Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json)
Hash identifier: Zbl+gOlmGYo4GqubhHPL35ookBOFRLqYND7ZDbwkc1M=
Subject key identifier: 2A:1F:96:94:A8:56:09:35:C8:55:E2:16:B1:AB:98:CE:EC:52:99:2A
Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Certificate serial: 019D38661CEC7F5885BA3A08961471394535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
Manifest number: 022D
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: 5wY_n2E9m5Fm8AHGBhePkR6VYWk.roa (hash: ZBwa+iIbx4TsdQ1LjVsQwUbo717HhRLxWJOE/WzCBUk=)
2: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: b00SHF48c20nTzAiiWfZDoR/dNjwSbuARUKe0F7O5M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1c:ec:7f:58:85:ba:3a:08:96:14:71:39:45:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=2a1f9694a8560935c855e216b1ab98ceec52992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:3d:ad:1c:8f:3d:18:88:e2:15:a0:cd:bf:
9c:34:b2:c0:28:06:1c:af:6f:73:46:9c:51:89:c2:
d5:19:6c:e0:7d:90:58:f4:6b:4a:bc:44:c2:00:5a:
28:37:4c:2c:4c:88:c5:8e:15:f4:6c:64:21:b0:d9:
3f:00:d4:93:04:ca:8d:de:33:57:ae:5b:7a:09:96:
21:f0:b7:f9:7c:4e:3c:5e:c5:ee:90:49:a9:e8:ac:
75:00:e7:d4:51:00:a0:f7:c5:6b:a7:76:a8:60:2e:
df:29:f7:41:a2:18:a7:6e:e2:49:e7:86:48:41:f8:
e6:d9:01:34:da:8f:86:89:88:cc:4c:a9:55:e5:fc:
36:4b:87:e6:9a:67:d7:a3:3d:79:f7:24:00:cc:a7:
32:96:42:f5:f8:3e:49:b9:6b:ba:c5:f0:1e:7a:9e:
30:98:bc:a2:01:31:d5:1a:2d:ae:91:be:91:33:dc:
b0:f2:8b:7a:4e:0a:57:5f:9d:59:9a:6b:47:34:34:
e9:55:61:ec:dd:51:77:e1:44:a0:b9:f2:bb:08:da:
1f:ec:be:f4:f3:8a:be:08:f0:98:30:69:b3:fe:00:
ac:d4:49:87:70:73:77:01:15:d7:18:95:2d:4f:46:
be:8b:35:9b:f5:f5:1f:14:96:f2:ee:af:7d:e8:ff:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:96:94:A8:56:09:35:C8:55:E2:16:B1:AB:98:CE:EC:52:99:2A
X509v3 Authority Key Identifier:
keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:74:d4:20:aa:a1:3c:90:ee:93:34:ec:ff:4f:b8:83:ac:
ef:c9:df:31:3d:93:96:53:8d:97:35:42:05:08:4f:5e:3b:1d:
07:81:67:eb:49:78:e2:45:96:34:b5:14:f0:56:82:ed:73:5e:
fe:f4:fb:6d:2c:8d:18:6d:71:23:5e:5b:39:89:40:5e:2e:41:
03:69:31:71:2c:14:16:fe:ea:ae:30:e0:a5:9d:60:60:fc:88:
48:e0:f4:ad:a1:e9:bb:c8:c8:4a:6c:c8:bd:bb:57:78:1e:17:
1f:d6:c9:59:cb:9d:90:4a:c9:2f:85:0a:62:3f:ea:1e:43:09:
58:8f:ea:85:92:8c:cc:9a:aa:f7:26:0d:eb:9f:e3:89:d1:13:
98:6d:f7:15:3e:9e:cd:c1:16:8f:a0:ca:b5:4c:bd:44:1c:27:
c3:38:f4:4c:bc:64:5e:3a:6c:7d:25:a6:19:e0:57:89:a9:83:
ca:01:e1:a7:e3:31:00:4c:c9:e4:b5:32:f5:2f:ff:0f:1c:78:
ce:e7:2a:76:b0:60:e2:22:d8:e8:b7:a6:c6:31:e1:5f:9b:22:
ad:5a:45:f9:39:88:c9:fe:2e:bd:01:97:81:12:f4:6e:95:c7:
d7:07:fc:b5:78:16:2e:f8:7e:6e:61:fe:c6:40:6b:e8:fa:b0:
eb:ed:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:50 2026 by rpki-client