Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
File: bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json)
Hash identifier: r8AgB0pNrZyxNvudMXqVXOYj1WFyfYAGyPSDVvac4lg=
Subject key identifier: F6:A7:4D:83:4F:C7:CE:AD:E6:23:4A:AE:51:27:0C:1F:D5:67:C3:CC
Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
Certificate issuer: /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Certificate serial: 019CE55A78C91C245002700E382CB64D7F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
Manifest number: 0BFA
Signing time: Fri 13 Mar 2026 04:00:37 +0000
Manifest this update: Fri 13 Mar 2026 04:00:37 +0000
Manifest next update: Sat 14 Mar 2026 04:00:37 +0000
Files and hashes: 1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: vL7AGsbQF/NPzF3g2Czh0+XTx/MLAdplTsMRaKtg/wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:78:c9:1c:24:50:02:70:0e:38:2c:b6:4d:7f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Validity
Not Before: Mar 13 04:00:37 2026 GMT
Not After : Mar 14 04:00:37 2026 GMT
Subject: CN=f6a74d834fc7ceade6234aae51270c1fd567c3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:5c:63:10:53:d2:7c:85:77:e6:b8:59:11:
78:ca:61:dc:a8:6c:23:c4:28:a1:34:e2:8b:a3:e6:
87:3d:6a:6b:30:6a:d2:2c:e6:0b:3b:e4:ae:84:10:
b0:f3:14:60:e9:d8:a0:f0:97:42:f9:d1:a5:af:0e:
e1:ed:aa:b1:76:72:a1:3a:4f:36:6e:aa:8d:38:43:
02:d4:1b:3d:88:0b:31:6f:5c:a6:93:fb:61:ad:0d:
1d:af:70:9e:45:ca:29:44:61:5a:ef:92:45:bc:36:
73:0f:aa:3c:87:f3:a7:91:ed:1f:26:ee:bc:98:d7:
52:fc:1e:f2:44:db:e0:a8:88:ca:3f:35:15:49:8e:
a4:43:e2:83:f1:e7:1e:18:63:19:2f:11:8c:0d:36:
d9:a3:ab:a1:7f:07:1e:19:62:f4:ee:50:36:a0:a8:
41:5e:df:79:06:d0:7c:9a:49:22:24:f7:64:ca:60:
63:a1:2a:70:47:87:e0:9f:d8:d0:a4:40:2b:06:53:
de:89:a4:b9:24:e7:e5:c2:82:b9:17:2b:75:ae:6f:
32:f7:bd:7a:6a:dd:11:93:57:74:e0:3c:b2:6b:71:
86:8a:96:df:40:7b:93:0e:37:aa:f5:0b:f6:c9:40:
9d:2d:15:ed:d8:8d:cb:b2:06:4b:7a:9f:62:1e:aa:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:4D:83:4F:C7:CE:AD:E6:23:4A:AE:51:27:0C:1F:D5:67:C3:CC
X509v3 Authority Key Identifier:
keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:88:5d:ef:ba:84:b5:1c:bd:9b:95:9c:7a:73:65:52:3a:
b0:ee:6e:92:e4:1b:90:a0:c7:42:40:60:fc:f8:bc:3c:ea:c8:
22:59:ca:43:ce:6a:d4:84:6e:9e:e5:4c:bf:09:d4:ec:c6:b8:
18:c7:36:2b:1c:cc:ee:c9:f0:c4:54:36:c5:eb:b9:a0:83:71:
0c:77:da:b8:a4:08:d1:24:93:ae:4a:3a:ef:6d:ff:a8:4b:e3:
4d:b7:35:2c:67:e2:84:e9:a6:e2:6f:96:e9:ec:05:e7:f3:67:
35:34:b8:51:7d:2e:4b:a0:34:07:a8:91:ae:0a:1e:d2:c7:c3:
de:de:7d:74:2d:b1:d2:fd:fe:ce:c4:c5:77:73:6f:00:d5:35:
0d:29:5f:c6:e7:55:a6:a7:05:ec:44:19:5e:13:b5:cb:38:06:
8c:12:31:89:6a:76:c4:c8:b3:70:79:dc:03:67:ef:7b:0a:71:
b5:ec:5a:69:c6:77:d4:b9:2a:65:8b:2d:f5:66:b0:31:1f:c6:
a6:e7:1d:64:23:bd:41:66:eb:03:14:7e:59:8f:86:20:f4:2d:
b5:09:3c:ee:44:8c:66:f9:e5:d8:1d:29:53:ef:a0:56:cf:a7:
22:f6:e4:f8:67:03:12:8e:95:c2:57:a8:0c:bc:21:3a:51:ac:
ea:57:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:22:03 2026 by rpki-client