:81:ba:94:63:d0:e0:41:64:83:08:e8:05:98:b0:ed:
a8:2b:70:7b:8a:a4:60:ea:e8:87:f5:d4:f5:90:57:fa:34:96:
88:00:2f:79:55:e9:2c:6e:e1:c2:91:05:fd:94:1c:4d:8a:28:
af:c1:0d:19:e8:cc:89:71:f7:d6:d5:b3:f4:81:a3:4f:3f:5f:
20:78:c1:2a:7c:da:d8:9c:d6:e2:fc:e5:f8:35:11:5f:9b:92:
3d:db:f8:2b:17:18:22:f9:5c:1f:4f:c6:fc:03:a7:2b:77:82:
21:46:70:7b:49:4e:61:a7:a7:ed:71:a6:5d:38:68:b7:e0:dc:
dc:a3:8d:55:59:fd:a8:05:dd:83:47:f2:35:07:35:02:b4:97:
a3:a9:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:31:21 2026 by rpki-client