Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File: bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier: ktiVaK6UwTABlhsy6M8KkBzs6g7DiKC/hV7624MOkDA=
Subject key identifier: 94:74:4C:11:76:37:4D:AD:6C:2C:E5:17:F4:86:97:EE:AB:7D:CD:68
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer: /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial: 019CC67566248CB9A14E7933920F82094D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number: 1C
Signing time: Sat 07 Mar 2026 04:01:48 +0000
Manifest this update: Sat 07 Mar 2026 04:01:48 +0000
Manifest next update: Sun 08 Mar 2026 04:01:48 +0000
Files and hashes: 1: 1j0v6CTKjKHoeHupvW1VryYAU0Q.asa (hash: Y9y1TGorxkMNGkkP+ukQKU1wNgOPabfj1IxCSuv+2dI=)
2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: mSn8W8eHHKuLXN35SxZ/bo7or5HjSv5TCE2B81X4i60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:75:66:24:8c:b9:a1:4e:79:33:92:0f:82:09:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Validity
Not Before: Mar 7 04:01:48 2026 GMT
Not After : Mar 8 04:01:48 2026 GMT
Subject: CN=94744c1176374dad6c2ce517f48697eeab7dcd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:d8:2f:17:6d:1a:cc:05:bd:00:6a:c5:3c:
83:02:43:96:59:9d:7c:f4:05:3d:b5:cd:b5:b1:da:
2b:65:8e:10:a2:b5:83:2a:ab:2b:ee:0b:74:c0:95:
4b:af:61:61:f6:a2:66:c4:74:ad:e8:e3:f0:a2:2c:
b6:4a:16:41:01:5c:39:56:96:d7:88:29:30:b3:7a:
9d:33:49:89:8f:f0:0e:1f:76:7c:f3:ee:6c:82:88:
a3:28:32:16:9f:f2:20:2f:2f:0a:56:03:1b:ad:f9:
b7:a0:1f:08:e6:16:fb:b4:96:8c:74:a6:94:22:ae:
41:9d:39:1e:85:ab:21:26:24:39:44:71:7f:90:3f:
c0:bc:62:fa:21:2b:03:ac:d5:3d:b3:a5:32:44:c7:
da:b3:b6:9d:93:10:c6:12:81:9d:e7:be:83:48:19:
7b:84:5a:58:38:cc:3e:17:8b:1c:92:8a:14:2c:a9:
28:60:1f:f3:82:8e:2d:99:3d:06:96:08:6a:4d:08:
39:39:9c:1c:e6:8d:a3:96:b2:73:6e:d2:06:55:04:
ca:f7:3a:87:5b:2c:79:eb:90:a8:a1:01:71:9b:6c:
44:ef:e8:0b:e4:c5:86:2d:4b:ca:02:31:ba:47:a9:
7f:18:13:39:8b:7d:2f:36:9f:63:f0:39:b7:5f:f0:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:4C:11:76:37:4D:AD:6C:2C:E5:17:F4:86:97:EE:AB:7D:CD:68
X509v3 Authority Key Identifier:
keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:08:51:b1:53:c1:6c:20:8f:77:e7:ef:6c:4c:74:1f:3b:35:
98:f2:6c:c9:5b:69:38:2c:c1:36:ee:77:d5:8e:4b:e0:c1:4a:
a5:71:78:3a:a0:b4:17:03:2f:ea:59:c9:e8:91:71:eb:55:74:
93:63:ec:47:cc:52:8d:a4:dc:cb:22:af:3b:63:08:91:77:31:
01:52:e1:2f:99:8e:41:2b:67:58:a2:96:b1:39:1b:58:d4:ec:
27:71:a9:52:90:ad:44:63:b3:d2:96:70:ec:48:82:9a:0b:31:
4c:7f:13:81:1f:e2:87:70:0c:10:38:1d:81:f7:23:1a:e5:58:
2f:af:c2:24:7b:43:c2:b8:65:92:83:49:86:db:75:75:cb:81:
79:b0:ec:ba:d0:69:d2:cf:90:6c:46:e8:ad:a8:90:21:e4:08:
90:da:79:57:73:eb:17:1b:34:43:af:58:c2:66:4b:81:8a:65:
8a:2e:43:6d:4c:aa:38:a3:5f:89:b1:fe:c5:6a:fa:96:49:aa:
6b:3b:c4:88:d1:90:43:9d:32:07:61:91:ff:ef:3b:c8:13:d1:
ff:10:78:27:30:2d:07:3e:7a:43:6f:7a:fa:77:ca:9e:7d:39:
dc:ff:55:8b:37:d4:74:13:47:48:7b:35:79:ac:55:c8:31:2e:
fb:a5:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 05:44:23 2026 by rpki-client